Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/8d0a0318-a616-3778-bc26-775ef6ab87e0.roa
File:                     8d0a0318-a616-3778-bc26-775ef6ab87e0.roa (raw, json)
Hash identifier:          Cg7bPaH5DBFpMJ/F2oIh+fpxELNFsa4rtK1tOLhAez0=
Subject key identifier:   09:52:8A:AE:42:6B:EE:6F:A6:16:C7:CD:5A:1C:67:C4:75:88:9E:26
Certificate issuer:       /CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
Certificate serial:       1F18AD5F12CFE28581732234E411BBA8787221
Authority key identifier: F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/8d0a0318-a616-3778-bc26-775ef6ab87e0.roa
Signing time:             Tue 01 Apr 2014 16:04:34 +0000
ROA not before:           Mon 31 Mar 2014 04:00:00 +0000
ROA not after:            Sun 31 Mar 2024 04:00:00 +0000
asID:                     11071
IP address blocks:        209.33.192.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:18:ad:5f:12:cf:e2:85:81:73:22:34:e4:11:bb:a8:78:72:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
        Validity
            Not Before: Mar 31 04:00:00 2014 GMT
            Not After : Mar 31 04:00:00 2024 GMT
        Subject: CN=a3e562cf-22e7-4d08-a86a-d0396b50d11c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:0b:ba:95:63:63:97:79:b5:0f:02:a7:2a:ef:
                    a1:05:75:f4:89:42:49:fc:ce:8f:b0:95:90:5c:40:
                    ed:9a:3c:02:16:6e:0d:ea:77:10:01:24:4a:d8:f1:
                    ba:23:f8:38:49:24:95:c7:a8:24:9e:c3:c6:49:6c:
                    16:77:76:a5:01:5e:9d:66:b3:32:b9:c2:83:6d:f8:
                    ed:72:4a:0f:68:8a:15:cd:52:a2:c0:b1:f4:da:0c:
                    aa:12:6b:7f:d2:4a:a2:b9:09:e8:09:16:2f:b9:84:
                    a5:d3:d8:63:58:df:d8:e4:dd:4a:fb:89:d9:b7:45:
                    4c:da:34:f0:d4:fd:df:c0:d9:62:b2:19:ac:89:aa:
                    85:22:71:5f:a9:67:30:14:0d:d3:e9:4d:29:72:41:
                    8f:15:4d:74:b4:29:33:f8:49:7e:da:7b:1b:13:76:
                    98:ad:8b:39:b5:73:20:3d:bd:92:aa:30:20:3f:8f:
                    20:83:94:69:bc:08:b9:e2:99:e3:d4:5c:b9:04:63:
                    6c:90:4d:50:bb:a2:bb:4f:ea:c2:78:d2:e8:dc:f8:
                    2c:1e:87:29:be:fb:14:b4:c7:a3:a3:d0:90:83:3b:
                    38:dd:23:bd:ae:0e:c4:4f:5b:69:e2:35:e9:d9:c7:
                    58:b3:81:68:41:c5:f9:2a:8b:09:34:25:c1:42:4e:
                    e8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:52:8A:AE:42:6B:EE:6F:A6:16:C7:CD:5A:1C:67:C4:75:88:9E:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/8d0a0318-a616-3778-bc26-775ef6ab87e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/d4482104-b7a8-4919-8b27-9583ddf9e8dd.crl

            X509v3 Authority Key Identifier:
                keyid:F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.33.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:41:cc:76:1c:84:f0:e2:10:41:d8:6d:1c:0a:18:7c:b6:5e:
         ef:9d:ba:e4:32:04:17:f4:9d:35:11:56:f2:62:0c:cc:df:a5:
         04:38:d7:ba:2d:83:b2:77:c1:85:4c:54:f9:c6:10:43:39:da:
