Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/450a56c5-f5af-3299-9f0b-f3609b445b3a.roa
File:                     450a56c5-f5af-3299-9f0b-f3609b445b3a.roa (raw, json)
Hash identifier:          6eqHi9tbKGxkIiKR1dLXvFReC0zEVXwHHdOqZcSGWJo=
Subject key identifier:   E9:55:B5:E4:9E:A7:88:48:87:04:36:88:1F:3E:3E:70:59:00:A0:27
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1631716751D
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/450a56c5-f5af-3299-9f0b-f3609b445b3a.roa
Signing time:             Mon 30 Apr 2018 15:05:37 +0000
ROA not before:           Fri 27 Apr 2018 04:00:00 +0000
ROA not after:            Thu 27 Apr 2028 04:00:00 +0000
asID:                     16509
IP address blocks:        205.251.192.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:63:17:16:75:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 27 04:00:00 2018 GMT
            Not After : Apr 27 04:00:00 2028 GMT
        Subject: CN=494f2e12-5da8-4433-a753-a87d76cc94fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:58:52:1e:3f:e4:71:5a:a2:cd:1f:60:27:35:
                    dc:fb:0c:93:a0:16:ea:fb:95:eb:2e:12:36:99:db:
                    d5:0d:68:37:3c:69:ea:09:28:2e:4f:35:55:e8:1e:
                    c9:98:3b:5f:82:ef:77:5c:1f:23:28:49:83:99:40:
                    60:2c:54:23:98:06:ca:ae:ed:4f:3f:30:97:28:3e:
                    f3:73:8a:ff:69:0d:27:b9:05:a1:29:e6:52:ef:c4:
                    23:b1:af:ab:ad:43:f0:59:93:ec:55:73:c6:cb:81:
                    d2:d5:02:ac:52:c9:86:77:99:cd:49:05:cb:91:e9:
                    5b:68:7c:09:8a:cd:0a:9c:9c:c4:b2:28:41:3e:a1:
                    78:93:d7:ab:90:19:cc:75:6e:61:77:5e:83:df:94:
                    fc:5e:76:06:be:ea:62:73:90:5b:79:ab:6a:a4:e3:
                    ea:f1:3d:31:b1:bc:26:8b:e7:de:ff:ee:42:ff:f7:
                    48:88:ce:a6:6c:e8:33:0e:1f:78:11:da:fc:e4:25:
                    ff:06:38:b0:a7:14:5a:a5:ba:3b:7f:d5:9e:8d:c7:
                    41:a6:a4:e5:f9:c9:99:05:74:2d:46:56:a5:c7:c1:
                    ba:72:61:e5:21:a7:40:17:93:bb:2d:4f:1a:8a:9d:
                    6a:7f:34:a1:69:be:c1:53:49:59:2d:88:df:d5:90:
                    c4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:55:B5:E4:9E:A7:88:48:87:04:36:88:1F:3E:3E:70:59:00:A0:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/450a56c5-f5af-3299-9f0b-f3609b445b3a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.192.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:dd:78:6a:ae:76:28:5b:94:cc:2e:59:e8:c1:96:d9:e1:8c:
         20:af:18:30:9d:22:c6:63:ef:fb:d4:3b:a8:4b:f6:0f:a4:f4:
         86:1e:80:af:06:c7:21:74:b7:14:3c:99:9d:33:9a:b7:d7:01:
         24:4e:be:30:32:e1:e5:40:39:1b:fa:d2:ca:c4:ee:3c:b3:aa:
         0d:ab:4c:fc:b6:b0:c4:4b:64:e4:fc:94:9a:58:48:dd:bb:c5:
         ab:8f:5b:b4:cc:72:b4:17:27:f6:91:e7:cf:8a:96:e7:41:dd:
         0d:2c:74:a0:e1:85:bc:b0:e9:1c:85:89:61:55:f9:e0:b3:75:
         48:2d:c2:9a:a5:f3:72:db:21:05:99:77:ff:c5:9a:7c:35:1b:
         e0:ea:ae:c6:0c:c5:25:03:2e:b2:5c:8c:61:bf:f7:54:4e:e9:
         a1:84:36:d3:39:b6:7e:ae:8b:5d:cc:99:07:98:f4:96:06:35:
         47:6b:18:33:bd:21:50:bd:74:99:8d:09:1c:76:df:01:f4:09:
         06:61:90:a6:d2:93:15:0d:bd:e6:37:f8:95:bf:f7:78:f7:8b:
         4b:7a:b7:16:77:a0:df:ea:66:4f:31:db:04:f9:a7:b0:48:02:
         f4:0e:4b:74:35:0f:d9:06:36:59:eb:fc:0d:23:7d:52:9a:d5:
         da:86:e2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----