Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a98ae403-bdc1-35b2-b12c-c2479f89ccbe.roa
File:                     a98ae403-bdc1-35b2-b12c-c2479f89ccbe.roa (raw, json)
Hash identifier:          X+cUWZ9fBbEu6t+7YPx4cGrQBq5iIbf5Wqp4JwcumcQ=
Subject key identifier:   CB:3B:29:7A:24:40:0E:28:7D:F2:20:6C:BF:4F:0C:0E:5C:3C:98:8E
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1631C3CAAAA
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a98ae403-bdc1-35b2-b12c-c2479f89ccbe.roa
Signing time:             Tue 01 May 2018 15:05:27 +0000
ROA not before:           Fri 27 Apr 2018 04:00:00 +0000
ROA not after:            Thu 27 Apr 2028 04:00:00 +0000
asID:                     16509
IP address blocks:        2600:9000:5304::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:63:1c:3c:aa:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 27 04:00:00 2018 GMT
            Not After : Apr 27 04:00:00 2028 GMT
        Subject: CN=c1be4c65-3f02-429c-9d3b-7350b0bea02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ee:5d:c6:57:86:6c:bd:d2:f4:93:85:bb:c3:
                    38:18:a4:56:cc:b2:1f:30:d8:54:75:8b:c0:00:36:
                    68:33:a9:67:e6:c2:23:be:ea:a1:4a:50:3e:bd:80:
                    e2:e2:ae:2f:df:a4:7c:1f:d3:3a:db:0b:52:bd:ad:
                    b7:77:44:fa:a2:9e:40:93:06:c3:6b:6c:6e:95:80:
                    a3:9f:af:d7:88:7e:8b:45:f9:7d:fc:11:b6:b0:4b:
                    a7:c8:75:60:68:d4:56:6b:78:09:90:72:64:6e:ee:
                    5c:a8:2b:85:62:c1:86:60:38:ed:50:57:71:c2:9e:
                    de:af:fc:1c:6c:cf:1e:64:d3:52:75:41:06:01:bc:
                    02:c2:71:c9:d1:a5:d3:9f:8e:d3:f8:82:6e:31:50:
                    88:47:1a:7d:8b:3d:48:89:ba:87:8a:93:40:8c:79:
                    44:27:9b:05:e7:6e:98:a9:c1:07:87:f8:6a:e4:ae:
                    c1:1e:d0:f0:ef:af:b9:b0:03:0d:2f:80:d9:77:f6:
                    57:be:bf:04:69:7d:f6:b2:b8:56:b0:84:7a:41:23:
                    8c:f8:89:37:dc:56:06:0e:5b:bf:2e:81:82:2d:3d:
                    fc:63:1a:d7:cd:fa:22:56:e1:c3:f1:dc:7f:ef:29:
                    7d:1c:84:f7:41:4c:fc:4c:7b:61:47:c3:2c:2b:54:
                    a1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:3B:29:7A:24:40:0E:28:7D:F2:20:6C:BF:4F:0C:0E:5C:3C:98:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/a98ae403-bdc1-35b2-b12c-c2479f89ccbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:5304::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:7f:38:20:e8:3c:4e:8d:d0:41:ec:51:dd:e1:53:77:a4:95:
         c6:bd:c7:75:0a:d8:a1:29:11:03:ba:c9:5f:4b:0d:09:10:23:
         46:58:40:ec:66:e6:c7:f3:9a:e1:1e:f7:6a:73:80:f9:3a:79:
         e4:56:bb:7b:3c:6c:aa:86:48:c5:45:64:30:82:d0:d2:a6:56:
         67:0d:fa:e3:f1:c3:2a:ab:47:f2:06:99:84:49:d9:b1:1f:01:
         40:46:70:11:3d:7d:28:d1:dc:d4:61:bd:47:ba:8a:fb:6d:bd:
         5f:a3:4b:b6:e5:b6:2a:55:1a:91:29:e2:cb:85:63:09:86:0d:
         8f:76:fc:e9:dd:53:77:7d:a0:cb:d2:2c:ad:e5:b4:83:ac:61:
         90:2a:83:ff:74:af:9f:c2:d7:6c:f5:29:ea:8b:6b:e7:38:55:
         72:81:3d:75:2d:05:2d:b8:63:a6:48:04:de:24:f6:c4:aa:f2:
         7b:4d:61:40:13:33:e9:20:4a:13:5f:dc:5f:ea:d8:ae:cf:b6:
         79:72:6c:96:3a:14:1b:f4:c9:d5:b0:7c:7c:38:5f:54:18:52:
         2f:2a:cd:49:09:71:80:ec:9d:c4:63:c8:2e:58:ad:5a:b4:a6:
         71:d5:96:e3:66:e9:ee:7a:d9:f2:89:6a:d2:70:22:63:c3:8b:
         c5:fa:89:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----