Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/d97cca41-cd63-34ad-a8f5-131f2a79a1dc.roa
File:                     d97cca41-cd63-34ad-a8f5-131f2a79a1dc.roa (raw, json)
Hash identifier:          6YIP0H6GJL6F9jmliOe8KmsohtBPeAKq3ixsrubDSjg=
Subject key identifier:   53:56:47:0C:05:27:F2:80:ED:07:4A:CD:07:0D:3A:C2:88:48:D5:6F
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1631C3DB7B8
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/d97cca41-cd63-34ad-a8f5-131f2a79a1dc.roa
Signing time:             Tue 01 May 2018 15:06:36 +0000
ROA not before:           Fri 27 Apr 2018 04:00:00 +0000
ROA not after:            Thu 27 Apr 2028 04:00:00 +0000
asID:                     16509
IP address blocks:        2600:9000:5305::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:63:1c:3d:b7:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 27 04:00:00 2018 GMT
            Not After : Apr 27 04:00:00 2028 GMT
        Subject: CN=708d2ee8-1035-4422-ada1-53b919cf6f9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:10:21:49:d1:90:f1:46:56:cc:a1:c4:01:94:
                    2d:e2:7e:38:f1:2b:43:f2:44:d5:8e:87:06:02:52:
                    aa:00:e7:bf:ea:bb:2f:27:7a:ca:b9:fd:4f:7c:7a:
                    9b:99:75:8a:70:8a:ee:5f:c7:bd:08:f0:1e:54:5e:
                    cf:0e:4c:74:61:dd:88:a4:51:11:8d:a7:59:f4:07:
                    29:7a:2d:c0:5f:26:16:51:22:fc:fe:e4:75:6a:ed:
                    54:2a:c2:5e:3f:95:49:0e:6f:13:e3:7c:aa:08:88:
                    04:36:f2:fd:a7:e9:e1:2a:41:e1:5c:f7:dd:63:bf:
                    05:22:30:2c:b3:35:f7:e4:bf:00:e1:af:2b:fb:fc:
                    66:bf:79:81:42:b4:23:ca:95:71:31:d2:b7:a0:4b:
                    7f:9b:42:9f:84:94:30:6d:79:01:ca:c8:86:bf:14:
                    aa:f3:7b:56:38:f5:d5:c2:4f:1e:d2:aa:5c:55:81:
                    68:b2:1e:f8:27:f6:45:46:fb:35:0f:89:66:bd:dc:
                    47:64:8c:49:31:ef:ea:ca:84:68:90:99:c8:60:07:
                    53:c6:e6:47:b0:97:d2:f4:0f:2a:b3:0d:33:1f:a5:
                    24:43:a8:fe:40:7d:87:1e:97:d7:62:ac:4d:39:ec:
                    a9:3a:f2:c8:a8:63:b7:d0:ff:82:50:0a:f1:b0:0e:
                    3c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:56:47:0C:05:27:F2:80:ED:07:4A:CD:07:0D:3A:C2:88:48:D5:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/d97cca41-cd63-34ad-a8f5-131f2a79a1dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:5305::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:8c:72:61:5a:68:d1:1a:ec:dd:ab:47:64:05:1e:54:70:a6:
         38:b2:e2:e4:46:5f:37:ef:62:27:65:30:4b:4d:42:9b:b2:48:
         5b:dc:0c:36:00:8a:58:6e:16:c1:86:cd:5e:ab:0f:7e:5b:c7:
         3a:0b:5e:a4:01:73:32:61:2b:b0:6f:41:9d:57:7d:1b:b7:11:
         b5:4b:34:73:3b:44:7e:9d:47:1c:b9:09:4f:11:aa:8d:ef:ca:
         92:6c:e6:91:4f:50:2f:58:45:83:c3:ca:67:9f:0d:3e:6a:ee:
         b8:fa:35:2f:a7:32:b4:35:58:cd:df:7e:71:9d:42:d7:a2:77:
         27:45:bb:6c:bd:d3:09:61:1b:e0:0d:04:3f:9d:a7:62:5e:e9:
         03:7e:be:0d:f2:2d:92:d3:82:85:c8:1e:dd:75:b7:9f:d3:4d:
         34:4b:6a:2d:08:1e:30:39:4d:15:21:53:8d:a1:16:56:71:6d:
         0a:09:f5:1e:1d:06:73:cc:e2:74:5e:07:16:a8:8e:d9:df:24:
         2f:d7:34:e5:9d:46:33:78:83:e2:03:bc:76:49:c8:3e:44:54:
         d3:d6:2b:1f:31:46:34:6c:dc:82:fe:fe:d6:86:f6:fb:0d:89:
         a5:52:df:77:ee:77:7a:ca:7d:cc:9b:54:9d:c7:2b:cb:16:0d:
         63:a8:7d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----