Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/7f118946-4675-318e-9837-62c8a5c03543.roa
File:                     7f118946-4675-318e-9837-62c8a5c03543.roa (raw, json)
Hash identifier:          vZQGU9BULk6zDhomf0imfsqEOes9oMWfEp4xqWpqM0U=
Subject key identifier:   9A:79:D1:37:60:AC:CC:22:6D:6E:F9:5A:34:C7:A5:87:D0:D2:2E:C1
Certificate issuer:       /CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
Certificate serial:       010D0C9F4328583A420B527EEBD8BBFBE0143340
Authority key identifier: F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/7f118946-4675-318e-9837-62c8a5c03543.roa
Signing time:             Mon 31 Mar 2014 04:00:00 +0000
ROA not before:           Mon 31 Mar 2014 04:00:00 +0000
ROA not after:            Sat 30 Mar 2024 04:00:00 +0000
asID:                     11071
IP address blocks:        64.37.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:42:0b:52:7e:eb:d8:bb:fb:e0:14:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
        Validity
            Not Before: Mar 31 04:00:00 2014 GMT
            Not After : Mar 30 04:00:00 2024 GMT
        Subject: CN=cd970a72-86d6-417f-b893-e5d47fbafbf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:74:de:69:1e:ea:40:5c:2e:b7:db:c2:a4:22:
                    5a:0d:d9:d4:23:2d:f3:31:33:6d:f7:8a:fb:fd:ce:
                    ba:e3:a3:1f:61:49:2b:8f:a6:f1:f1:28:70:73:7f:
                    30:39:f8:d3:39:fa:ba:ff:2a:cd:a8:3b:11:a9:cf:
                    d0:43:1e:0b:71:63:7c:69:f3:13:1e:1a:4a:4a:a2:
                    10:ad:ce:34:a1:d0:14:c4:96:77:40:5d:32:99:e0:
                    bb:ac:26:c0:62:59:91:0f:4c:4e:aa:f5:21:23:46:
                    a9:d7:0b:c5:0c:fb:10:87:0e:33:09:e1:be:89:ba:
                    bf:0f:39:0b:ed:fe:77:97:b1:84:8a:a6:0f:ed:13:
                    f7:fa:10:09:4a:5e:8c:5a:0f:f0:22:96:5d:26:90:
                    0c:ad:11:c5:8d:13:41:26:8c:30:24:18:45:cb:92:
                    56:49:98:f4:a8:7e:88:ba:ce:96:bb:bf:2f:54:d5:
                    ef:3c:7e:8a:38:00:03:9e:39:09:e2:87:a6:c5:3b:
                    b7:41:99:69:34:71:07:c8:93:53:09:24:c5:8a:88:
                    62:cb:6f:23:74:55:68:f6:f7:99:61:36:d4:5a:df:
                    1c:35:42:80:a0:a6:af:43:45:3e:28:26:fa:ae:9d:
                    de:0f:26:39:b2:55:f1:91:86:e3:ee:d6:cb:23:ff:
                    d1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:79:D1:37:60:AC:CC:22:6D:6E:F9:5A:34:C7:A5:87:D0:D2:2E:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/7f118946-4675-318e-9837-62c8a5c03543.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/d4482104-b7a8-4919-8b27-9583ddf9e8dd.crl

            X509v3 Authority Key Identifier:
