Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/9cadfe1c-2be7-3c43-8c25-f9ff9a2fa2fc.roa
File:                     9cadfe1c-2be7-3c43-8c25-f9ff9a2fa2fc.roa (raw, json)
Hash identifier:          gN6+atnvbFGQTWci7i7mY4C/pumxntoVdSHlZp0jWic=
Subject key identifier:   04:63:B2:46:59:02:FA:F3:35:D2:09:5F:56:0E:51:A7:45:EB:8E:53
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1631C3F4B68
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/9cadfe1c-2be7-3c43-8c25-f9ff9a2fa2fc.roa
Signing time:             Tue 01 May 2018 15:08:20 +0000
ROA not before:           Fri 27 Apr 2018 04:00:00 +0000
ROA not after:            Thu 27 Apr 2028 04:00:00 +0000
asID:                     16509
IP address blocks:        2600:9000:5307::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:63:1c:3f:4b:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 27 04:00:00 2018 GMT
            Not After : Apr 27 04:00:00 2028 GMT
        Subject: CN=7b90787d-231c-4fde-bcd9-411f2a92f848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:34:8b:93:78:be:bb:2a:8b:29:db:00:b4:91:
                    79:0a:3c:27:8b:e4:ed:a4:cb:a5:52:05:04:38:57:
                    3e:e8:c2:21:96:bb:c8:43:c6:e0:eb:3f:dc:d2:d7:
                    10:86:a3:b1:9a:d2:d0:25:92:8c:1e:c4:d3:35:db:
                    f8:23:78:9b:20:ad:5a:63:49:53:6a:86:13:60:8b:
                    d3:17:03:17:ff:ff:f7:42:62:f0:c4:ad:92:bb:e7:
                    bd:47:ba:7e:a1:56:87:a8:06:8c:d3:b2:75:49:0a:
                    f3:e3:63:ab:c3:09:21:15:03:19:69:d4:8b:5e:69:
                    96:a1:39:ad:2a:9f:48:bb:79:e4:62:56:63:65:ca:
                    64:54:73:39:b6:5e:16:db:34:03:ff:4a:a8:cf:1b:
                    3c:a5:14:82:08:8a:88:17:97:87:04:96:7a:b4:1c:
                    db:53:70:6b:56:e9:ed:d9:cc:77:44:7c:e5:91:19:
                    98:a1:d5:22:5a:c7:2e:21:24:0a:6a:81:8c:75:cc:
                    86:79:5f:4a:44:91:28:99:dc:00:1e:af:d3:23:28:
                    08:5e:bb:e0:59:68:90:02:46:29:75:da:ec:70:d3:
                    44:29:a8:2a:84:2e:c9:9f:24:ff:4b:88:a3:51:c4:
                    26:33:81:aa:1c:ce:5b:12:d2:21:a9:72:19:07:b8:
                    7b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:63:B2:46:59:02:FA:F3:35:D2:09:5F:56:0E:51:A7:45:EB:8E:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/9cadfe1c-2be7-3c43-8c25-f9ff9a2fa2fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:5307::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:62:58:69:91:b2:1e:64:df:55:c5:f5:71:93:ff:42:7f:db:
         91:24:d8:a1:6f:de:91:2c:7e:5f:74:3e:48:a5:42:ea:91:8e:
         9c:d8:a2:a5:85:6e:8d:f5:41:fe:f5:87:55:cf:66:e0:0e:33:
         26:26:41:fe:fc:47:93:18:8d:2c:4f:d7:39:6a:19:15:51:3a:
         36:1a:b1:2e:a3:74:3f:d7:4c:0e:15:24:79:a1:e4:ef:a2:d3:
         6d:12:9a:6f:51:93:b0:a5:3e:b5:1f:3b:fe:c3:9c:16:5d:d8:
         19:0d:97:f6:d7:1d:3c:19:60:7d:e8:38:5a:35:9c:71:49:13:
         27:9d:86:5b:36:81:25:13:73:60:09:4e:11:ff:d4:ce:73:ec:
         b8:63:d1:d3:f9:9b:fa:b5:fe:b1:48:52:ba:64:be:ce:e8:ff:
         77:b1:a6:8d:62:86:8d:fb:11:43:97:03:b4:8d:a3:5d:56:c3:
         1f:56:a3:d3:bc:71:20:41:fe:8d:59:d0:62:39:7b:c5:57:6a:
         a2:fd:7c:ed:51:51:a3:26:c6:b0:b3:0a:00:8b:18:0e:68:ed:
         aa:84:ec:d5:c3:80:6c:9a:85:fb:be:f7:1d:ee:51:67:56:cd:
         ef:5b:72:12:b9:7f:33:51:3d:44:9c:79:c2:e6:91:ec:cf:2c:
         af:4b:57:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----