Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3c0710f8-837b-4164-b478-e2ff69aaea6b/b10f6a24-cf08-35ce-b5bd-2125bf61ce9a.roa
File:                     b10f6a24-cf08-35ce-b5bd-2125bf61ce9a.roa (raw, json)
Hash identifier:          lpt9hN9lTKcId6wDbtHsK95nTG3QKPrH7HTdvptbWCI=
Subject key identifier:   C5:B6:EA:A7:09:49:25:73:03:43:1D:FA:8A:60:5A:3C:9F:25:6B:C0
Certificate issuer:       /CN=3c0710f8-837b-4164-b478-e2ff69aaea6b
Certificate serial:       EF1188ECD845FEFDD9E00D638E44038BB39FCB
Authority key identifier: 51:1F:2C:0A:93:22:21:72:12:8A:64:16:15:FF:67:C5:A2:BE:1D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3c0710f8-837b-4164-b478-e2ff69aaea6b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3c0710f8-837b-4164-b478-e2ff69aaea6b/b10f6a24-cf08-35ce-b5bd-2125bf61ce9a.roa
Signing time:             Wed 20 Mar 2013 20:04:00 +0000
ROA not before:           Fri 26 Oct 2012 04:00:00 +0000
ROA not after:            Wed 26 Oct 2022 04:00:00 +0000
asID:                     32809
IP address blocks:        65.23.160.0/19 maxlen: 19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ef:11:88:ec:d8:45:fe:fd:d9:e0:0d:63:8e:44:03:8b:b3:9f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c0710f8-837b-4164-b478-e2ff69aaea6b
        Validity
            Not Before: Oct 26 04:00:00 2012 GMT
            Not After : Oct 26 04:00:00 2022 GMT
        Subject: CN=cd17780c-3991-4e5d-bf68-cb967186f563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e4:ea:57:e7:9f:ac:17:46:5d:72:93:b9:4f:
                    8d:d6:12:28:3b:3b:00:c8:3f:24:ea:03:6a:54:25:
                    46:15:a4:a7:86:53:c1:d9:5c:9a:8c:a8:fc:67:83:
                    fd:af:9e:63:4e:2d:11:9c:a9:0c:6a:12:21:a5:5c:
                    da:e7:f0:51:20:d9:18:27:c2:5a:a3:df:f5:82:81:
                    e6:60:f9:af:7c:c6:0d:5d:7b:dc:bc:7d:f8:aa:87:
                    75:b2:08:f8:cf:c7:4d:a4:c3:7c:3a:57:c5:d2:83:
                    90:0a:cc:10:3e:b6:7a:26:59:cd:3d:5b:ab:b8:2a:
                    e7:96:3c:4e:84:b8:eb:28:a4:94:16:62:f8:4f:40:
                    05:75:48:c4:bd:a5:e7:16:b5:26:72:48:20:5c:0e:
                    9a:d7:0e:55:b4:2b:ed:6b:62:87:75:e9:81:76:5e:
                    ba:7d:08:cc:4d:1f:b3:67:91:47:6d:9e:0f:06:a6:
                    00:c8:11:ea:23:47:31:da:fc:2d:1d:68:9b:ed:1e:
                    db:48:11:8e:3d:15:aa:1c:f6:00:cb:56:b8:ee:f6:
                    36:cf:dc:b1:11:94:ca:e3:16:a7:8a:7d:68:4b:c7:
                    5a:35:83:88:4d:ae:18:f6:ca:4f:81:e5:af:72:46:
                    53:b9:27:65:68:ec:d1:f1:d6:4f:59:0e:ad:91:51:
                    7e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:B6:EA:A7:09:49:25:73:03:43:1D:FA:8A:60:5A:3C:9F:25:6B:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3c0710f8-837b-4164-b478-e2ff69aaea6b/b10f6a24-cf08-35ce-b5bd-2125bf61ce9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3c0710f8-837b-4164-b478-e2ff69aaea6b/3c0710f8-837b-4164-b478-e2ff69aaea6b.crl

            X509v3 Authority Key Identifier:
                keyid:51:1F:2C:0A:93:22:21:72:12:8A:64:16:15:FF:67:C5:A2:BE:1D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3c0710f8-837b-4164-b478-e2ff69aaea6b.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.23.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2b:3f:41:4f:1a:26:a4:10:48:1c:f8:66:49:6c:69:48:70:2e:
         b5:d1:6f:ca:0e:c5:fa:df:b4:fb:e6:0a:4f:93:4f:3e:30:ff:
         30:f1:43:33:19:6e:99:65:0a:a2:e3:cf:8a:f5:aa:fb:f4:55:
         92:de:9e:e1:5a:76:a2:cf:31:67:a9:c5:af:75:15:a8:7a:a9:
         b9:2c:cd:a5:51:29:af:8c:ba:ef:dd:42:e4:ee:01:ae:2b:66:
         9e:8a:2c:f6:7a:05:c2:b4:c9:0f:de:39:01:d0:fe:59:fe:d4:
         8c:91:5d:aa:0f:68:b5:6d:a6:72:58:7e:fb:f3:14:d4:39:6c:
         4d:af:12:8b:0e:24:b9:68:ce:e9:81:1c:90:de:ff:76:ef:d2:
         60:f8:b6:72:98:c2:6a:5c:34:af:d1:f4:5e:2f:1c:9a:05:a6:
         c8:00:2d:8a:d8:46:af:b1:c6:25:b5:5d:da:af:12:17:f8:0c:
         a1:c5:75:4f:ce:c1:30:df:5e:1b:d4:c5:41:fc:9f:03:45:f4:
         0c:75:81:4b:1f:e7:99:c5:5a:ff:f9:77:29:d5:69:b2:b6:7c:
         b6:6d:08:c1:a3:4e:63:0c:fb:4d:1c:e5:e2:7a:cb:dd:ee:f7:
         91:64:6a:ed:17:f3:de:31:0a:d4:36:cc:0c:48:63:08:6f:b4:
         75:fe:4f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----