Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/274e076f-22b5-30c9-8ccd-ac289db6f51e.roa
File:                     274e076f-22b5-30c9-8ccd-ac289db6f51e.roa (raw, json)
Hash identifier:          Ygxt+usWrEbc99x/Sas9gy/juMXG6lxTIdcocVWgjnM=
Subject key identifier:   EE:A0:34:1C:85:46:64:97:AD:E5:CA:F4:06:33:60:43:10:5B:28:6A
Certificate issuer:       /CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
Certificate serial:       010D0C9F4328576D51CC73C042CFC1676558E33C
Authority key identifier: F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/274e076f-22b5-30c9-8ccd-ac289db6f51e.roa
Signing time:             Fri 30 Nov 2018 15:59:43 +0000
ROA not before:           Mon 31 Mar 2014 04:00:00 +0000
ROA not after:            Sun 31 Mar 2024 04:00:00 +0000
asID:                     11071
IP address blocks:        204.130.209.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:65:58:e3:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
        Validity
            Not Before: Mar 31 04:00:00 2014 GMT
            Not After : Mar 31 04:00:00 2024 GMT
        Subject: CN=3efd0a36-30d7-42eb-9b6d-9da98458f8d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0e:5d:90:ee:8f:71:a1:5d:1e:ba:01:bc:fb:
                    2f:2b:2a:7c:f4:3f:1b:47:47:e0:3b:67:bb:be:68:
                    dc:7a:fa:0a:27:d8:46:47:e4:9f:de:da:76:03:35:
                    ad:2d:04:53:12:96:b1:92:49:f2:92:dc:1e:29:82:
                    ee:fd:ec:8b:3a:3e:23:75:02:bb:70:37:c3:7a:9b:
                    42:34:db:53:98:22:dd:11:6c:4f:9b:7a:2f:0a:b9:
                    00:32:5f:4f:fd:be:fe:84:58:5a:bb:3d:00:28:6e:
                    9e:63:b6:aa:a5:23:be:58:40:5d:66:e6:4b:59:1d:
                    be:59:d6:38:97:3d:21:fd:3b:f1:21:52:0b:5a:07:
                    9d:c5:27:a4:36:8f:5b:15:0b:63:45:0b:d2:55:bb:
                    47:d6:74:c3:15:cc:a4:8e:c3:e7:30:1f:22:05:ee:
                    8a:d7:9a:0e:24:72:4b:ea:3c:e7:ee:33:51:ff:58:
                    34:b3:6f:e2:9d:97:13:04:11:f1:d9:f2:72:18:73:
                    52:c2:f9:5d:cb:1b:d7:65:f8:ec:d5:8d:22:9b:f5:
                    64:6d:a8:72:37:9e:55:c1:5a:06:54:cf:a9:e4:a3:
                    f8:03:84:40:7a:99:f3:ca:09:f7:8a:c3:b7:01:e7:
                    23:ae:37:d5:25:f8:49:f3:40:e1:94:45:03:98:ae:
                    93:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:A0:34:1C:85:46:64:97:AD:E5:CA:F4:06:33:60:43:10:5B:28:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/274e076f-22b5-30c9-8ccd-ac289db6f51e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/d4482104-b7a8-4919-8b27-9583ddf9e8dd.crl

            X509v3 Authority Key Identifier:
                keyid:F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.130.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:2c:b6:d6:af:b3:2b:ed:25:34:5a:8f:5e:73:79:40:01:1a:
         b0:cc:67:df:31:4a:56:13:51:12:18:20:5f:1b:c0:2f:1a:e0:
         81:36:55:71:72:3b:85:26:7b:a0:3c:2f:f8:37:71:9d:22:3a:
         59:58:a2:fa:b3:f9:8d:88:10:4b:d9:ea:01:ee:0c:c6:76:b8:
         45:7a:10:bc:1b:4d:6f:30:bd:d9:c3:99:f3:2e:82:4b:75:db:
         1d:10:1a:55:02:fb:ac:a1:2a:ea:31:ce:c4:45:53:62:f1:ce:
         a2:8b:da:19:30:e3:2b:d3:b3:dc:e0:4e:16:e4:22:63:b3:b1:
         33:29:c7:d8:84:0a:95:85:9c:9c:29:89:e8:0a:ad:42:e9:96:
         51:e2:26:23:b4:de:6e:24:e1:f0:55:71:9a:be:d7:5b:e7:7a:
         bc:f5:df:b1:fd:7d:b2:2b:69:da:e7:eb:eb:b7:a8:6d:f4:86:
         9d:55:65:1b:3c:16:9e:a1:b8:83:7a:39:5f:b6:51:a2:fd:36:
         58:e7:df:2d:dc:a7:ff:53:a7:68:dc:d9:23:11:d2:99:b2:e6:
         f2:c0:79:af:bf:6b:87:41:d2:f9:83:b4:92:05:63:d0:9f:55:
         2f:18:ce:96:91:a4:13:25:72:29:77:41:01:33:db:da:cc:ce:
         16:33:3a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----