Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/7ccb7840-b6c4-35dd-9d7b-def51a01f5e1.roa
File:                     7ccb7840-b6c4-35dd-9d7b-def51a01f5e1.roa (raw, json)
Hash identifier:          KJ6Qtxipjf+IRMBQGETXDOYNSlEOPqZdFclYHguq89I=
Subject key identifier:   88:10:B5:B7:20:7D:13:4B:25:F2:25:58:89:AB:B8:8C:A4:DB:9D:D9
Certificate issuer:       /CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
Certificate serial:       B42896ACC122E2B7F50D0147104E493493FA57
Authority key identifier: F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/7ccb7840-b6c4-35dd-9d7b-def51a01f5e1.roa
Signing time:             Mon 31 Mar 2014 21:53:54 +0000
ROA not before:           Mon 31 Mar 2014 04:00:00 +0000
ROA not after:            Sun 31 Mar 2024 04:00:00 +0000
asID:                     11071
IP address blocks:        2604:2c00::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            b4:28:96:ac:c1:22:e2:b7:f5:0d:01:47:10:4e:49:34:93:fa:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
        Validity
            Not Before: Mar 31 04:00:00 2014 GMT
            Not After : Mar 31 04:00:00 2024 GMT
        Subject: CN=e28feffc-4d68-4d50-8796-9a04d047a619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:6b:76:ce:8b:2a:90:67:85:dc:77:95:e7:31:
                    a2:dc:6d:ab:ca:25:0f:34:e7:ac:2c:91:28:8c:b0:
                    fd:2f:3a:e4:29:4f:60:ba:e7:75:eb:89:fe:16:6b:
                    2c:13:04:af:1b:74:55:73:2b:5e:d7:30:e2:9f:ff:
                    d7:3e:34:e6:d2:fc:88:ac:d2:b7:55:73:a3:99:c5:
                    0e:f3:26:e2:34:3f:76:5c:29:21:fb:c8:34:16:f9:
                    3c:1c:45:fc:66:1e:a0:ad:57:de:07:f0:ae:78:f9:
                    1b:e6:65:22:93:24:91:7e:1d:95:19:90:f6:48:40:
                    28:12:7e:e8:3d:41:45:31:98:25:d8:c1:69:03:31:
                    26:3a:e6:ab:09:50:7c:6a:38:e6:d8:aa:00:88:5b:
                    05:fb:3d:ac:c2:24:d4:35:50:5b:86:97:f4:c3:3a:
                    e8:54:c0:54:e1:41:2a:96:bf:5a:c8:9c:06:59:81:
                    c4:8a:49:a8:cb:3d:b9:25:62:7f:f9:fb:63:54:62:
                    0c:f7:e7:bd:85:68:87:d9:1e:f2:b5:ef:95:65:d6:
                    c2:1f:ce:bc:aa:bc:f8:85:1d:25:dc:fa:b1:d9:1f:
                    f8:b7:63:d8:10:fc:d9:0b:df:9b:d7:d5:20:45:2e:
                    6a:72:25:bb:14:cf:f2:4c:c0:1f:47:8f:cd:06:9c:
                    93:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:10:B5:B7:20:7D:13:4B:25:F2:25:58:89:AB:B8:8C:A4:DB:9D:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/7ccb7840-b6c4-35dd-9d7b-def51a01f5e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/d4482104-b7a8-4919-8b27-9583ddf9e8dd.crl

            X509v3 Authority Key Identifier:
                keyid:F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2c00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:3d:bf:dd:04:dc:9e:e6:f2:b2:b8:12:d9:b2:07:9b:81:f4:
         90:62:b3:44:3d:0b:7c:90:5a:b0:d7:5f:12:61:a9:95:75:67:
         2e:a6:67:f2:9a:ae:ff:4f:33:2a:54:48:99:19:0f:77:84:b7:
         2a:77:56:63:38:4f:5d:39:1a:aa:fa:6b:e0:5d:2d:1f:e0:5f:
         42:53:b6:b1:39:96:f9:bb:4d:82:17:f2:4e:28:04:0e:0e:98:
         6e:13:c3:e5:90:ab:21:82:6c:82:41:9c:f5:cf:97:c2:d7:a1:
         02:df:c1:8b:b1:8c:a1:86:2e:dc:ba:f4:85:9c:89:d5:fb:ee:
         96:39:3a:5d:e4:cd:c3:03:23:62:72:1d:46:f2:6a:74:90:62:
         03:60:83:de:b7:ea:56:2c:2e:3e:72:02:19:c4:cb:b0:f6:b4:
         f9:0e:94:b7:a2:41:43:55:3c:d7:63:3f:38:59:cc:b7:ca:c2:
         38:f6:d4:97:8b:e5:43:2a:db:da:ec:09:3a:36:6a:ed:53:43:
         08:58:cc:34:52:d4:ef:d5:89:e2:f6:b2:63:dd:dd:27:15:ab:
         b0:3b:2c:22:82:41:c9:a5:49:46:6e:07:aa:03:8f:6a:38:bf:
         09:c7:94:ae:da:6f:45:c4:ab:30:95:ad:9a:d8:cc:0f:c7:1d:
         66:a7:2e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----