Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/bd28dc00-5160-36ac-ad74-3524be0ffaf5.roa
File:                     bd28dc00-5160-36ac-ad74-3524be0ffaf5.roa (raw, json)
Hash identifier:          XlNlzOWSvbUDeChu0yyMQMTqKKLRmjlRMANOQoINVH0=
Subject key identifier:   BE:78:B9:03:6F:5D:E8:EE:54:F9:F4:23:84:6E:C7:FB:EA:B7:E8:13
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1631C452C81
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/bd28dc00-5160-36ac-ad74-3524be0ffaf5.roa
Signing time:             Tue 01 May 2018 15:14:45 +0000
ROA not before:           Fri 27 Apr 2018 04:00:00 +0000
ROA not after:            Thu 27 Apr 2028 04:00:00 +0000
asID:                     38895
IP address blocks:        2600:9000:5304::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:63:1c:45:2c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 27 04:00:00 2018 GMT
            Not After : Apr 27 04:00:00 2028 GMT
        Subject: CN=b227fe89-af80-4822-9890-b44a68c55002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d9:18:a7:2b:4d:77:87:3b:16:65:5e:44:55:
                    15:e6:4c:ed:0f:55:f4:58:fb:70:a7:36:6e:a9:8e:
                    e9:73:23:ad:6a:b2:77:e8:a2:04:6f:73:e0:1f:84:
                    f8:97:65:51:c1:e0:5e:ee:3e:c3:a3:d7:e4:b4:ea:
                    81:48:97:dc:2c:0b:43:17:d8:b5:54:0d:ce:93:2c:
                    1b:c3:fe:5d:aa:d9:75:7c:92:90:b2:b7:07:89:8b:
                    86:21:22:e4:0d:4b:2c:56:43:f3:f5:45:87:3f:12:
                    b2:c2:81:f8:d3:13:53:2c:b0:68:8a:18:22:d4:ce:
                    3f:83:b6:5e:6f:59:7d:f2:c8:70:02:97:f3:7e:17:
                    b6:f5:51:09:68:62:00:c2:62:18:91:52:ee:d2:33:
                    08:8a:2e:7e:4a:8d:61:e0:f8:64:36:9e:52:ed:36:
                    b2:af:e8:60:05:54:82:88:1d:8e:c3:b5:be:3c:75:
                    bb:ee:a8:fd:e2:08:95:ef:34:18:75:8c:fb:b0:9f:
                    57:4b:b6:cc:35:76:c1:af:61:2d:a3:f0:a6:88:37:
                    bd:74:92:ca:ac:16:82:52:c9:6c:81:1b:31:01:f6:
                    17:59:a4:07:01:03:03:6c:9a:1e:12:5c:1c:cb:8a:
                    fb:38:69:99:09:93:e2:25:f6:88:57:dc:8c:91:c4:
                    8b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:78:B9:03:6F:5D:E8:EE:54:F9:F4:23:84:6E:C7:FB:EA:B7:E8:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/bd28dc00-5160-36ac-ad74-3524be0ffaf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:5304::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:05:6d:0d:be:74:c0:b6:1f:bd:1d:eb:66:f3:33:09:59:83:
         69:05:dd:f9:c4:b5:26:bb:70:37:be:11:e2:95:43:91:f2:4e:
         f6:57:85:fd:0a:21:75:3a:07:53:69:55:55:46:32:e5:0f:b0:
         17:fd:fb:e0:85:79:51:e8:d6:cb:67:9b:4d:0a:3b:a9:53:c7:
         5f:61:61:20:07:ab:42:37:9c:9a:b6:9b:e5:b5:2d:0d:2a:65:
         82:d9:b2:78:ea:f4:94:1c:e7:22:c4:0a:d7:dd:d5:78:59:df:
         88:8e:12:c0:af:2d:f9:6b:d1:a8:7d:b4:77:c1:1b:46:c8:72:
         21:56:1a:8d:1b:c4:da:1e:9d:23:fd:04:ce:25:9d:2e:06:77:
         25:d6:59:c1:8f:7a:f1:b6:fd:c0:05:94:1b:0d:bb:a4:70:aa:
         8d:e3:b1:0c:4a:04:76:d0:ff:cf:38:a3:d4:16:28:f4:a3:a4:
         03:9a:03:a9:58:b3:dd:8c:4c:97:16:74:84:2e:11:11:79:de:
         b9:bc:5e:08:f5:b5:66:b0:73:b1:7a:cf:89:ef:8f:b4:bf:89:
         27:2c:f5:18:e9:42:0d:9b:89:93:6b:f6:05:08:5d:e1:9b:90:
         cb:97:c5:a2:e5:c5:e1:aa:6a:f1:d4:0a:cb:95:0d:46:d8:cb:
         e6:a4:54:b9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSygAwIBAgIUAQ0Mn0MoV21RzHPAQs/BYxxFLIEwCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDY3Nzk5ZjdmLTQ4MjYtNGFmYS04OWU3LThkMDQ3OGRkMTI3
ZjAeFw0xODA0MjcwNDAwMDBaFw0yODA0MjcwNDAwMDBaMC8xLTArBgNVBAMTJGIy
MjdmZTg5LWFmODAtNDgyMi05ODkwLWI0NGE2OGM1NTAwMjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANrZGKcrTXeHOxZlXkRVFeZM7Q9V9Fj7cKc2bqmO
6XMjrWqyd+iiBG9z4B+E+JdlUcHgXu4+w6PX5LTqgUiX3CwLQxfYtVQNzpMsG8P+
XarZdXySkLK3B4mLhiEi5A1LLFZD8/VFhz8SssKB+NMTUyywaIoYItTOP4O2Xm9Z
ffLIcAKX834XtvVRCWhiAMJiGJFS7tIzCIoufkqNYeD4ZDaeUu02sq/oYAVUgogd
jsO1vjx1u+6o/eIIle80GHWM+7CfV0u2zDV2wa9hLaPwpog3vXSSyqwWglLJbIEb
MQH2F1mkBwEDA2yaHhJcHMuK+zhpmQmT4iX2iFfcjJHEi50CAwEAAaOCA1gwggNU
MB0GA1UdDgQWBBS+eLkDb13o7lT59COEbsf76rfoEzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjc3OTlm
N2YtNDgyNi00YWZhLTg5ZTctOGQwNDc4ZGQxMjdmL2JkMjhkYzAwLTUxNjAtMzZh
Yy1hZDc0LTM1MjRiZTBmZmFmNS5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzY3Nzk5ZjdmLTQ4MjYtNGFmYS04OWU3
LThkMDQ3OGRkMTI3Zi82Nzc5OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0NzhkZDEy
N2YuY3JsMB8GA1UdIwQYMBaAFGp3PYcm9z0Vmgcb1W/a6sFC7CSoMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvNjc3OTlmN2YtNDgyNi00YWZhLTg5ZTctOGQwNDc4
ZGQxMjdmLmNlcjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASYAkABTBDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEB
CwOCAQEAAwVtDb50wLYfvR3rZvMzCVmDaQXd+cS1JrtwN74R4pVDkfJO9leF/Qoh
dToHU2lVVUYy5Q+wF/374IV5UejWy2ebTQo7qVPHX2FhIAerQjecmrab5bUtDSpl
gtmyeOr0lBznIsQK193VeFnfiI4SwK8t+WvRqH20d8EbRshyIVYajRvE2h6dI/0E
ziWdLgZ3JdZZwY968bb9wAWUGw27pHCqjeOxDEoEdtD/zzij1BYo9KOkA5oDqViz
3YxMlxZ0hC4REXneubxeCPW1ZrBzsXrPie+PtL+JJyz1GOlCDZuJk2v2BQhd4ZuQ
y5fFouXF4apq8dQKy5UNRtjL5qRUuQ==
-----END CERTIFICATE-----