                keyid:F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.37.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:0c:01:97:c9:ca:e0:d6:8a:e7:95:68:75:29:38:48:37:27:
         17:66:70:f8:33:68:4b:8c:a0:9f:76:39:68:3b:16:37:de:88:
         ed:f2:3f:f3:b7:53:45:bb:ae:58:e4:51:a1:7a:b7:df:eb:47:
         b8:02:38:db:58:3e:37:4c:9d:1b:d1:05:38:7b:5b:45:b5:ae:
         33:8b:4b:90:d9:b8:aa:48:24:86:b3:90:23:c6:1d:4c:70:b3:
         2b:33:cc:8f:99:d4:43:ff:db:1f:7a:06:04:4d:09:9f:57:84:
         22:81:7f:70:32:76:2a:2b:88:61:e4:d6:75:db:a4:a4:ad:ac:
         30:3d:54:2d:9b:15:7f:fc:a6:5e:1e:6d:81:9d:4d:d8:2e:87:
         c6:31:b3:84:e5:60:64:3d:98:e5:3f:b0:eb:23:cf:84:3e:b5:
         ad:3f:a0:37:d6:a7:f3:2e:09:61:75:5d:be:25:30:c4:85:6c:
         ce:94:e5:78:b5:03:f3:a9:0f:86:e1:5e:f2:7a:e6:20:1a:8f:
         3c:6e:6a:ba:d3:4b:f0:68:1e:35:8c:63:e1:3e:ad:2e:9a:cf:
         c7:b8:af:23:a8:76:d6:11:c2:83:5f:f5:f0:43:8a:3e:cf:15:
         3a:e5:d9:42:5b:f5:7a:50:c0:56:8a:a3:2b:ff:bc:d3:40:61:
         24:61:92:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWDpCC1J+69i7++AUM0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ0ODIxMDQtYjdhOC00OTE5LThiMjctOTU4M2RkZjll
OGRkMB4XDTE0MDMzMTA0MDAwMFoXDTI0MDMzMDA0MDAwMFowLzEtMCsGA1UEAxMk
Y2Q5NzBhNzItODZkNi00MTdmLWI4OTMtZTVkNDdmYmFmYmYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXTeaR7qQFwut9vCpCJaDdnUIy3zMTNt94r7
/c6646MfYUkrj6bx8Shwc38wOfjTOfq6/yrNqDsRqc/QQx4LcWN8afMTHhpKSqIQ
rc40odAUxJZ3QF0ymeC7rCbAYlmRD0xOqvUhI0ap1wvFDPsQhw4zCeG+ibq/DzkL
7f53l7GEiqYP7RP3+hAJSl6MWg/wIpZdJpAMrRHFjRNBJowwJBhFy5JWSZj0qH6I
us6Wu78vVNXvPH6KOAADnjkJ4oemxTu3QZlpNHEHyJNTCSTFiohiy28jdFVo9veZ
YTbUWt8cNUKAoKavQ0U+KCb6rp3eDyY5slXxkYbj7tbLI//R2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJp50TdgrMwibW75WjTHpYfQ0i7BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDQ4
MjEwNC1iN2E4LTQ5MTktOGIyNy05NTgzZGRmOWU4ZGQvN2YxMTg5NDYtNDY3NS0z
MThlLTk4MzctNjJjOGE1YzAzNTQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQ0ODIxMDQtYjdhOC00OTE5LThi
MjctOTU4M2RkZjllOGRkL2Q0NDgyMTA0LWI3YTgtNDkxOS04YjI3LTk1ODNkZGY5
ZThkZC5jcmwwHwYDVR0jBBgwFoAU8CQcq/9JBg5dFqhzbarFyIJnlfcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDQ4MjEwNC1iN2E4LTQ5MTktOGIyNy05NTgz
ZGRmOWU4ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQCUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF8MAZfJyuDWiueVaHUpOEg3JxdmcPgzaEuMoJ92OWg7FjfeiO3yP/O3
U0W7rljkUaF6t9/rR7gCONtYPjdMnRvRBTh7W0W1rjOLS5DZuKpIJIazkCPGHUxw
syszzI+Z1EP/2x96BgRNCZ9XhCKBf3AydioriGHk1nXbpKStrDA9VC2bFX/8pl4e
bYGdTdguh8Yxs4TlYGQ9mOU/sOsjz4Q+ta0/oDfWp/MuCWF1Xb4lMMSFbM6U5Xi1
A/OpD4bhXvJ65iAajzxuarrTS/BoHjWMY+E+rS6az8e4ryOodtYRwoNf9fBDij7P
FTrl2UJb9XpQwFaKoyv/vNNAYSRhkmc=
-----END CERTIFICATE-----