Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7d7fe4b5-0657-3df3-a286-13ec4d11b974.roa
File:                     7d7fe4b5-0657-3df3-a286-13ec4d11b974.roa (raw, json)
Hash identifier:          d6iOKoDv1H0VUFBhwUOCm/LsbThWB+toNoCd5eSXq1c=
Subject key identifier:   6D:E7:74:6B:17:04:B0:7A:AC:A2:9E:1A:64:9C:7C:80:55:A5:7F:26
Certificate issuer:       /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1667776872B
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7d7fe4b5-0657-3df3-a286-13ec4d11b974.roa
Signing time:             Mon 15 Oct 2018 11:22:28 +0000
ROA not before:           Mon 15 Oct 2018 04:00:00 +0000
ROA not after:            Mon 10 Apr 2028 04:00:00 +0000
asID:                     2914
IP address blocks:        129.250.113.104/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:66:77:76:87:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
        Validity
            Not Before: Oct 15 04:00:00 2018 GMT
            Not After : Apr 10 04:00:00 2028 GMT
        Subject: CN=2c3b01f5-cf8b-4aa0-bf74-d9da5f4244bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dd:68:ef:a5:d3:58:33:9b:1c:d4:f8:a2:25:
                    cc:1e:7d:c7:13:f2:31:ef:fd:bd:fb:e4:ed:2e:d1:
                    ce:a3:a7:bb:85:88:c0:8e:f0:84:b6:1f:f6:57:69:
                    15:eb:e7:92:49:a4:5f:18:e6:01:92:65:94:1d:33:
                    01:86:e8:0e:57:7a:b0:d7:b5:d6:17:f5:54:8d:dc:
                    52:69:51:b0:92:8f:f3:05:80:93:87:f4:95:b9:bd:
                    2e:a7:b9:25:1f:ff:cf:31:1f:26:8e:67:8f:b6:7b:
                    04:d8:5c:69:ce:9d:c0:ef:e7:6f:d4:6a:a1:a1:78:
                    65:3a:35:cc:f7:30:24:a0:a5:ec:c1:9e:70:2f:a2:
                    09:e4:d6:7b:a4:86:c6:0d:95:fe:f3:e3:5d:85:da:
                    f8:2e:e1:2a:e8:eb:bf:86:a9:e1:88:fc:3e:a0:e4:
                    57:65:9c:e7:cf:00:78:49:b2:15:cd:75:a2:ed:e8:
                    a3:80:a2:32:c0:8a:43:f0:7b:1f:03:db:15:2d:ba:
                    29:b8:41:82:69:d2:32:01:1f:df:11:d4:2d:1b:6c:
                    d0:43:42:61:23:25:24:83:0f:41:61:14:eb:60:2a:
                    e8:2d:b7:ff:19:37:3d:73:3a:d2:45:d6:02:cb:e6:
                    60:ef:bc:92:ca:cf:fc:59:7e:9a:23:8a:82:b5:a0:
                    4e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E7:74:6B:17:04:B0:7A:AC:A2:9E:1A:64:9C:7C:80:55:A5:7F:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/7d7fe4b5-0657-3df3-a286-13ec4d11b974.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl

            X509v3 Authority Key Identifier:
                keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.250.113.104/29

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:fd:37:76:c3:b3:3c:c3:f8:89:b1:80:1e:41:89:4a:a3:a0:
         16:a2:91:d8:9e:cb:83:16:f5:18:2a:e2:5b:3b:07:8b:a5:97:
         9b:81:cc:c4:c0:32:69:d4:ff:95:8f:0d:ff:89:3e:33:ec:9a:
         20:fe:99:f8:17:93:30:c0:b6:e0:1e:5f:b1:09:6e:18:1c:e0:
         b0:62:8f:30:e7:a1:4a:a6:cc:aa:1f:04:07:54:8e:35:39:68:
         29:97:8b:88:31:46:37:1b:32:25:4c:bd:67:7a:ec:12:d1:85:
         4d:58:63:de:72:52:cc:6b:f9:f6:6b:2b:e4:e7:2f:49:b1:65:
         5d:37:14:47:4d:aa:1a:4d:ca:8c:e1:c1:ed:69:4e:c4:3a:8d:
         4b:e8:ed:9b:58:24:3c:ab:c9:9a:99:36:a3:d9:30:a7:69:17:
         27:6c:4f:34:8c:c9:5f:d0:9b:3b:0d:e5:a5:10:d6:ca:8d:1f:
         5a:69:84:1d:d9:5e:c1:29:ef:4d:be:da:b4:dc:89:74:ea:48:
         04:cf:7e:34:6c:14:53:db:61:98:ee:1c:dc:ef:6d:81:1f:41:
         60:4f:9c:d0:16:c0:31:2e:12:a0:9d:91:33:da:0d:77:63:20:
         ba:0f:38:00:5f:fb:94:f7:02:1a:4e:44:d9:2a:51:c4:a2:72:
         24:2e:f1:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----