Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/db176f6c-a8e2-337c-bb50-7b9d8dfaefb6.roa
File:                     db176f6c-a8e2-337c-bb50-7b9d8dfaefb6.roa (raw, json)
Hash identifier:          eT/Z43aWG5SE5EUlM7ie3E15rZOXYNcu7sONY/F5bqc=
Subject key identifier:   2F:6C:8D:1D:B9:C7:C9:6E:4C:48:BB:1F:08:F6:B1:FC:A5:F5:7A:73
Certificate issuer:       /CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
Certificate serial:       010D0C9F4328576D51CC73C042CFC167752A1F3C
Authority key identifier: F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/db176f6c-a8e2-337c-bb50-7b9d8dfaefb6.roa
Signing time:             Mon 03 Dec 2018 17:42:34 +0000
ROA not before:           Mon 31 Mar 2014 04:00:00 +0000
ROA not after:            Sun 31 Mar 2024 04:00:00 +0000
asID:                     11071
IP address blocks:        208.88.8.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:75:2a:1f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
        Validity
            Not Before: Mar 31 04:00:00 2014 GMT
            Not After : Mar 31 04:00:00 2024 GMT
        Subject: CN=c1574ff9-219f-44e7-85a6-8ed8c16622c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:29:d6:6c:01:40:16:55:92:41:b2:9a:36:ab:
                    60:e9:68:11:2c:7e:3d:22:34:75:d0:5e:92:91:66:
                    b9:9f:a5:fe:db:8b:79:17:fe:bb:b8:38:2c:a1:17:
                    df:c5:be:66:02:ad:aa:ab:b9:4f:75:a1:23:a7:0c:
                    39:5f:0b:d2:83:c1:02:2e:2d:c0:d5:70:11:10:48:
                    26:53:01:39:75:37:2a:5a:4f:51:d9:12:db:4e:df:
                    40:be:c2:22:6b:75:05:54:6e:8a:85:c5:0c:c6:4b:
                    e3:da:66:61:f5:a6:86:8c:ba:b7:23:0e:f4:0d:a9:
                    20:f1:bf:96:fa:aa:ff:48:ff:c0:aa:ea:db:61:2a:
                    6a:1c:13:2e:c0:51:45:ef:eb:ae:a7:2d:45:a1:0c:
                    65:ee:d7:7f:65:10:cd:8f:34:37:0a:cf:5b:19:af:
                    87:19:63:5f:98:e0:3b:2b:74:de:86:f0:32:67:33:
                    e2:48:03:ac:94:15:09:e2:87:84:9d:08:5a:de:5b:
                    fa:41:46:33:f0:dd:cc:5b:d9:2f:e1:4a:4f:5a:ae:
                    78:4a:e5:e7:2f:eb:33:0d:0c:8b:8e:66:0e:39:a9:
                    f8:ae:20:52:1f:88:6c:df:a5:df:95:62:f7:e7:90:
                    6a:14:a0:b3:db:cc:ba:ed:20:52:75:8b:f5:f5:59:
                    66:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6C:8D:1D:B9:C7:C9:6E:4C:48:BB:1F:08:F6:B1:FC:A5:F5:7A:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/db176f6c-a8e2-337c-bb50-7b9d8dfaefb6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/d4482104-b7a8-4919-8b27-9583ddf9e8dd.crl

            X509v3 Authority Key Identifier:
                keyid:F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.88.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:68:1b:d1:32:d7:c8:ae:9d:da:42:9b:5a:ce:57:77:a4:5e:
         c2:1a:0c:59:1c:f7:8a:f3:4a:92:86:c5:3f:23:2b:72:e5:20:
         20:2e:7d:2c:72:2f:09:12:34:11:a5:04:0e:7e:ff:ce:ef:79:
         8b:40:7d:87:21:6c:6e:75:d6:0d:1c:f6:21:2b:19:07:94:de:
         23:ee:e2:e8:9f:4a:da:66:47:83:4d:98:17:f7:c1:8f:90:7c:
         4b:e6:6a:cf:da:f8:ee:a5:37:92:8c:17:f8:91:e5:79:0e:b7:
         39:9f:11:11:24:01:37:0c:56:54:34:38:38:c0:ff:04:34:f4:
         df:0a:6f:ae:8e:8a:c5:b5:c1:4e:71:33:37:0e:75:b2:81:fc:
         eb:d8:fe:f2:c9:6a:d1:af:75:69:05:55:99:e1:93:0b:5f:f5:
         be:dd:f8:50:a3:88:1b:91:e2:05:2f:a7:8f:e9:12:82:9e:6f:
         b3:f7:08:02:ae:62:17:c8:ad:97:37:f2:15:6e:71:6e:ff:54:
         77:9e:8c:fe:19:88:74:f4:e0:21:db:0b:80:b6:74:c2:2b:39:
         99:45:f1:21:e4:bb:a8:26:31:b9:56:4b:75:31:74:90:cf:fb:
         f7:56:4c:81:f5:29:6e:9d:f0:57:3c:4e:d2:48:db:6f:9d:ec:
         26:3e:df:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----