Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5d3cec30-4715-3faa-9979-4792456fcb09.roa
File:                     5d3cec30-4715-3faa-9979-4792456fcb09.roa (raw, json)
Hash identifier:          6raZ4Sjw+EHATMAcGwhinajTtZClt0yR6jscL7Rh3bU=
Subject key identifier:   4E:45:32:C0:C6:58:73:2F:B2:D7:CC:BA:13:78:E5:61:89:C5:58:27
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1631C3C33EF
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5d3cec30-4715-3faa-9979-4792456fcb09.roa
Signing time:             Tue 01 May 2018 15:04:57 +0000
ROA not before:           Fri 27 Apr 2018 04:00:00 +0000
ROA not after:            Thu 27 Apr 2028 04:00:00 +0000
asID:                     16509
IP address blocks:        2600:9000:5303::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:63:1c:3c:33:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 27 04:00:00 2018 GMT
            Not After : Apr 27 04:00:00 2028 GMT
        Subject: CN=628fe7b3-e950-4b1b-9d0a-36bec215ab38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:86:38:da:5a:80:eb:a2:e5:40:68:9b:4e:3a:
                    fc:4e:59:60:11:eb:49:68:a5:5f:11:a0:d9:9d:cd:
                    28:f7:c2:61:bf:86:a5:01:e0:65:d4:e3:21:bd:96:
                    6d:e5:fb:77:e8:1e:5d:93:c8:a7:b7:dc:4f:bc:39:
                    26:f2:19:ef:cf:d5:03:73:d9:dc:a4:c5:37:0d:41:
                    dc:09:fb:ba:fe:d2:b7:f7:08:f3:ab:9a:76:85:b4:
                    0e:f3:de:f6:23:a7:e4:11:ea:6a:bb:28:b4:3c:c2:
                    d4:bd:84:50:d0:9a:6b:0e:a2:d0:67:bc:d2:9a:2e:
                    70:c3:ae:30:f6:36:eb:47:49:e2:0e:8b:ff:20:84:
                    37:d1:6f:28:52:cf:b4:bd:10:7c:ef:f5:ea:36:d1:
                    ff:71:ad:15:b6:fb:e5:1b:aa:ba:71:bc:f4:e0:b0:
                    fb:73:c7:17:ae:53:93:1a:20:90:cb:aa:0e:bc:07:
                    4d:45:52:a1:21:52:5f:e8:bf:32:21:9b:8f:da:65:
                    c2:d7:4b:e2:48:04:82:71:5f:09:99:5c:72:c3:af:
                    83:65:1d:bd:c0:54:98:aa:b8:d8:d8:0f:b7:1e:75:
                    3e:d1:87:13:e5:cc:d6:c4:8d:90:de:2b:c0:d2:63:
                    00:16:de:9b:eb:26:03:a0:97:dc:1b:b5:cf:69:d8:
                    ce:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:45:32:C0:C6:58:73:2F:B2:D7:CC:BA:13:78:E5:61:89:C5:58:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/5d3cec30-4715-3faa-9979-4792456fcb09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:5303::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:bf:68:8a:18:f5:68:8f:5c:60:d3:a6:bc:10:af:32:7b:2a:
         29:0f:df:aa:ef:f3:ca:b9:05:b9:94:d4:18:39:04:f0:bf:aa:
         ab:56:b1:ea:ef:45:f0:01:53:97:3e:08:a9:1a:74:ae:a4:b9:
         8f:4a:af:23:dd:b6:22:3c:4f:29:8d:42:bf:95:e9:c3:f0:36:
         ff:13:0d:cd:84:a0:b5:1b:12:ad:32:e9:e4:ab:cf:05:4a:3c:
         de:e1:32:2a:db:e0:1f:f6:e9:96:8a:c7:7e:5c:2e:0b:f1:88:
         c2:d1:6d:e9:ba:96:06:69:5d:36:2d:eb:0f:b7:c6:62:ab:3b:
         68:2d:26:34:3e:24:3b:2b:fc:46:cc:03:02:66:72:18:af:8c:
         f7:d8:7f:8b:d8:86:14:4d:56:2f:01:2d:07:e2:25:23:93:90:
         35:50:b3:ee:78:60:7c:e6:fb:0d:68:0f:0a:f9:ca:50:d7:1f:
         af:99:03:ed:57:8b:b0:0d:66:90:0c:e1:5f:56:61:fb:c0:44:
         3f:46:2a:b9:94:3f:c5:82:19:0e:76:2a:f5:4e:ff:6b:c7:b9:
         b3:59:3b:1e:13:04:cf:35:6d:2c:62:26:40:44:f1:f2:04:f3:
         39:a6:b6:4a:10:c2:56:a0:47:c8:11:91:9c:4a:aa:6d:cb:eb:
         1a:79:22:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----