         02:c4:fe:db:44:fe:61:0d:1b:fa:c9:f2:39:1b:85:9e:de:60:
         f5:50:14:35:46:e6:f0:3f:58:58:9d:1c:02:80:7a:c8:a3:b2:
         f7:3e:1a:ac:ae:30:d0:2c:23:cb:16:eb:32:12:dc:9f:5b:3c:
         5c:38:0b:ac:2d:0f:10:33:f4:ba:4b:1a:7b:52:9d:94:c4:c4:
         28:fe:af:a1:8d:a6:b1:d4:e7:5f:34:35:fe:32:9f:6d:dc:d0:
         15:04:d9:2e:27:55:9d:38:c3:63:f3:e7:d0:44:bb:21:4c:6a:
         e2:1a:0a:54:fc:13:7d:93:14:59:52:c8:84:cc:d9:f3:f6:47:
         3d:e2:5c:9c:63:72:c1:5d:d7:c4:c2:9e:bf:98:1a:c4:9a:05:
         c8:a0:a4:86:b3:7b:27:b2:20:30:94:61:c6:ac:96:7b:fe:de:
         e5:85:dd:24:93:e5:20:33:b8:7d:5a:3a:4f:d7:08:a6:c4:42:
         48:97:b2:97:ea:f9:ff:c4:f2:6a:8a:6c:b2:96:b7:7a:89:b7:
         42:9e:6e:6b
-----BEGIN CERTIFICATE-----
MIIGPjCCBSigAwIBAgITHxitXxLP4oWBcyI05BG7qHhyITALBgkqhkiG9w0BAQsw
LzEtMCsGA1UEAxMkZDQ0ODIxMDQtYjdhOC00OTE5LThiMjctOTU4M2RkZjllOGRk
MB4XDTE0MDMzMTA0MDAwMFoXDTI0MDMzMTA0MDAwMFowLzEtMCsGA1UEAxMkYTNl
NTYyY2YtMjJlNy00ZDA4LWE4NmEtZDAzOTZiNTBkMTFjMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEA2Au6lWNjl3m1DwKnKu+hBXX0iUJJ/M6PsJWQXEDt
mjwCFm4N6ncQASRK2PG6I/g4SSSVx6gknsPGSWwWd3alAV6dZrMyucKDbfjtckoP
aIoVzVKiwLH02gyqEmt/0kqiuQnoCRYvuYSl09hjWN/Y5N1K+4nZt0VM2jTw1P3f
wNlishmsiaqFInFfqWcwFA3T6U0pckGPFU10tCkz+El+2nsbE3aYrYs5tXMgPb2S
qjAgP48gg5RpvAi54pnj1Fy5BGNskE1Qu6K7T+rCeNLo3PgsHocpvvsUtMejo9CQ
gzs43SO9rg7ET1tp4jXp2cdYs4FoQcX5KosJNCXBQk7o4QIDAQABo4IDVTCCA1Ew
HQYDVR0OBBYEFAlSiq5Ca+5vphbHzVocZ8R1iJ4mMIHlBggrBgEFBQcBCwSB2DCB
1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9y
eS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1
N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDQ4MjEw
NC1iN2E4LTQ5MTktOGIyNy05NTgzZGRmOWU4ZGQvOGQwYTAzMTgtYTYxNi0zNzc4
LWJjMjYtNzc1ZWY2YWI4N2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHIhoHF
cnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVl
NGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYy
LTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQ0ODIxMDQtYjdhOC00OTE5LThiMjct
OTU4M2RkZjllOGRkL2Q0NDgyMTA0LWI3YTgtNDkxOS04YjI3LTk1ODNkZGY5ZThk
ZC5jcmwwHwYDVR0jBBgwFoAU8CQcq/9JBg5dFqhzbarFyIJnlfcwDgYDVR0PAQH/
BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3luYzov
L3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEt
ZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1i
YTA1LTg3MTg3ZjAwOTliMi9kNDQ4MjEwNC1iN2E4LTQ5MTktOGIyNy05NTgzZGRm
OWU4ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0SHAMFQGA1Ud
IAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cu
YXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwCwYJKoZIhvcNAQELA4IB
AQAcQcx2HITw4hBB2G0cChh8tl7vnbrkMgQX9J01EVbyYgzM36UEONe6LYOyd8GF
TFT5xhBDOdoCxP7bRP5hDRv6yfI5G4We3mD1UBQ1RubwP1hYnRwCgHrIo7L3Phqs
rjDQLCPLFusyEtyfWzxcOAusLQ8QM/S6Sxp7Up2UxMQo/q+hjaax1OdfNDX+Mp9t
3NAVBNkuJ1WdOMNj8+fQRLshTGriGgpU/BN9kxRZUsiEzNnz9kc94lycY3LBXdfE
wp6/mBrEmgXIoKSGs3snsiAwlGHGrJZ7/t7lhd0kk+UgM7h9WjpP1wimxEJIl7KX
6vn/xPJqimyylrd6ibdCnm5r
-----END CERTIFICATE-----