Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/167493a4-b551-3b2f-910d-3da51a22bfb2.roa
File:                     167493a4-b551-3b2f-910d-3da51a22bfb2.roa (raw, json)
Hash identifier:          Bmec9SSBslBCj52rJJi+/cj9wJiql4jLja3hSssjPBk=
Subject key identifier:   D1:AA:C9:86:0A:93:06:D4:1A:37:D4:16:F3:41:8D:DA:11:D5:45:14
Certificate issuer:       /CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
Certificate serial:       010D0C9F4328576D51CC73C042CFC167C50B6272
Authority key identifier: F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/167493a4-b551-3b2f-910d-3da51a22bfb2.roa
Signing time:             Wed 19 Dec 2018 05:58:36 +0000
ROA not before:           Wed 19 Dec 2018 05:00:00 +0000
ROA not after:            Tue 30 Sep 2025 04:00:00 +0000
asID:                     38895
IP address blocks:        54.231.227.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:c5:0b:62:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc
        Validity
            Not Before: Dec 19 05:00:00 2018 GMT
            Not After : Sep 30 04:00:00 2025 GMT
        Subject: CN=1fe98f1b-1eeb-4e61-800b-bfb365d88c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:21:d6:c3:72:7b:06:0c:b6:ee:fd:80:fb:6e:
                    6a:90:07:bb:2e:ba:0b:d7:5e:03:af:3a:64:b6:48:
                    f9:52:14:27:d5:d0:21:f8:b1:55:79:83:df:12:da:
                    37:f6:96:68:2f:2a:0d:54:a1:6d:44:18:eb:cd:f9:
                    ad:56:b7:99:fa:27:ac:e3:f2:05:0c:05:81:8d:21:
                    30:62:d0:52:22:6a:b1:d7:b0:a5:85:81:df:a6:66:
                    b3:09:92:43:6a:95:fd:8d:ec:33:e4:b6:96:48:73:
                    1d:ce:db:3b:99:5a:bd:05:18:45:f8:c8:21:52:93:
                    19:8a:55:73:8e:fb:34:4e:0b:9b:a3:f4:e8:83:3d:
                    05:4f:af:64:f0:f8:17:2d:3a:6d:26:81:18:28:c1:
                    3b:ab:12:27:34:e5:5e:d9:d7:81:9c:a4:ef:18:a7:
                    e0:22:9d:48:0c:e6:3b:82:d8:44:6a:75:e9:36:d2:
                    fe:46:53:f7:f7:0a:fc:72:84:f0:f1:1d:91:78:03:
                    66:f2:9b:42:64:f8:57:8a:0e:c7:1f:b0:c4:d9:15:
                    91:92:95:a2:01:a9:5f:31:17:16:8c:4f:84:86:bb:
                    fa:52:b9:2d:df:93:ee:46:d0:37:52:e9:97:ee:c1:
                    fb:63:50:44:17:b2:c2:fa:22:d7:a3:4d:8e:3e:bc:
                    eb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AA:C9:86:0A:93:06:D4:1A:37:D4:16:F3:41:8D:DA:11:D5:45:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/167493a4-b551-3b2f-910d-3da51a22bfb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.crl

            X509v3 Authority Key Identifier:
                keyid:F8:37:C2:C1:C4:FC:C1:A2:C4:DE:EF:C5:AB:4A:66:4B:BF:3F:B6:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/249bc1a5-1b2b-49e9-92ac-f53f7a2d45fc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  54.231.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:a4:9e:dc:68:51:f1:f5:e8:bf:5b:b8:40:a5:3a:b2:6f:44:
         4a:df:66:8b:d3:43:5e:b9:5a:70:f1:06:34:de:81:89:54:bd:
         3c:5b:df:7c:4b:11:36:d1:df:93:c9:e1:cb:83:9f:72:ce:36:
         2c:0c:39:0c:62:7f:4d:b0:e6:0b:9c:89:bb:55:2e:c0:ac:e2:
         ac:48:51:ea:df:88:93:c8:02:0a:f1:7b:fd:85:32:5c:c8:f1:
         6e:a8:06:a8:30:09:cd:f8:c8:01:3b:9c:e8:09:e1:9f:13:d5:
         21:48:c8:05:f7:7e:35:d5:4f:00:fa:8e:1d:38:58:ae:16:3f:
         5b:0f:ca:c1:a3:f3:79:8e:00:0b:2d:b1:88:36:dc:ef:6b:a0:
         75:27:c9:d6:0d:2a:59:cd:a3:30:f8:58:fa:f6:bb:cc:a7:c4:
         c8:5f:e3:62:c6:f6:ae:81:1d:fd:22:1e:9e:a7:e2:22:02:70:
         41:45:7c:71:a9:ea:97:fc:33:a4:93:85:5b:71:f7:c1:c9:17:
         bc:6b:f3:8c:9e:54:bc:b8:ec:fc:79:dc:86:2c:cd:a5:65:6b:
         13:0f:ed:bd:bf:fa:ed:3e:a6:37:36:36:db:fc:6f:0e:ed:a1:
         bf:95:a0:14:c6:6d:1e:cd:0f:15:8e:49:98:78:5d:54:ab:cd:
         22:75:4d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----