Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/6afc19ee-34c4-3184-80a7-3f2666f7acf6.roa
File:                     6afc19ee-34c4-3184-80a7-3f2666f7acf6.roa (raw, json)
Hash identifier:          qebpeA8dOGofGWJusC+rOS8QD9IJ6fFU87opgaxtj/A=
Subject key identifier:   78:03:1A:0D:0B:E4:7A:55:96:28:47:21:80:38:0E:10:B9:29:30:78
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328576D51CC73C042CFC16317216DA3
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/6afc19ee-34c4-3184-80a7-3f2666f7acf6.roa
Signing time:             Mon 30 Apr 2018 15:17:36 +0000
ROA not before:           Fri 27 Apr 2018 04:00:00 +0000
ROA not after:            Thu 27 Apr 2028 04:00:00 +0000
asID:                     16509
IP address blocks:        205.251.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:63:17:21:6d:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 27 04:00:00 2018 GMT
            Not After : Apr 27 04:00:00 2028 GMT
        Subject: CN=50458b27-3b69-4e32-a55e-432e5e825a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:f1:f7:68:04:a8:18:e7:75:0f:bf:9a:64:f6:
                    a9:76:d0:ba:d4:ab:a8:88:83:0d:b7:25:30:1d:c6:
                    56:e2:1d:b6:0d:a7:a2:b4:b8:b2:d8:09:76:aa:19:
                    2c:89:9b:7c:00:fe:13:09:c2:52:0f:f9:bd:91:04:
                    69:06:d2:0c:41:06:94:8a:13:15:7b:ee:c2:47:08:
                    b0:ea:1c:69:35:66:20:90:f5:0e:6d:36:4f:f9:bb:
                    07:26:55:17:de:49:c1:d4:2f:a8:c5:da:b2:d1:8a:
                    41:17:3a:31:4f:47:d9:9f:54:d5:6f:55:5f:a8:40:
                    3e:e3:e4:a2:8e:6a:a0:55:c5:27:7d:b0:45:80:c3:
                    b5:16:1f:77:a5:21:97:ac:7f:f5:32:08:25:f9:52:
                    7e:ce:17:e4:ac:b8:a3:eb:75:9c:5c:3a:fd:df:62:
                    22:e5:f7:9c:16:52:a6:2f:80:0e:84:63:bb:a6:a9:
                    0b:83:64:65:2a:81:ea:74:d1:40:e0:95:86:97:fa:
                    af:35:25:0f:7a:b4:15:2e:03:6f:77:69:e6:6f:b2:
                    ca:07:0f:e6:07:98:31:b1:7f:c6:ac:ba:28:b7:e9:
                    b0:97:00:c5:2d:e3:0d:41:48:1e:60:1a:bb:ab:80:
                    7a:b2:f7:98:b4:6d:90:b9:0f:7c:a2:02:ca:08:06:
                    b6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:03:1A:0D:0B:E4:7A:55:96:28:47:21:80:38:0E:10:B9:29:30:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/6afc19ee-34c4-3184-80a7-3f2666f7acf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:03:f8:5f:8b:3d:d7:04:f3:2d:75:2e:4a:fb:59:0e:ff:53:
         e6:fc:21:bb:d1:5b:a1:23:06:a8:2b:68:51:f0:a9:64:19:5d:
