Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/ac2049eb-80a5-3db1-94ec-ba61003daec0.roa
File:                     ac2049eb-80a5-3db1-94ec-ba61003daec0.roa (raw, json)
Hash identifier:          puIRyDCUm2Rf+BuFxcfhcKLUObTkYYrqN0ijl+j1VqE=
Subject key identifier:   D8:54:37:C2:51:2D:38:CB:0A:2A:89:39:69:60:AF:32:27:02:EA:09
Certificate issuer:       /CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
Certificate serial:       010D0C9F4328576D51CC73C042CFC1677529C3F8
Authority key identifier: F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/ac2049eb-80a5-3db1-94ec-ba61003daec0.roa
Signing time:             Mon 03 Dec 2018 17:42:10 +0000
ROA not before:           Mon 31 Mar 2014 04:00:00 +0000
ROA not after:            Sun 31 Mar 2024 04:00:00 +0000
asID:                     11071
IP address blocks:        74.120.32.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:75:29:c3:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
        Validity
            Not Before: Mar 31 04:00:00 2014 GMT
            Not After : Mar 31 04:00:00 2024 GMT
        Subject: CN=08d09229-8cf0-4d31-8aca-48602327d951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d0:9b:42:a9:4f:70:81:1d:a3:92:07:52:dc:
                    1f:d6:80:a1:e5:5b:ff:f6:7b:66:e2:02:00:69:ad:
                    69:bb:42:11:c1:f9:dc:4d:cb:95:cb:13:46:31:75:
                    aa:0e:be:db:cf:2a:08:cb:b7:8a:9d:01:9d:58:71:
                    a3:46:68:66:83:08:89:7d:1f:a0:09:f6:a8:01:6c:
                    43:6b:53:95:7c:37:05:b9:9e:f9:18:ed:44:71:d5:
                    ac:57:82:d1:25:f9:2e:e1:4f:37:9d:31:eb:be:b7:
                    d0:07:12:b9:aa:3c:ba:5f:c8:20:b5:8d:6c:07:45:
                    21:1d:52:d1:82:6c:40:e9:b4:dc:be:58:2f:8a:76:
                    c3:24:7c:72:52:f1:bb:49:6c:79:25:2a:c8:fd:58:
                    cc:63:89:60:75:71:a1:e8:85:28:5a:98:b3:c1:ef:
                    c1:b1:1f:33:c0:65:fe:12:f4:c8:a4:4b:d5:39:fd:
                    1c:1d:02:6d:89:3d:f0:7c:71:26:53:ed:a0:97:06:
                    7b:20:f8:b1:83:80:2c:e6:e1:9e:e1:95:61:b2:6a:
                    2e:5d:14:36:6b:19:f8:fa:02:a7:e4:f8:1d:b2:a5:
                    1b:ed:c6:b0:39:60:6b:20:fa:e9:ce:e5:6c:62:38:
                    49:d7:34:4e:db:0d:ea:d7:0f:e2:61:07:bf:22:de:
                    2f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:54:37:C2:51:2D:38:CB:0A:2A:89:39:69:60:AF:32:27:02:EA:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/ac2049eb-80a5-3db1-94ec-ba61003daec0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/d4482104-b7a8-4919-8b27-9583ddf9e8dd.crl

            X509v3 Authority Key Identifier:
