Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/41167448-4ba9-3487-a3d3-c5ad9d94147a.roa
File:                     41167448-4ba9-3487-a3d3-c5ad9d94147a.roa (raw, json)
Hash identifier:          zMCYxmu1pJJID4hAPB1zxx8x/kLTZ2xfX812kIsoA0w=
Subject key identifier:   22:DD:D6:B1:D2:4C:89:6C:55:A7:88:67:9D:01:DC:E6:E3:9F:4A:F1
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1631C472D60
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/41167448-4ba9-3487-a3d3-c5ad9d94147a.roa
Signing time:             Tue 01 May 2018 15:16:56 +0000
ROA not before:           Fri 27 Apr 2018 04:00:00 +0000
ROA not after:            Thu 27 Apr 2028 04:00:00 +0000
asID:                     38895
IP address blocks:        2600:9000:5307::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:63:1c:47:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 27 04:00:00 2018 GMT
            Not After : Apr 27 04:00:00 2028 GMT
        Subject: CN=dcf28c5c-08b8-4562-a996-a4a5075c0102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f1:cb:5e:a3:a1:2f:b8:36:2c:a8:7e:48:96:
                    02:c6:7d:eb:70:e7:3c:3b:f3:49:9b:9d:60:63:0b:
                    8a:b3:48:1f:87:40:10:a2:7b:23:7f:56:c8:10:1e:
                    c6:63:39:dc:85:10:bd:b9:b7:73:47:a5:9e:af:c4:
                    9a:46:76:46:f9:b2:10:c3:4c:fb:03:8a:55:bd:73:
                    c2:32:31:64:72:d1:cd:68:16:25:5d:aa:ea:5b:ab:
                    d0:33:52:87:b4:77:ce:4d:dc:42:7e:08:3b:27:2e:
                    1b:db:08:53:5a:76:7a:3a:6d:71:7c:6a:94:fd:45:
                    bb:3d:90:39:c3:34:b6:0b:0b:73:4f:ad:29:11:1f:
                    59:8a:8e:d5:82:5f:6d:75:7c:54:01:29:6a:64:2c:
                    d3:be:d0:fe:a0:6e:85:70:9a:47:a3:43:4b:12:78:
                    02:5f:ff:54:c3:b7:01:7b:aa:cd:fb:ec:54:07:8b:
                    2d:a0:23:82:51:40:76:a3:3f:ba:52:08:39:12:3c:
                    2c:b1:57:07:23:4c:e6:0b:f6:c9:60:87:9f:7e:a2:
                    10:2e:54:1d:28:53:d9:e9:f6:98:c6:e3:52:a8:56:
                    91:26:df:75:37:ad:b9:84:bd:9b:31:97:02:37:87:
                    2d:db:24:3a:5e:b4:9b:af:f5:05:b7:95:8f:e3:bb:
                    0b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DD:D6:B1:D2:4C:89:6C:55:A7:88:67:9D:01:DC:E6:E3:9F:4A:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/41167448-4ba9-3487-a3d3-c5ad9d94147a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:5307::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:76:d1:56:30:38:9c:a7:e3:94:11:a2:42:8e:63:d3:8e:5e:
         ed:a2:6a:6a:f2:10:46:f9:75:7d:fd:b5:ae:cc:c1:6f:1a:58:
         cb:84:ea:36:21:30:49:2f:de:29:48:ca:fd:f6:b1:79:b7:1a:
         63:b1:f4:84:42:91:ca:0b:0a:38:4c:7e:a8:ee:6b:43:1e:81:
         a0:93:32:4a:de:70:31:c1:1a:39:07:a3:68:e9:cf:8e:ac:22:
         fa:33:4a:71:9c:a7:8b:1c:05:6b:02:b4:1d:25:a5:69:53:4c:
         ae:12:07:b5:82:03:a8:a7:15:a0:23:f3:8a:1b:34:1e:e5:a6:
         2a:6c:d5:8e:5f:72:97:e7:e8:15:c5:d6:83:5b:7d:be:3d:2c:
         db:aa:7d:db:cc:46:3d:76:cf:bb:bf:d7:5d:a5:2f:20:85:24:
         4f:75:df:64:32:b6:ff:02:8d:45:0b:62:d0:8d:05:dd:6d:3e:
         db:cb:af:70:39:16:35:fb:ed:a5:ac:ea:67:4a:b2:55:14:8e:
         5a:10:b6:a4:7e:c0:7e:54:dc:b8:fb:1d:db:02:83:c1:30:cd:
         9d:1e:39:b4:13:e0:ea:ae:7b:f5:55:90:5d:65:62:96:31:8b:
         e4:c7:9d:08:9f:c6:4b:fd:99:7d:bc:c5:5d:ab:f4:b9:52:4a:
         36:d0:69:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----