Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff0d1-a587-45dd-97cb-fded4c7866bd/63ab56e8-66fa-3d03-b704-8f5bf0828fc3.roa
File:                     63ab56e8-66fa-3d03-b704-8f5bf0828fc3.roa (raw, json)
Hash identifier:          nvqNewbvmB1R7QfA4UEftF0e4pDdTGi4fdmZGKih9Do=
Subject key identifier:   78:CF:B2:A7:39:CD:47:17:AA:F5:44:00:D0:5A:64:A0:FA:46:FA:88
Certificate issuer:       /CN=5deff0d1-a587-45dd-97cb-fded4c7866bd
Certificate serial:       010D0C9F4328576D51CC73C042CFC1672DD276E0
Authority key identifier: 6F:D6:17:7D:30:7D:B4:A7:67:8B:D8:EF:CC:05:52:B8:5E:70:3A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff0d1-a587-45dd-97cb-fded4c7866bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff0d1-a587-45dd-97cb-fded4c7866bd/63ab56e8-66fa-3d03-b704-8f5bf0828fc3.roa
Signing time:             Mon 19 Nov 2018 21:13:46 +0000
ROA not before:           Wed 17 Oct 2018 04:00:00 +0000
ROA not after:            Tue 17 Oct 2028 04:00:00 +0000
asID:                     395403
IP address blocks:        2620:4d:400e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:67:2d:d2:76:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5deff0d1-a587-45dd-97cb-fded4c7866bd
        Validity
            Not Before: Oct 17 04:00:00 2018 GMT
            Not After : Oct 17 04:00:00 2028 GMT
        Subject: CN=0c61e73f-dbaa-4ac4-a67a-f933d2f9d056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f0:ae:21:21:75:35:1c:79:1a:6d:37:f5:1c:
                    1c:3d:16:58:c1:ab:1f:b8:0b:0a:8d:89:be:5d:78:
                    40:e9:50:85:e3:75:4b:2b:f5:8e:e5:2c:88:40:df:
                    f4:47:e2:33:6f:94:6c:d3:51:30:ab:59:78:d0:eb:
                    02:93:e1:8d:fd:fe:cd:ba:7d:98:c2:5d:d0:1d:59:
                    fd:0a:45:44:fd:f7:2a:50:0b:40:6a:76:05:c9:31:
                    61:0d:cf:a0:79:b7:3f:70:13:ef:9d:57:e6:e6:95:
                    d3:39:b9:e1:2b:5e:dd:f9:08:1f:9d:14:90:f1:bf:
                    96:b7:d6:d4:d7:de:c1:50:da:b0:5e:14:65:9d:a1:
                    3d:a2:c3:7c:e1:2c:b2:52:04:f8:65:af:67:05:9d:
                    10:b8:bf:5b:c2:87:d3:4b:91:cc:d5:28:4f:cb:43:
                    14:c4:d2:b3:43:e5:b5:2d:f2:21:28:8d:b2:4e:f5:
                    53:4c:c4:a0:8c:7f:ab:46:d7:22:57:6a:c9:d9:4a:
                    4e:4c:b7:7c:8a:c1:f3:ee:f3:91:d7:37:83:f6:23:
                    10:35:3a:5a:9b:3d:7c:7d:de:de:d2:e6:a8:05:71:
                    67:0e:d5:6f:47:d7:d6:91:ec:8e:e3:85:98:da:36:
                    22:64:5c:c2:a6:3c:e3:1b:74:70:6a:d4:59:a4:51:
                    b4:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:CF:B2:A7:39:CD:47:17:AA:F5:44:00:D0:5A:64:A0:FA:46:FA:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff0d1-a587-45dd-97cb-fded4c7866bd/63ab56e8-66fa-3d03-b704-8f5bf0828fc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff0d1-a587-45dd-97cb-fded4c7866bd/5deff0d1-a587-45dd-97cb-fded4c7866bd.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D6:17:7D:30:7D:B4:A7:67:8B:D8:EF:CC:05:52:B8:5E:70:3A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5deff0d1-a587-45dd-97cb-fded4c7866bd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2620:4d:400e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:3d:11:50:bb:4c:8c:8a:58:75:ff:50:3d:16:c2:c2:00:2f:
         1b:24:f9:ff:77:d6:59:d7:0f:52:42:8b:bf:8b:bb:a4:a6:11:
         db:b3:aa:ce:3d:58:97:3f:12:0f:b5:f0:c5:4e:89:ea:d8:fb:
         ef:9b:b8:9f:db:4b:9f:cf:68:c7:42:0d:6d:f6:be:67:e1:f0:
         1c:65:54:60:f1:08:6c:88:c1:cd:3c:d1:a2:30:ce:2f:cf:12:
         c7:49:eb:f9:a4:ff:13:30:5b:1f:9a:ce:24:62:c4:87:9e:d4:
         a1:db:29:eb:ec:d0:46:0b:8f:74:a5:b8:cb:48:0a:60:29:aa:
         fa:bf:33:ae:b1:ee:30:6a:30:ca:ab:8f:fa:2a:99:23:29:b2:
         a1:4e:1d:78:fc:bb:88:2b:79:a1:fc:54:95:6f:ac:bc:fa:30:
         cc:f3:ac:7c:a2:48:c9:a5:07:15:2c:99:b8:8b:fb:5a:3b:10:
         44:a1:5a:df:ae:e8:46:bf:9c:3f:a3:f4:ab:f8:50:a5:f7:8f:
         2b:3e:57:39:3b:05:c6:d5:a5:ba:f1:de:05:34:4f:dc:fe:62:
         e2:54:2b:d5:7d:15:50:f1:dc:80:fc:bb:a8:c6:e6:bb:4e:94:
         21:4a:8c:2b:70:c8:c4:37:68:15:0b:d0:19:d9:b2:87:13:d4:
         6c:bb:ca:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----