                keyid:F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:90:c7:b4:c1:12:07:34:31:0a:4a:ee:95:ad:20:cd:40:ea:
         31:b6:83:4b:f6:05:18:af:d3:1d:1e:c1:b1:d6:ab:2e:c2:a0:
         dd:01:9d:19:a6:d8:49:e9:2a:11:c5:f3:f2:60:46:1e:a5:47:
         42:c6:d0:30:7d:b6:72:b9:84:13:ea:71:58:2f:02:f2:f5:34:
         41:4c:c2:73:ef:63:55:15:f4:d4:97:fc:a6:98:18:44:b8:d8:
         f3:6f:c1:ad:3f:3c:87:9b:d0:6d:85:e1:10:0e:f3:d8:66:4d:
         01:2a:71:1f:a1:7a:a9:43:c1:9b:59:3b:c3:2e:b2:ac:c1:2d:
         6b:e0:b5:38:68:0f:59:4c:46:b4:f2:26:19:9c:2e:3b:2f:2e:
         3c:b9:1e:57:72:19:e0:28:bc:bb:bc:7b:86:76:d6:65:6c:46:
         69:8a:07:cd:6a:b8:87:97:6d:c3:5a:80:17:01:58:6d:f7:6c:
         ac:f9:8f:91:24:a4:65:2c:53:2f:ab:46:2b:05:b7:15:38:64:
         1e:87:81:ef:35:18:4a:06:5e:53:ad:94:5a:69:94:c3:61:63:
         6e:a2:71:17:ad:9b:ea:5f:e0:f6:ba:9b:e1:e2:41:82:35:d2:
         35:63:1d:33:b8:31:f1:10:21:60:bf:0c:6d:45:52:68:62:d9:
         1c:d6:c9:da
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BZ3Upw/gwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGQ0NDgyMTA0LWI3YTgtNDkxOS04YjI3LTk1ODNkZGY5ZThk
ZDAeFw0xNDAzMzEwNDAwMDBaFw0yNDAzMzEwNDAwMDBaMC8xLTArBgNVBAMTJDA4
ZDA5MjI5LThjZjAtNGQzMS04YWNhLTQ4NjAyMzI3ZDk1MTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANjQm0KpT3CBHaOSB1LcH9aAoeVb//Z7ZuICAGmt
abtCEcH53E3LlcsTRjF1qg6+288qCMu3ip0BnVhxo0ZoZoMIiX0foAn2qAFsQ2tT
lXw3Bbme+RjtRHHVrFeC0SX5LuFPN50x67630AcSuao8ul/IILWNbAdFIR1S0YJs
QOm03L5YL4p2wyR8clLxu0lseSUqyP1YzGOJYHVxoeiFKFqYs8HvwbEfM8Bl/hL0
yKRL1Tn9HB0CbYk98HxxJlPtoJcGeyD4sYOALObhnuGVYbJqLl0UNmsZ+PoCp+T4
HbKlG+3GsDlgayD66c7lbGI4Sdc0TtsN6tcP4mEHvyLeLz0CAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBTYVDfCUS04ywoqiTlpYK8yJwLqCTCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQ0ODIx
MDQtYjdhOC00OTE5LThiMjctOTU4M2RkZjllOGRkL2FjMjA0OWViLTgwYTUtM2Ri
MS05NGVjLWJhNjEwMDNkYWVjMC5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2Q0NDgyMTA0LWI3YTgtNDkxOS04YjI3
LTk1ODNkZGY5ZThkZC9kNDQ4MjEwNC1iN2E4LTQ5MTktOGIyNy05NTgzZGRmOWU4
ZGQuY3JsMB8GA1UdIwQYMBaAFPAkHKv/SQYOXRaoc22qxciCZ5X3MA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvZDQ0ODIxMDQtYjdhOC00OTE5LThiMjctOTU4M2Rk
ZjllOGRkLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA0p4IDBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAc5DHtMESBzQxCkrula0gzUDqMbaDS/YFGK/THR7BsdarLsKg3QGdGabYSekq
EcXz8mBGHqVHQsbQMH22crmEE+pxWC8C8vU0QUzCc+9jVRX01Jf8ppgYRLjY82/B
rT88h5vQbYXhEA7z2GZNASpxH6F6qUPBm1k7wy6yrMEta+C1OGgPWUxGtPImGZwu
Oy8uPLkeV3IZ4Ci8u7x7hnbWZWxGaYoHzWq4h5dtw1qAFwFYbfdsrPmPkSSkZSxT
L6tGKwW3FThkHoeB7zUYSgZeU62UWmmUw2FjbqJxF62b6l/g9rqb4eJBgjXSNWMd
M7gx8RAhYL8MbUVSaGLZHNbJ2g==
-----END CERTIFICATE-----