Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/2afea4e4-1652-3986-9077-c9571c0087d8.roa
File:                     2afea4e4-1652-3986-9077-c9571c0087d8.roa (raw, json)
Hash identifier:          ceWJCh6kY3wlsatSDlsFW7w8fmOMDCpwZ/v8kllxDY4=
Subject key identifier:   5C:22:50:05:24:82:C0:EE:B6:28:98:B7:FD:61:BF:EA:EB:63:E8:52
Certificate issuer:       /CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
Certificate serial:       8531ADD7D12818B3593F066E0885F67B1F78BC
Authority key identifier: F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/2afea4e4-1652-3986-9077-c9571c0087d8.roa
Signing time:             Tue 01 Apr 2014 16:05:15 +0000
ROA not before:           Mon 31 Mar 2014 04:00:00 +0000
ROA not after:            Sun 31 Mar 2024 04:00:00 +0000
asID:                     11071
IP address blocks:        64.255.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            85:31:ad:d7:d1:28:18:b3:59:3f:06:6e:08:85:f6:7b:1f:78:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
        Validity
            Not Before: Mar 31 04:00:00 2014 GMT
            Not After : Mar 31 04:00:00 2024 GMT
        Subject: CN=0e3e0ae3-1a0d-4afd-ae67-17d78044e4d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:75:40:9d:72:57:65:8d:fc:bf:e2:cf:92:1b:
                    03:68:2e:7f:4f:a2:c9:2d:4c:2c:e3:83:43:76:9b:
                    6b:19:50:6d:80:44:83:2d:99:1c:95:51:61:06:a3:
                    ec:1e:fc:65:7c:d4:66:7d:ec:21:23:38:3e:e2:c3:
                    e6:fe:8b:d4:97:ee:4f:41:14:eb:b1:35:19:07:7b:
                    77:bb:13:2d:e0:d2:21:c5:86:95:2b:59:80:ac:df:
                    7d:93:55:46:f2:8a:7f:e2:09:d7:ec:2c:b6:4e:b8:
                    f0:bc:cc:42:50:ff:a1:91:32:c7:ac:17:6b:e0:6f:
                    92:c2:f3:06:e1:02:4b:35:ba:e3:4c:c8:70:55:cb:
                    13:93:b8:1c:17:18:23:b1:5f:f4:ef:fa:db:cd:d8:
                    76:30:90:c3:51:21:b2:ae:2c:09:e5:75:54:e0:5f:
                    b5:bb:a1:36:b7:7a:7c:e3:8b:22:6b:ab:c6:b3:3a:
                    43:4a:23:ac:e1:62:3d:a6:8c:3a:82:c2:81:58:80:
                    eb:ab:38:1b:a1:47:20:90:c5:6e:84:08:66:f6:c2:
                    7f:be:f5:71:65:a5:49:c9:0f:e0:b3:a0:09:2c:1f:
                    61:b1:d3:6a:2d:83:c9:45:b1:d7:cf:2a:a5:68:d8:
                    4c:7f:61:35:e0:e8:3e:1f:93:2d:70:c4:53:3d:bc:
                    ff:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:22:50:05:24:82:C0:EE:B6:28:98:B7:FD:61:BF:EA:EB:63:E8:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/2afea4e4-1652-3986-9077-c9571c0087d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/d4482104-b7a8-4919-8b27-9583ddf9e8dd.crl

            X509v3 Authority Key Identifier:
                keyid:F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.255.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d0:a6:83:65:57:95:d2:94:f9:1c:bc:09:47:b7:a1:5f:d7:
         be:ef:02:3d:c5:6f:19:86:8d:8c:b7:ef:75:1e:e8:d1:10:15:
         2d:98:06:78:1f:e7:35:52:f0:21:d6:37:bc:a5:d5:9e:66:70:
         74:12:4e:0b:af:85:2f:49:a1:0d:e1:48:53:99:07:b9:72:ce:
         59:a9:a0:7a:de:ba:ab:23:a9:5d:ff:59:56:1f:ef:90:bf:75:
         94:51:6b:8f:58:98:e0:ad:fd:b3:b1:ff:e7:fe:0f:69:99:17:
         e7:0e:ed:22:11:4a:ba:df:49:33:c7:3e:5c:b3:84:09:bb:26:
         6c:39:03:b6:a9:a3:62:5f:11:a5:a6:09:7b:b1:ea:df:6a:40:
         cf:fa:cc:aa:71:54:34:fa:d7:e1:33:03:61:14:b7:da:e4:07:
         75:f2:e3:12:a3:e5:3c:91:75:3c:5d:2b:cd:02:d7:58:b6:98:
         b9:0b:19:76:c2:95:0e:b0:61:bf:53:2d:e2:e3:d2:a9:d1:a7:
         2b:6f:2c:ef:e9:23:6f:dd:b6:89:10:47:50:e0:78:f6:b3:ca:
         be:ec:c9:6d:9e:42:13:96:ac:d5:e5:b6:39:e3:3d:99:86:1d:
         fd:14:97:8c:e7:77:1e:65:4b:1d:da:0b:6d:35:82:56:ec:97:
         99:09:1a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----