Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea9c13f1-7f04-3b92-99a3-2305f2b3881a.roa
File:                     ea9c13f1-7f04-3b92-99a3-2305f2b3881a.roa (raw, json)
Hash identifier:          bv8iffRQOaA6MKduvhVuSumPJdEtTFxGEWkPoQJi80k=
Subject key identifier:   F8:F9:A9:2B:D5:D7:5A:3E:EA:B5:AB:78:E6:C8:64:D1:F8:16:33:61
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC1665D25A097
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea9c13f1-7f04-3b92-99a3-2305f2b3881a.roa
Signing time:             Wed 10 Oct 2018 08:43:59 +0000
ROA not before:           Wed 10 Oct 2018 04:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     16509
IP address blocks:        54.251.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:5d:25:a0:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Oct 10 04:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=e00ee33c-e0b7-4a78-b60a-492b537f9c63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:80:b9:00:31:d7:31:14:4c:a9:da:f4:fe:df:
                    08:d4:5e:88:69:a4:28:49:8f:82:b6:09:80:3c:eb:
                    1d:7e:34:48:d2:82:b0:cc:6d:47:3a:77:da:f0:0c:
                    34:55:a8:e2:c4:19:a1:d9:19:34:96:4c:34:c7:26:
                    5d:6a:54:3f:a6:9d:57:bf:27:28:ce:90:98:05:c4:
                    78:82:49:22:77:f7:f4:4b:c5:2b:b2:30:32:b3:64:
                    93:b0:0a:a5:14:10:c4:8d:6f:d1:9b:94:1c:fb:92:
                    cb:cf:40:95:32:3c:64:d1:00:b8:27:b1:c6:aa:05:
                    aa:95:81:4c:b9:13:40:0b:76:b0:7a:fe:09:14:4f:
                    3a:11:7b:11:86:17:75:bd:d3:16:f9:86:7f:80:3d:
                    d8:06:9e:52:e2:cc:41:26:28:36:a8:57:7b:ae:b3:
                    96:0b:d7:fd:c8:d5:24:b4:f9:ac:d0:8a:45:e9:21:
                    e9:70:02:07:40:2d:26:d2:bf:33:24:f4:4e:36:3c:
                    5a:12:71:59:cd:43:9f:57:c6:20:61:a6:a3:1f:d2:
                    cf:48:76:a4:7b:cb:cc:a7:34:23:48:fb:37:d1:43:
                    f2:53:e5:cf:34:94:55:7a:81:22:ce:15:e1:48:12:
                    b1:bd:36:62:0a:95:e9:57:46:0d:ac:83:3c:fb:f8:
                    92:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F9:A9:2B:D5:D7:5A:3E:EA:B5:AB:78:E6:C8:64:D1:F8:16:33:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/ea9c13f1-7f04-3b92-99a3-2305f2b3881a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.251.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:14:db:a9:94:9c:1f:35:89:b8:1a:85:8e:9f:2e:6b:aa:9b:
         a2:fc:19:6c:a5:93:37:44:d8:87:76:76:ec:2e:ff:a8:af:7b:
         19:74:3e:83:eb:62:a3:00:4b:2a:82:40:31:dc:32:e9:1c:8d:
         44:ae:d1:54:a5:10:1e:bf:f9:16:d3:2b:e6:d3:93:5b:7e:c9:
         40:04:10:90:04:7a:4c:91:57:b6:72:ac:57:99:1a:7a:29:40:
         ae:31:e1:ec:e0:c2:35:da:57:cf:7f:8e:52:d3:c8:1a:77:38:
         8f:cf:78:ed:78:e9:f7:6d:97:16:8c:95:39:87:4e:23:be:7c:
         92:fd:a8:b7:0d:d5:cd:af:f0:ad:69:16:2f:40:78:1e:e9:3b:
         ab:30:6d:26:cc:a6:d9:bf:42:e0:53:df:77:de:ec:5a:99:7f:
         c4:8e:41:28:06:d9:24:b1:05:d2:d2:fa:32:7a:f2:2d:64:f6:
         78:eb:b2:51:92:06:78:b2:c6:b9:e7:ee:ce:f5:f8:17:00:d4:
         9d:64:2b:83:ed:57:67:8f:fc:73:f3:0f:c4:d4:d0:28:e2:0d:
         ae:05:71:72:fe:4d:e7:0f:48:9a:e6:f5:7e:ac:7c:0a:df:7c:
         c0:29:80:ba:86:4f:aa:35:1c:26:72:44:b5:4c:b3:46:a7:32:
         0f:14:54:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----