cfssl gencert -initca ca-csr.json | cfssljson -bare ca

 cfssl gencert \
  -ca=ca.pem \
  -ca-key=ca-key.pem \
  -config=ca-config.json \
  -hostname="127.0.0.1" \
  -profile=default \
  ca-csr.json | cfssljson -bare ssl-cert-snakeoil