Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/e6796604-ddb7-35e9-9aff-475db20a17a2.roa
File:                     e6796604-ddb7-35e9-9aff-475db20a17a2.roa (raw, json)
Hash identifier:          jBtpXEJpbxo7g3tFbs0ZbRQqXnpNn64GE//EI+50Tes=
Subject key identifier:   C1:ED:C4:BC:89:63:48:0F:B9:D1:35:E5:AA:BC:58:F8:CC:38:B0:11
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1631C3702CA
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/e6796604-ddb7-35e9-9aff-475db20a17a2.roa
Signing time:             Tue 01 May 2018 14:59:17 +0000
ROA not before:           Fri 27 Apr 2018 04:00:00 +0000
ROA not after:            Thu 27 Apr 2028 04:00:00 +0000
asID:                     16509
IP address blocks:        2600:9000:5300::/47 maxlen: 47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:63:1c:37:02:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 27 04:00:00 2018 GMT
            Not After : Apr 27 04:00:00 2028 GMT
        Subject: CN=5ca0c9fc-4bc9-4f3b-8822-dde6bd8cbaf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:85:aa:19:3e:69:a6:b4:01:4a:1f:f1:13:26:
                    38:60:c7:d5:69:5f:69:55:0e:ac:81:64:20:5a:47:
                    31:67:9e:54:35:f6:b7:10:ef:fb:43:8e:78:7f:b0:
                    1f:e7:69:a5:19:61:f7:50:00:7b:cb:56:18:1b:93:
                    14:20:26:2d:b6:0c:09:8d:bc:24:60:bb:38:43:bc:
                    06:56:af:20:3a:6d:59:6c:aa:96:04:4d:d0:43:6f:
                    99:ae:2d:bc:a6:5a:86:2d:1d:38:8b:fb:ea:90:c5:
                    19:83:14:d0:d8:7c:2f:d0:af:c5:df:39:12:c6:cb:
                    3b:0e:df:75:90:3a:77:7d:38:cf:39:a5:99:70:66:
                    96:0b:51:c0:4d:1f:4b:da:21:e3:75:b7:9d:68:b3:
                    53:37:e6:d5:c1:9b:0c:8f:96:40:d9:d1:eb:fe:3a:
                    79:e6:4d:99:e0:d8:a3:0a:11:d2:00:af:3e:b2:86:
                    b3:04:3c:f2:f8:8a:3d:15:a9:b7:5b:e7:01:f8:75:
                    f5:d7:94:19:df:61:c8:89:da:f0:33:a4:fd:59:87:
                    9d:4b:4c:dd:93:a7:f6:ca:c6:10:2e:f4:cc:70:a1:
                    5f:48:f5:54:6e:f8:79:ac:f2:6d:73:5c:3c:7d:cd:
                    46:e1:2f:e5:99:3c:1e:77:6c:13:b1:ac:cf:60:62:
                    38:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:ED:C4:BC:89:63:48:0F:B9:D1:35:E5:AA:BC:58:F8:CC:38:B0:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/e6796604-ddb7-35e9-9aff-475db20a17a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:5300::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:33:15:e9:74:06:ab:4e:b3:84:79:af:70:b3:6b:c2:48:5f:
