Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/1aa802d6-e16f-3bac-874f-b798eb2e6389.roa
File:                     1aa802d6-e16f-3bac-874f-b798eb2e6389.roa (raw, json)
Hash identifier:          P7Y3cbaE4n9tvIBy3a8wrPYlSI2eOybdQBNwsed0eao=
Subject key identifier:   72:6C:14:B6:96:22:B5:E3:8C:74:85:7F:AF:1D:B3:2B:57:59:A4:89
Certificate issuer:       /CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
Certificate serial:       B7D41218093D1995830A5935F2DF112955BFF3
Authority key identifier: F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/1aa802d6-e16f-3bac-874f-b798eb2e6389.roa
Signing time:             Tue 01 Apr 2014 16:06:00 +0000
ROA not before:           Mon 31 Mar 2014 04:00:00 +0000
ROA not after:            Sun 31 Mar 2024 04:00:00 +0000
asID:                     11071
IP address blocks:        199.66.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b7:d4:12:18:09:3d:19:95:83:0a:59:35:f2:df:11:29:55:bf:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
        Validity
            Not Before: Mar 31 04:00:00 2014 GMT
            Not After : Mar 31 04:00:00 2024 GMT
        Subject: CN=a1cd85f8-62ac-477e-9916-9d004f15cb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:aa:3c:00:48:6c:c5:40:8d:f8:ab:62:17:d9:
                    6b:0d:c8:ef:5d:52:ab:c6:1c:9b:ec:75:64:e9:3b:
                    8d:c9:2e:17:60:17:a2:ee:f3:c8:61:8a:14:ab:ad:
                    4a:a5:1d:5b:e6:7a:94:fa:26:7a:e7:88:57:02:63:
                    18:a4:9d:c4:a3:94:34:b9:24:f2:da:f5:e1:53:32:
                    7c:20:c3:78:4c:88:c2:2a:56:b4:84:74:7b:c2:43:
                    10:ed:41:13:ee:d3:6f:5e:be:08:8d:6e:c3:7d:30:
                    57:ca:4c:18:d7:86:b3:af:58:f4:93:0a:e2:b9:e4:
                    dd:ee:13:e8:d8:c3:df:87:ad:ae:cb:07:15:be:b9:
                    e4:eb:fc:82:2b:99:c2:eb:72:8f:1c:3b:ab:ae:ed:
                    a5:f1:6a:da:92:34:e5:e3:2c:9d:c9:25:7a:ec:40:
                    a3:79:8e:56:67:50:f3:b9:0a:1d:75:f9:b2:8b:bb:
                    29:31:e0:ea:d1:11:6d:37:0a:a2:28:a7:a1:17:d5:
                    76:59:ec:99:3f:f8:c6:f7:9a:c7:bf:9e:a3:cc:b2:
                    2a:bd:ed:6a:2c:1a:38:e9:1c:4b:f2:ec:2e:80:78:
                    c8:59:bc:3b:7b:64:4b:75:ba:14:fb:33:73:3a:0a:
                    e2:91:c8:f9:3a:c6:39:7d:35:78:1b:4c:29:82:0e:
                    78:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:6C:14:B6:96:22:B5:E3:8C:74:85:7F:AF:1D:B3:2B:57:59:A4:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/1aa802d6-e16f-3bac-874f-b798eb2e6389.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/d4482104-b7a8-4919-8b27-9583ddf9e8dd.crl

            X509v3 Authority Key Identifier:
                keyid:F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.66.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:91:d1:55:21:9a:5e:72:8a:f2:64:17:35:d0:89:74:dc:8b:
         75:75:6f:03:ff:02:85:6d:d1:04:4c:44:4f:39:55:2e:e6:72:
         83:d7:76:fd:63:e1:64:05:13:69:9d:07:4c:6c:25:10:40:6c:
         34:2c:e2:d8:83:c9:4b:ad:34:96:38:e4:ca:e0:cf:47:72:6b:
         83:7f:1d:50:b6:f6:a6:0e:21:77:89:4d:24:4c:bf:53:eb:c4:
         d7:30:80:36:27:8a:f8:ab:63:2c:d8:14:c4:47:3b:b8:60:98:
         e1:2d:0b:f0:3e:37:f9:e9:15:4a:e5:9b:f5:aa:5a:34:b8:4e:
         93:24:c1:29:f3:e8:e1:da:76:d3:89:9b:a3:ba:21:b6:f8:df:
         8c:2e:02:8a:e4:21:47:7b:8e:50:c3:5b:a9:ed:00:40:41:ab:
         3a:f8:88:a7:cf:b7:c5:37:bd:9e:a0:55:c8:b1:19:c7:2a:98:
         9b:51:55:59:49:11:4c:c5:67:99:35:c6:ba:e5:df:69:4d:35:
         b3:5d:41:d1:e2:35:a0:52:53:a3:13:0b:e1:37:5d:dd:0a:9d:
         df:aa:8c:7b:e7:8b:2d:be:97:f8:2a:98:eb:77:1b:9e:b3:6a:
         a4:36:bc:da:69:bb:13:f1:f5:69:ae:a5:ad:ab:07:8c:fb:d5:
         07:e6:58:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----