         ac:20:50:f8:a6:89:ce:5f:e3:12:34:19:5c:cd:1a:66:a7:1c:
         e6:08:2a:87:2b:2a:f7:99:8f:4c:8d:a8:a2:e6:7b:fb:6f:22:
         cc:05:56:db:7d:7a:94:21:e4:32:47:2b:6e:6a:d1:10:32:3f:
         35:d8:95:c9:6e:7b:5c:52:4e:7b:08:95:dd:2d:07:d5:f1:78:
         48:df:a5:ef:26:e9:e1:5b:04:83:07:06:34:f1:e7:d2:79:f0:
         a7:c9:14:c7:55:25:14:11:9a:bc:7c:24:5b:b7:32:bc:30:9c:
         a8:18:b3:08:28:1c:c5:e9:4e:ac:63:a8:d8:01:02:a8:c0:ae:
         6f:b3:ba:9e:62:c4:0b:99:33:99:7a:ce:ad:f9:a8:db:63:ad:
         d2:89:18:d3:9b:bb:d4:11:ec:c7:25:e3:2e:cd:4d:c3:34:07:
         96:44:8a:aa:24:60:85:84:79:59:a5:cc:9e:f6:a0:32:13:fb:
         64:d0:cb:03:ac:80:12:f9:01:c6:74:e6:65:46:37:6b:9e:47:
         f6:45:dd:6a:ca:04:c8:66:6f:50:29:1d:b9:e5:fa:4e:67:7c:
         26:06:9b:4b
-----BEGIN CERTIFICATE-----
MIIGPzCCBSmgAwIBAgIUAQ0Mn0MoV21RzHPAQs/BYxchbaMwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDY3Nzk5ZjdmLTQ4MjYtNGFmYS04OWU3LThkMDQ3OGRkMTI3
ZjAeFw0xODA0MjcwNDAwMDBaFw0yODA0MjcwNDAwMDBaMC8xLTArBgNVBAMTJDUw
NDU4YjI3LTNiNjktNGUzMi1hNTVlLTQzMmU1ZTgyNWE2NDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKjx92gEqBjndQ+/mmT2qXbQutSrqIiDDbclMB3G
VuIdtg2norS4stgJdqoZLImbfAD+EwnCUg/5vZEEaQbSDEEGlIoTFXvuwkcIsOoc
aTVmIJD1Dm02T/m7ByZVF95JwdQvqMXastGKQRc6MU9H2Z9U1W9VX6hAPuPkoo5q
oFXFJ32wRYDDtRYfd6Uhl6x/9TIIJflSfs4X5Ky4o+t1nFw6/d9iIuX3nBZSpi+A
DoRju6apC4NkZSqB6nTRQOCVhpf6rzUlD3q0FS4Db3dp5m+yygcP5geYMbF/xqy6
KLfpsJcAxS3jDUFIHmAau6uAerL3mLRtkLkPfKICyggGtrkCAwEAAaOCA1UwggNR
MB0GA1UdDgQWBBR4AxoNC+R6VZYoRyGAOA4QuSkweDCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjc3OTlm
N2YtNDgyNi00YWZhLTg5ZTctOGQwNDc4ZGQxMjdmLzZhZmMxOWVlLTM0YzQtMzE4
NC04MGE3LTNmMjY2NmY3YWNmNi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzY3Nzk5ZjdmLTQ4MjYtNGFmYS04OWU3
LThkMDQ3OGRkMTI3Zi82Nzc5OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0NzhkZDEy
N2YuY3JsMB8GA1UdIwQYMBaAFGp3PYcm9z0Vmgcb1W/a6sFC7CSoMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvNjc3OTlmN2YtNDgyNi00YWZhLTg5ZTctOGQwNDc4
ZGQxMjdmLmNlcjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAM37wjBUBgNV
HSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3
LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEBCwOC
AQEAHgP4X4s91wTzLXUuSvtZDv9T5vwhu9FboSMGqCtoUfCpZBldrCBQ+KaJzl/j
EjQZXM0aZqcc5ggqhysq95mPTI2oouZ7+28izAVW2316lCHkMkcrbmrREDI/NdiV
yW57XFJOewiV3S0H1fF4SN+l7ybp4VsEgwcGNPHn0nnwp8kUx1UlFBGavHwkW7cy
vDCcqBizCCgcxelOrGOo2AECqMCub7O6nmLEC5kzmXrOrfmo22Ot0okY05u71BHs
xyXjLs1NwzQHlkSKqiRghYR5WaXMnvagMhP7ZNDLA6yAEvkBxnTmZUY3a55H9kXd
asoEyGZvUCkdueX6Tmd8JgabSw==
-----END CERTIFICATE-----