Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/4ee5128b-c400-3163-9b36-80440a000f15.roa
File:                     4ee5128b-c400-3163-9b36-80440a000f15.roa (raw, json)
Hash identifier:          YyHDTKGDQJlypMxF0O2xIeLeEwoZSGdIP1Bh1vtVzY8=
Subject key identifier:   4E:5B:BC:31:33:C7:BE:18:88:F2:83:E7:27:CC:43:4F:99:DE:63:C6
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1631C466C0E
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/4ee5128b-c400-3163-9b36-80440a000f15.roa
Signing time:             Tue 01 May 2018 15:16:07 +0000
ROA not before:           Fri 27 Apr 2018 04:00:00 +0000
ROA not after:            Thu 27 Apr 2028 04:00:00 +0000
asID:                     38895
IP address blocks:        2600:9000:5306::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:63:1c:46:6c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 27 04:00:00 2018 GMT
            Not After : Apr 27 04:00:00 2028 GMT
        Subject: CN=7353a5b0-b8e1-441c-947a-3f3ee9388e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bc:3f:43:8e:11:bc:03:77:78:16:6f:c1:e5:
                    21:5c:dc:df:17:ec:f5:a6:69:ee:e7:83:77:4f:d7:
                    39:06:3a:96:39:11:2f:8a:61:ef:9a:fc:5d:d2:47:
                    09:0d:25:ca:32:ad:e5:28:ca:08:59:8b:78:ea:d2:
                    a2:06:cc:aa:d2:27:f5:fa:f2:c9:5f:71:9f:79:20:
                    5b:a0:ee:3f:cf:e3:0f:4b:3e:25:5b:8f:fb:4c:ad:
                    33:b0:2b:e7:08:d0:84:d3:77:ef:5c:34:f6:80:af:
                    ae:52:6d:72:44:72:23:a6:0b:d3:91:61:3e:70:0d:
                    1c:66:39:d4:79:32:a8:d5:e5:7d:7d:af:7f:0f:7f:
                    e9:99:dd:48:a5:eb:dd:00:32:4b:7d:f8:af:fd:82:
                    a1:a7:68:3d:c0:3d:d7:87:53:77:93:1e:83:83:ec:
                    19:20:9a:73:cf:cc:78:c3:6a:a7:bd:e8:88:c7:97:
                    3c:91:97:83:c4:5b:15:3e:25:99:31:bd:98:8b:77:
                    69:c7:82:03:ef:c4:56:4d:62:94:67:3c:41:fd:52:
                    4e:f5:bf:3a:86:23:d1:32:6b:21:cd:f6:a9:44:24:
                    7d:01:5a:f7:bd:38:6a:8f:c0:f5:ce:c5:20:c4:8a:
                    ab:71:24:a6:eb:dc:d2:dc:16:c5:0c:14:89:41:a3:
                    db:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5B:BC:31:33:C7:BE:18:88:F2:83:E7:27:CC:43:4F:99:DE:63:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/4ee5128b-c400-3163-9b36-80440a000f15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:5306::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:d3:c8:e4:44:6b:00:df:35:59:dc:f8:79:d3:ad:29:8e:02:
         8d:82:16:a0:d6:f9:55:ad:5c:74:62:51:2e:c9:11:23:ac:00:
         a8:52:1c:0b:f1:14:b9:b9:ec:fb:df:24:0a:89:d5:2e:58:8f:
         d4:76:1b:63:c1:ae:bc:fe:33:12:49:8c:17:02:49:05:b5:0e:
         dc:54:f3:eb:c0:38:af:da:e7:87:1e:61:d5:3e:da:6a:5b:37:
         28:7c:c4:c2:c1:d3:47:d1:0c:9f:f6:c5:5c:d4:1b:cf:c7:90:
         bc:05:2a:f8:01:f7:8b:75:f9:47:10:31:5e:c7:24:b6:8c:72:
         73:fa:c1:e1:98:c5:67:3f:af:30:f6:0f:84:a3:f9:c0:ae:e3:
         c4:14:68:ef:82:53:69:03:c6:87:cf:b7:df:5b:ff:df:60:94:
         e0:fa:ee:d5:84:13:83:61:65:19:08:7c:ff:58:11:51:c0:32:
         bb:e2:3d:e9:85:a5:d1:e6:61:13:de:c8:73:81:d8:a1:49:65:
         8b:87:57:a1:28:c0:97:cf:2c:07:eb:b6:d0:2f:41:c9:7c:51:
         12:6f:0b:e0:53:02:ff:af:e5:f1:71:46:19:21:aa:f5:a6:0c:
         3e:e6:ef:ad:7f:c3:52:9f:ac:ac:7a:54:e3:6d:3b:fb:52:56:
         9f:99:ea:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----