Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/db3a1ee9-a06f-311b-8402-46024eac97f9.roa
File:                     db3a1ee9-a06f-311b-8402-46024eac97f9.roa (raw, json)
Hash identifier:          YGbKsIsMq+6GehxgOOKVxQEHZvEF7XdCa4XIVuDenzw=
Subject key identifier:   D0:29:E2:32:97:85:B0:1F:02:E4:B0:DE:BB:D7:AE:21:70:F2:8E:5C
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1631C32222B
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/db3a1ee9-a06f-311b-8402-46024eac97f9.roa
Signing time:             Tue 01 May 2018 14:53:57 +0000
ROA not before:           Fri 27 Apr 2018 04:00:00 +0000
ROA not after:            Thu 27 Apr 2028 04:00:00 +0000
asID:                     16509
IP address blocks:        205.251.196.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:63:1c:32:22:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 27 04:00:00 2018 GMT
            Not After : Apr 27 04:00:00 2028 GMT
        Subject: CN=dbb9e0ff-224e-480b-9842-bd12c4121563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ed:fb:56:61:0d:66:3f:81:9c:f2:6f:2a:39:
                    a3:b1:bf:96:ae:2a:de:1f:fa:f3:93:4f:48:6a:e9:
                    87:cb:bf:93:b1:0e:21:68:13:15:81:fc:24:a3:0c:
                    bf:b9:ec:bd:39:08:98:65:b1:61:da:cd:54:4d:01:
                    62:e9:01:da:ec:9f:cc:5f:16:c9:a7:33:83:a9:06:
                    68:cd:3f:3b:61:4e:e2:e6:81:7e:6f:4e:65:f8:4f:
                    ec:65:df:9e:0f:17:a9:07:f0:37:99:b7:b8:7a:f0:
                    1c:15:48:f2:43:3f:19:b6:30:af:f2:71:c9:ec:aa:
                    a3:02:1e:f3:92:81:65:2f:bb:63:56:e8:8d:55:62:
                    cb:26:db:d9:5a:99:4c:a6:f1:fc:a5:d1:7b:f4:52:
                    c9:69:72:a5:d1:df:c6:b2:13:7e:59:bf:ec:f5:fd:
                    a8:aa:4d:aa:9f:aa:ad:ec:68:aa:46:9d:cd:67:c7:
                    cd:7c:54:08:64:1a:de:60:66:0c:3f:f0:10:0d:27:
                    91:2f:59:71:cb:a2:50:65:84:fd:d4:6f:43:a2:50:
                    4b:83:ca:4b:a2:3c:ff:e8:dd:08:a3:a7:24:34:aa:
                    5d:e6:a6:3c:e6:90:46:1c:77:92:04:b4:ca:f4:80:
                    50:fd:bc:b8:0e:21:bc:ff:61:15:94:b7:c8:42:00:
                    41:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:29:E2:32:97:85:B0:1F:02:E4:B0:DE:BB:D7:AE:21:70:F2:8E:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/db3a1ee9-a06f-311b-8402-46024eac97f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.251.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:89:d3:68:db:96:b3:9d:63:05:c6:17:f0:dd:6c:87:63:0a:
         7e:e6:b4:99:09:df:37:eb:b8:cc:b0:ea:4d:15:51:9b:f1:50:
         fa:ad:5a:8b:73:0f:ff:cf:96:83:4a:1f:0d:90:aa:4c:6c:cc:
         08:e2:5e:5e:ca:74:c2:43:b2:ec:46:09:56:5f:b7:e3:4b:bf:
         d9:95:21:0b:f9:e5:5c:c4:b9:46:18:0a:97:7f:a5:6d:f3:03:
         d9:6b:24:84:5a:b5:77:b7:e1:1f:f2:55:f6:63:e8:73:ed:bb:
         13:45:ca:dd:e5:26:1e:cb:b4:c8:2a:04:3a:e3:31:e8:b5:29:
         fd:8e:dc:43:60:99:99:3b:b3:dc:17:95:43:d4:c8:fe:75:a1:
         a6:ba:2a:40:5f:8d:34:81:88:84:23:2b:80:1e:a5:1f:45:4f:
         9e:43:b7:f7:1c:52:e7:5c:ce:5a:2b:ef:27:fe:ae:22:aa:0e:
         ac:18:da:be:c5:2a:bb:ac:00:21:0d:e7:a3:ed:2b:c1:8a:fa:
         6a:70:0f:98:67:26:96:d5:b3:38:27:41:50:86:6e:63:3b:ae:
         d8:9a:2b:0e:2e:ad:89:c8:6a:fb:14:3b:4c:d6:8b:d6:a2:e1:
         a5:c8:c4:03:36:d9:37:0e:30:64:21:88:20:dc:66:e8:e2:20:
         81:1c:63:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----