Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b99c7994-75ab-36c3-9729-a5868f1020f1.roa
File:                     b99c7994-75ab-36c3-9729-a5868f1020f1.roa (raw, json)
Hash identifier:          8etUvZyM/TdQ2IfA4Sss16o6olf4G+rTu4wSMdpVDlE=
Subject key identifier:   3F:DB:0F:98:0C:0D:3E:44:65:0E:F1:FE:15:B6:93:AF:C1:1B:B5:D3
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC16695B5B701
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b99c7994-75ab-36c3-9729-a5868f1020f1.roa
Signing time:             Sun 21 Oct 2018 08:20:06 +0000
ROA not before:           Sun 21 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        54.249.64.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:95:b5:b7:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 21 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=ad8ae8b3-ba94-45df-ab23-7530f9b258dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:9a:e9:38:77:b7:b6:46:2a:a8:b8:c6:66:1c:
                    98:0f:73:49:6a:f7:c6:7d:2c:43:20:b8:4d:17:d5:
                    33:11:58:a9:b9:e7:67:53:f4:58:6c:2c:67:5d:71:
                    6c:4a:ef:f3:d7:1c:47:1e:3d:3b:24:07:9d:2a:7f:
                    ce:9b:71:59:d3:ae:84:65:8b:7a:91:e0:37:76:55:
                    49:60:68:56:79:c3:6e:4e:2f:1b:a1:24:b7:0d:79:
                    9f:b1:de:4b:d7:26:7a:57:5b:fb:f2:93:85:aa:19:
                    5e:f5:54:1c:f9:dd:c6:e6:ed:40:1d:11:4d:cf:48:
                    4e:86:8b:0e:50:33:ec:c5:c6:24:71:1b:0a:5d:a7:
                    18:8e:b7:d1:33:25:3d:ca:7c:ed:ca:79:91:04:a8:
                    3f:18:07:85:0d:b1:78:c2:da:82:a4:8f:8d:b1:47:
                    7c:6f:08:f6:12:ae:6a:66:cb:70:92:e1:ea:10:61:
                    b0:d9:b5:08:e7:63:42:e4:b1:6c:3c:b7:44:c7:df:
                    19:d7:f4:2a:3c:34:01:30:45:c4:44:1e:dd:6d:c2:
                    4b:5f:5c:40:27:04:24:c3:88:73:9e:2b:a3:42:b9:
                    23:c2:27:76:c3:50:4b:89:90:95:1e:45:58:05:c2:
                    d7:1a:37:78:52:13:06:8c:36:6f:13:fe:6d:5d:90:
                    93:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DB:0F:98:0C:0D:3E:44:65:0E:F1:FE:15:B6:93:AF:C1:1B:B5:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/b99c7994-75ab-36c3-9729-a5868f1020f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.249.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:a0:f6:39:76:4e:5f:3d:de:e5:a1:e9:b1:78:9e:a1:34:80:
         5d:b2:1a:60:05:cd:fb:d9:fd:9f:7c:87:38:24:0c:19:79:aa:
         27:67:9e:dc:ac:3c:f1:51:1b:b6:6d:e6:c9:ce:e5:77:b6:39:
         aa:53:55:1c:fc:12:6e:f0:06:8f:a3:57:17:77:4c:9b:6a:ec:
         f2:33:6d:78:1a:de:2d:6f:8e:47:57:81:41:16:b4:6a:02:c9:
         6a:57:1d:df:7f:3b:56:70:f1:3a:2e:d2:cd:bb:e7:bc:72:6d:
         50:dc:b7:22:1b:ca:54:c4:db:d2:84:9c:b4:90:9f:57:38:14:
         f0:53:62:52:ae:02:76:c7:81:ac:92:32:94:77:c8:aa:69:37:
         8f:71:4e:55:85:19:d9:e7:da:d3:50:fe:ec:64:22:c0:8f:fb:
         e6:f4:53:a1:db:5c:16:92:30:62:8e:30:ca:bd:90:8a:e2:80:
         16:41:3e:67:70:e3:c0:b9:d1:19:82:52:89:41:e3:48:eb:67:
         cc:cf:fb:4d:10:01:d9:1e:5b:b3:d4:89:c5:b7:e8:7f:0e:24:
         22:b5:64:6e:8a:52:0c:52:37:7b:66:8f:57:60:7f:bc:6e:f2:
         fd:7b:8e:68:26:4a:57:ce:39:88:a7:67:01:e4:f1:53:ed:41:
         06:81:3a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----