Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5c1efe9f-8e99-3539-b2be-9cfd8d42b5fa.roa
File:                     5c1efe9f-8e99-3539-b2be-9cfd8d42b5fa.roa (raw, json)
Hash identifier:          U0O2+PTYMsrMsE780mfJ4FbwnR90SwbbwBNWQKZ1v2E=
Subject key identifier:   23:D7:21:9F:3F:66:5A:9D:4E:8E:65:19:02:4F:53:DB:14:45:2A:9A
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1631C4104AD
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5c1efe9f-8e99-3539-b2be-9cfd8d42b5fa.roa
Signing time:             Tue 01 May 2018 15:10:13 +0000
ROA not before:           Fri 27 Apr 2018 04:00:00 +0000
ROA not after:            Thu 27 Apr 2028 04:00:00 +0000
asID:                     38895
IP address blocks:        205.251.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:63:1c:41:04:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 27 04:00:00 2018 GMT
            Not After : Apr 27 04:00:00 2028 GMT
        Subject: CN=acd0127f-6790-45b4-8612-2df78ede69d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ec:a2:34:79:bd:93:80:52:9a:e1:26:7e:fb:
                    4b:3b:99:1a:28:27:02:b8:16:87:5d:0a:e2:3d:b3:
                    68:60:01:03:de:c4:46:2d:d4:0d:a9:56:fb:aa:c4:
                    cb:83:ff:3c:bd:a9:7f:5c:da:4e:4c:ab:af:db:3a:
                    66:3f:90:52:e3:51:b6:11:36:a3:5a:e5:bd:6c:e0:
                    1f:34:1c:08:f8:09:69:82:d5:29:37:f0:c5:68:81:
                    f6:66:87:09:ce:ed:ec:3a:bd:87:ac:c1:95:ff:52:
                    53:d0:5b:9e:79:b8:d5:e5:92:a7:1c:46:9a:f3:44:
                    fa:79:22:f9:17:86:06:d0:9e:93:5d:d9:98:65:8e:
                    05:55:a8:de:b6:ef:7b:20:45:93:d7:e2:94:d4:c6:
                    f8:10:29:07:5f:5e:a5:b1:0c:f3:3d:b8:2b:e3:99:
                    b7:45:d1:ee:12:60:ab:71:20:56:df:7b:ff:f7:f6:
                    b1:ef:8d:f2:f4:c3:cb:d9:9d:49:92:a1:39:fb:5e:
                    91:70:76:05:8f:68:e7:d6:65:fc:f6:b9:81:89:fc:
                    54:d3:1e:14:ed:c4:28:18:3d:a2:1a:81:7c:2d:8b:
                    79:f3:18:a6:5c:e7:1c:11:75:e1:e6:01:d5:67:45:
                    3c:c8:da:03:c2:6f:09:3b:57:16:06:3d:68:5f:f4:
                    a0:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D7:21:9F:3F:66:5A:9D:4E:8E:65:19:02:4F:53:DB:14:45:2A:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5c1efe9f-8e99-3539-b2be-9cfd8d42b5fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.197.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:78:72:2d:f6:e0:5f:85:85:60:88:cb:42:41:0f:3d:45:18:
         ca:22:90:41:6a:04:04:6f:2d:24:3d:c9:93:93:71:40:f7:ee:
         c4:3a:56:1b:2a:30:a6:ed:88:01:dd:6c:b9:f2:b7:a3:63:7b:
         3b:a3:ce:56:56:e7:d8:ed:4a:26:4f:d5:eb:25:05:1a:48:f6:
         f4:15:19:c8:5d:09:6d:0d:12:e9:bf:03:5b:ca:fe:f3:26:17:
         26:29:fa:bc:03:a5:57:03:a1:75:5f:57:a8:ad:fa:ad:59:53:
         de:c6:e8:6f:13:f9:c9:b0:e8:d2:eb:83:51:27:b7:fa:77:d4:
         54:11:e0:c0:25:30:fb:b2:39:8c:a2:83:22:ee:63:23:2e:5c:
         4d:a0:6f:33:c6:17:be:8d:99:40:c6:a9:e0:d8:e7:b0:66:85:
         8a:ce:b2:9c:17:57:2c:bc:3e:fe:47:7c:e3:30:e6:73:de:87:
         87:19:51:d5:55:fd:02:13:11:40:44:73:a8:9b:10:90:e0:d7:
         27:02:1a:aa:4e:22:45:df:3a:51:05:56:5f:15:09:c9:21:dc:
         88:fa:1f:1d:18:a1:73:cd:e9:2e:6a:0b:30:ae:85:19:ef:c4:
         88:0e:56:79:e6:90:e4:7e:1d:21:23:5b:df:7e:c2:d5:86:94:
         9f:5f:c9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----