         e5:ad:56:55:39:bc:dc:87:04:e3:ed:6c:b6:a8:ba:3c:39:b8:
         6e:a6:db:cc:10:02:88:b9:29:85:77:d4:48:9c:80:f4:3c:2c:
         f8:38:74:13:da:33:02:4f:ec:9e:de:d0:47:c1:cc:20:db:eb:
         19:ac:1f:19:12:d7:bc:b3:7a:e5:a2:5b:68:8c:f8:e1:eb:59:
         f6:db:90:95:15:50:ae:94:76:b3:26:63:b7:81:71:06:8e:ae:
         6e:1f:f0:d5:a7:d1:70:6e:79:97:0e:07:ad:ff:80:54:32:41:
         32:0d:20:39:d5:64:c5:37:4b:bd:d6:bd:2e:54:ac:73:d4:61:
         6b:82:e8:26:70:ea:ab:df:17:e6:74:ff:5a:61:6f:73:d8:04:
         3d:6b:5e:4b:09:e9:3a:a7:43:7e:48:a3:8d:78:b9:10:e2:83:
         6c:ab:6e:2d:3e:a2:7a:b8:a6:a0:ed:f6:ac:6e:2e:e4:2b:2f:
         93:1b:49:83:d9:14:46:a3:68:fb:2c:a4:f1:53:6a:a5:29:40:
         d4:30:4c:71:ce:ca:fa:18:33:2e:90:77:f3:1e:e2:26:29:cc:
         2c:f8:75:45:1c:3b:a4:8a:6c:3a:a7:5e:41:a2:ad:30:ac:72:
         26:67:4f:96
-----BEGIN CERTIFICATE-----
MIIGQjCCBSygAwIBAgIUAQ0Mn0MoV21RzHPAQs/BYxw3AsowCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJDY3Nzk5ZjdmLTQ4MjYtNGFmYS04OWU3LThkMDQ3OGRkMTI3
ZjAeFw0xODA0MjcwNDAwMDBaFw0yODA0MjcwNDAwMDBaMC8xLTArBgNVBAMTJDVj
YTBjOWZjLTRiYzktNGYzYi04ODIyLWRkZTZiZDhjYmFmNjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAN2Fqhk+aaa0AUof8RMmOGDH1WlfaVUOrIFkIFpH
MWeeVDX2txDv+0OOeH+wH+dppRlh91AAe8tWGBuTFCAmLbYMCY28JGC7OEO8Blav
IDptWWyqlgRN0ENvma4tvKZahi0dOIv76pDFGYMU0Nh8L9Cvxd85EsbLOw7fdZA6
d304zzmlmXBmlgtRwE0fS9oh43W3nWizUzfm1cGbDI+WQNnR6/46eeZNmeDYowoR
0gCvPrKGswQ88viKPRWpt1vnAfh19deUGd9hyIna8DOk/VmHnUtM3ZOn9srGEC70
zHChX0j1VG74eazybXNcPH3NRuEv5Zk8HndsE7Gsz2BiOJkCAwEAAaOCA1gwggNU
MB0GA1UdDgQWBBTB7cS8iWNID7nRNeWqvFj4zDiwETCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjc3OTlm
N2YtNDgyNi00YWZhLTg5ZTctOGQwNDc4ZGQxMjdmL2U2Nzk2NjA0LWRkYjctMzVl
OS05YWZmLTQ3NWRiMjBhMTdhMi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyLzY3Nzk5ZjdmLTQ4MjYtNGFmYS04OWU3
LThkMDQ3OGRkMTI3Zi82Nzc5OWY3Zi00ODI2LTRhZmEtODllNy04ZDA0NzhkZDEy
N2YuY3JsMB8GA1UdIwQYMBaAFGp3PYcm9z0Vmgcb1W/a6sFC7CSoMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvNjc3OTlmN2YtNDgyNi00YWZhLTg5ZTctOGQwNDc4
ZGQxMjdmLmNlcjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHASYAkABTADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3DQEB
CwOCAQEAEDMV6XQGq06zhHmvcLNrwkhf5a1WVTm83IcE4+1stqi6PDm4bqbbzBAC
iLkphXfUSJyA9Dws+Dh0E9ozAk/snt7QR8HMINvrGawfGRLXvLN65aJbaIz44etZ
9tuQlRVQrpR2syZjt4FxBo6ubh/w1afRcG55lw4Hrf+AVDJBMg0gOdVkxTdLvda9
LlSsc9Rha4LoJnDqq98X5nT/WmFvc9gEPWteSwnpOqdDfkijjXi5EOKDbKtuLT6i
erimoO32rG4u5CsvkxtJg9kURqNo+yyk8VNqpSlA1DBMcc7K+hgzLpB38x7iJinM
LPh1RRw7pIpsOqdeQaKtMKxyJmdPlg==
-----END CERTIFICATE-----