Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/751356bf-0ab8-37fc-9f88-d3900822bd84.roa
File:                     751356bf-0ab8-37fc-9f88-d3900822bd84.roa (raw, json)
Hash identifier:          UQS8mnT93n17wWNUjzqi2rnWAEIdAsyzQOJyjVHOUu4=
Subject key identifier:   34:12:8F:C5:21:E7:85:E9:40:CC:7E:34:CA:3F:5E:02:71:67:0A:69
Certificate issuer:       /CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
Certificate serial:       010D0C9F4328583A420CC3B953315EA5B0A18500
Authority key identifier: F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/751356bf-0ab8-37fc-9f88-d3900822bd84.roa
Signing time:             Mon 31 Mar 2014 04:00:00 +0000
ROA not before:           Mon 31 Mar 2014 04:00:00 +0000
ROA not after:            Sat 30 Mar 2024 04:00:00 +0000
asID:                     11071
IP address blocks:        104.152.60.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:42:0c:c3:b9:53:31:5e:a5:b0:a1:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
        Validity
            Not Before: Mar 31 04:00:00 2014 GMT
            Not After : Mar 30 04:00:00 2024 GMT
        Subject: CN=8d96e5b0-b9d3-4364-92b1-bae574bfdc2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2f:9e:75:28:f7:44:09:3c:d4:8b:d4:ab:a1:
                    1a:24:6a:68:e7:3f:d2:c4:97:2d:71:fb:47:8a:17:
                    68:4e:d1:3a:51:61:08:34:bd:fd:d9:d2:70:9a:fb:
                    e5:89:8b:05:2f:e5:13:7d:44:20:ca:cb:e3:40:06:
                    0b:c9:8a:33:14:d2:98:dd:95:ba:3e:c2:4c:56:61:
                    da:db:09:af:20:37:6f:7e:18:b8:44:97:0b:6f:ac:
                    e7:41:af:de:3a:80:1e:e2:71:43:2a:a5:a6:dd:a4:
                    f6:6a:d9:66:15:d1:cb:fa:d6:76:fa:3d:51:3a:ea:
                    e5:45:2e:57:13:58:fa:94:7c:b0:d9:47:1d:ba:12:
                    12:06:13:e8:1b:61:4e:36:03:ee:a9:c8:fe:0a:af:
                    a1:a9:55:54:34:e5:ca:da:b2:45:86:10:19:a6:b3:
                    6b:7a:b1:82:ca:8a:c3:de:85:71:83:74:1f:db:cf:
                    6b:10:10:10:65:1c:44:86:65:9f:1a:43:90:07:19:
                    72:ff:8d:9c:df:cc:8c:ad:06:94:a4:63:e3:fc:3f:
                    fa:10:9e:13:a6:04:88:fb:85:b0:4e:2d:39:e5:99:
                    3d:20:87:9c:d5:e9:c1:ba:5d:d7:6a:ad:44:67:c5:
                    67:47:a2:d1:e0:9b:5d:b3:e9:c0:29:35:17:45:57:
                    53:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:12:8F:C5:21:E7:85:E9:40:CC:7E:34:CA:3F:5E:02:71:67:0A:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/751356bf-0ab8-37fc-9f88-d3900822bd84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/d4482104-b7a8-4919-8b27-9583ddf9e8dd.crl

            X509v3 Authority Key Identifier:
                keyid:F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:2b:3a:b8:99:e5:cf:3b:04:2e:86:b6:dd:26:1b:ed:ec:48:
         32:30:e0:88:50:e7:88:1b:2b:e3:a5:ef:b5:84:00:ba:81:2e:
         11:f6:e5:25:ec:09:12:e2:42:61:3d:2a:f4:87:3b:9d:29:c2:
         94:f3:53:8c:ef:44:44:be:61:86:ba:29:9b:e5:82:eb:59:2a:
         d2:a9:34:89:56:3d:0f:03:ef:ef:ad:92:8f:a7:5d:f7:0d:b3:
         50:0c:af:f1:c2:e3:9e:60:43:02:1b:a5:af:e5:d6:91:92:2d:
         95:f1:ce:7b:0f:30:46:d3:d0:86:a0:85:0c:40:42:e5:a8:cf:
         fd:bc:c7:a5:19:f8:78:6f:8f:59:dc:77:79:bc:a5:80:ec:6b:
         c6:ec:f0:61:eb:b7:2b:ed:55:0e:70:28:18:08:1f:28:08:82:
         07:9e:e7:73:ba:5d:b4:da:2f:40:10:42:03:e5:cf:a4:35:e1:
         bb:5a:41:5e:8d:4b:ba:e0:8b:ec:64:bf:f6:47:4c:72:31:d4:
         31:2e:19:26:9f:03:91:9c:ee:c5:90:ba:00:c3:ea:be:34:2c:
         5e:35:31:7a:d2:71:1f:d5:5d:c4:24:2a:0d:81:8d:cc:97:d6:
         31:43:e3:9f:70:13:dc:60:ad:9a:34:d9:15:11:32:a3:6e:f0:
         44:e9:f4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----