Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/fc7f65fd-675a-310e-a990-0bfc4b30196f.roa
File:                     fc7f65fd-675a-310e-a990-0bfc4b30196f.roa (raw, json)
Hash identifier:          i7yAxpStK4PUxWWGUksli6dKPnauzHlis4wakpYbel8=
Subject key identifier:   83:B7:A8:D0:23:7D:A1:9F:BD:95:88:00:68:71:A3:10:1C:8D:FA:C7
Certificate issuer:       /CN=67799f7f-4826-4afa-89e7-8d0478dd127f
Certificate serial:       010D0C9F4328576D51CC73C042CFC1631C46C94B
Authority key identifier: 6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/fc7f65fd-675a-310e-a990-0bfc4b30196f.roa
Signing time:             Tue 01 May 2018 15:16:31 +0000
ROA not before:           Fri 27 Apr 2018 04:00:00 +0000
ROA not after:            Thu 27 Apr 2028 04:00:00 +0000
asID:                     38895
IP address blocks:        2600:9000:5306::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:63:1c:46:c9:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67799f7f-4826-4afa-89e7-8d0478dd127f
        Validity
            Not Before: Apr 27 04:00:00 2018 GMT
            Not After : Apr 27 04:00:00 2028 GMT
        Subject: CN=2e35d7cc-5aba-4c9f-92b7-d6a9a947ec96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ec:9e:fb:89:d5:8b:8f:26:99:84:36:78:ab:
                    1b:13:f7:03:27:aa:c3:93:cd:b9:85:0a:da:f0:90:
                    91:42:35:a2:f6:86:4c:df:5c:bb:92:e7:6f:85:a7:
                    8c:59:d7:d4:a0:50:88:99:bd:1a:25:77:52:42:71:
                    81:07:7e:22:11:52:77:76:20:ea:50:e1:a6:66:f5:
                    1a:aa:06:57:c6:3b:17:a2:91:1b:a7:44:7f:89:25:
                    62:97:8c:93:b2:ed:21:29:47:fc:5b:f1:07:24:c9:
                    0c:da:60:15:2d:5b:bc:4a:49:d9:b9:ea:9f:d0:e9:
                    4d:bc:c5:95:d6:8d:7b:69:2a:13:6e:a0:76:54:e8:
                    6e:54:3c:56:c1:65:07:a2:7a:b8:3b:dc:28:33:ee:
                    b1:00:05:6a:30:5c:76:97:6e:ab:56:23:7a:96:74:
                    bd:af:ee:ea:df:0c:09:c3:1a:84:72:13:9a:e5:8c:
                    67:30:87:00:ca:03:9b:19:47:bc:a2:9f:11:79:08:
                    b8:eb:81:16:d6:51:66:57:38:08:e8:94:35:ba:54:
                    82:bb:00:5a:30:fa:d2:03:5e:4b:b3:7f:4f:ff:fb:
                    e2:ee:a4:0c:c7:d0:26:8e:f3:c5:ec:1d:99:f0:94:
                    88:d2:d8:83:cb:7d:5a:09:06:15:8e:bc:bc:30:f0:
                    29:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B7:A8:D0:23:7D:A1:9F:BD:95:88:00:68:71:A3:10:1C:8D:FA:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/fc7f65fd-675a-310e-a990-0bfc4b30196f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f/67799f7f-4826-4afa-89e7-8d0478dd127f.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:3D:87:26:F7:3D:15:9A:07:1B:D5:6F:DA:EA:C1:42:EC:24:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/67799f7f-4826-4afa-89e7-8d0478dd127f.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:9000:5306::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:70:f6:57:f1:ef:42:bb:8e:fd:6d:8b:0a:e3:57:ce:06:e1:
         b2:8e:b4:ba:49:9e:34:54:3b:b0:ff:6e:b2:42:f7:86:db:97:
         c9:7d:1e:da:e3:5c:01:ee:36:38:57:75:71:e6:c7:f1:68:f9:
         db:ff:7a:81:f0:1d:03:e3:21:df:90:73:d6:7a:af:64:61:61:
         7d:de:e9:46:1e:4b:1f:49:d4:49:73:6a:0f:4b:52:f2:64:d2:
         63:9e:15:be:f9:eb:04:aa:42:fc:18:85:a0:b8:a1:4d:d5:33:
         3b:28:89:67:df:af:6c:e8:3c:f9:b0:b0:92:14:24:0d:58:3e:
         b9:47:a2:b9:97:18:a1:c6:7f:e7:15:72:5d:0e:5e:27:af:d5:
         5c:7f:c1:5d:92:8e:05:6a:47:d6:21:8c:a4:50:65:27:90:ab:
         b0:39:bc:de:37:dc:a3:af:89:43:9a:61:ef:e9:a8:85:a1:df:
         e7:93:93:0e:bf:c5:da:48:b9:d5:19:10:51:fd:3f:4c:b3:eb:
         e2:98:92:32:79:5b:2c:ae:15:ab:01:a7:84:92:8d:df:1d:72:
         bf:e3:f3:48:2b:71:2b:64:64:68:ef:c0:76:9e:cc:d3:ee:7c:
         e7:eb:da:7d:a7:dd:f1:9b:fd:aa:84:2e:59:a0:16:7c:4a:63:
         96:2b:a4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----