Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/eb325817-0ff8-34d0-b284-46d0ffd20975.roa
File:                     eb325817-0ff8-34d0-b284-46d0ffd20975.roa (raw, json)
Hash identifier:          2KTbHLa8fA0jSSNi9DIFnasbsm4/1rrUtLFWO3qZTBo=
Subject key identifier:   61:ED:CE:AC:97:3F:4C:DB:CB:03:A3:0B:27:4D:81:29:FD:D4:8A:35
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1631C436422
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/eb325817-0ff8-34d0-b284-46d0ffd20975.roa
Signing time:             Tue 01 May 2018 15:12:48 +0000
ROA not before:           Fri 27 Apr 2018 04:00:00 +0000
ROA not after:            Thu 27 Apr 2028 04:00:00 +0000
asID:                     38895
IP address blocks:        2600:9000:5301::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:63:1c:43:64:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 27 04:00:00 2018 GMT
            Not After : Apr 27 04:00:00 2028 GMT
        Subject: CN=d852bb51-3cfc-4334-99d5-b4c571f27f0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:97:ba:01:db:d3:74:cc:93:8a:d4:71:5c:51:
                    47:cb:41:47:e8:bd:62:c5:c0:1a:f1:af:62:d1:07:
                    50:04:ca:3b:93:17:81:e0:b7:12:1c:ca:d0:e6:94:
                    5b:aa:44:67:4e:0f:ca:73:f2:e0:83:7d:0b:91:4f:
                    de:66:93:99:85:0d:d8:f7:fe:b1:43:85:67:40:68:
                    15:ed:90:d2:05:29:73:5f:d7:8e:4b:f0:0b:15:7c:
                    b2:20:0c:7c:12:85:d5:b2:48:d7:b8:a9:89:07:00:
                    50:23:7b:d0:bd:61:97:45:23:8a:94:25:b6:64:27:
                    c8:ce:2a:ab:c2:4b:34:2f:cf:c2:bf:24:3b:9f:d8:
                    48:f4:fe:ca:0e:2c:f2:ad:37:09:f7:a7:84:28:45:
                    f7:08:f5:86:cc:69:fa:ff:f6:72:5c:03:de:0d:3e:
                    15:58:cc:c8:e6:4d:d7:2e:1d:b6:33:37:ee:a9:7e:
                    e4:71:54:bf:db:44:9d:f1:02:17:0a:3e:2e:34:4a:
                    8a:50:b9:10:81:fe:b0:ba:83:a8:e9:eb:4b:ed:5f:
                    dd:6a:ce:7f:33:65:2f:52:ad:7e:28:c4:60:07:07:
                    d3:1e:ed:f0:ab:fc:e6:ad:bb:57:f9:3b:c6:7f:aa:
                    16:75:3d:bd:8a:89:bc:41:83:e0:75:0c:bd:8d:6b:
                    ef:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:ED:CE:AC:97:3F:4C:DB:CB:03:A3:0B:27:4D:81:29:FD:D4:8A:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/eb325817-0ff8-34d0-b284-46d0ffd20975.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:5301::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:3a:4a:40:c2:c2:9e:58:50:85:1d:eb:4c:3c:49:8e:6d:be:
         3b:de:e3:c7:8f:61:b8:4d:26:a3:e5:10:17:e5:11:31:2d:f7:
         8b:6c:64:cd:2b:48:6e:b8:34:21:82:10:7d:c0:ce:2d:6c:dd:
         15:b1:47:cc:a1:4e:17:98:1d:ec:ee:02:42:e5:68:25:8f:b5:
         41:c4:5c:87:ac:f0:9f:77:3b:80:c7:5e:a3:f3:19:44:e5:9b:
         56:b1:2f:b6:84:64:cd:c3:76:cd:23:46:1a:7e:70:b6:58:72:
         c2:5a:88:a2:ba:44:49:0a:68:9b:03:24:aa:18:46:65:ba:c1:
         ba:64:8c:ac:95:ce:5d:bb:18:93:2c:48:19:36:a1:5c:4f:d4:
         81:3c:49:35:30:e6:1a:52:cd:71:0a:20:00:55:d0:95:0a:6d:
         e4:f2:b4:dc:f2:15:b2:68:b6:aa:a3:07:1d:87:8c:55:3f:bc:
         69:21:39:bc:f9:ab:ea:e1:8b:b4:cc:40:f2:ed:d7:59:b3:7d:
         cb:ca:85:92:5e:af:a2:38:6b:9a:0d:1a:58:87:b0:40:21:97:
         1c:9e:df:ee:37:07:a3:66:2a:0b:32:cb:69:b7:7e:92:79:62:
         50:38:4a:a4:86:32:41:10:30:c9:70:12:b6:42:cb:f7:7f:63:
         10:5d:d1:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----