Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/7f858de5-8e97-3d42-93cd-452a67700e01.roa
File:                     7f858de5-8e97-3d42-93cd-452a67700e01.roa (raw, json)
Hash identifier:          4xD5wGvRu5AM6lliYZLzZhXxvv7xqn4TdQQpSwcB2kc=
Subject key identifier:   6C:1D:1B:0B:5D:7D:5D:8F:C6:20:44:11:F3:68:D7:62:D4:A5:CE:BF
Certificate issuer:       /CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
Certificate serial:       010D0C9F4328576D51CC73C042CFC16B731F789C
Authority key identifier: F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/7f858de5-8e97-3d42-93cd-452a67700e01.roa
Signing time:             Thu 20 Jun 2019 04:22:50 +0000
ROA not before:           Mon 31 Mar 2014 04:00:00 +0000
ROA not after:            Sun 31 Mar 2024 04:00:00 +0000
asID:                     11071
IP address blocks:        2604:2c00:fd80::/41 maxlen: 48
                          2604:2c00:ff00::/41 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:6b:73:1f:78:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4482104-b7a8-4919-8b27-9583ddf9e8dd
        Validity
            Not Before: Mar 31 04:00:00 2014 GMT
            Not After : Mar 31 04:00:00 2024 GMT
        Subject: CN=de68c7c3-e5bc-4937-9a0a-ea4e1578b26c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:48:0c:3f:0f:95:ce:7d:a5:f0:ce:bf:b4:
                    ce:0d:58:16:78:b6:87:d0:0c:c1:7e:40:16:d7:07:
                    42:1c:19:6b:26:5a:18:1d:9b:fd:e2:85:66:71:a0:
                    cb:b1:a1:ca:19:e1:e5:6e:b1:8e:3e:59:a4:27:b7:
                    70:e3:f5:c8:f1:40:36:2c:38:f3:8d:e7:da:b6:5a:
                    14:40:af:e0:d2:3c:c8:8e:16:21:7c:a6:68:ef:11:
                    c5:a4:ae:ba:33:ac:75:70:d8:98:34:22:c7:8a:83:
                    ab:0e:2e:f6:b3:88:51:42:5e:37:f5:8d:63:00:da:
                    50:bf:fd:37:2d:57:e1:11:c8:43:6f:c3:3d:c3:69:
                    78:ab:27:73:96:a3:50:81:24:0f:3b:0f:d3:65:b0:
                    ec:2b:6b:83:55:02:6c:72:ac:d5:ee:ed:b2:d1:9b:
                    f9:c3:c0:cf:c5:1f:46:ab:ff:2b:3f:43:7a:19:55:
                    d9:26:5d:e8:bc:34:29:a2:5f:73:11:ae:20:38:65:
                    79:3f:71:77:25:8f:c6:ed:3e:f9:34:9e:92:87:9e:
                    09:43:fb:84:e9:bd:6a:fe:1e:08:4e:37:fb:ab:23:
                    d0:0a:e1:ab:cd:d2:ad:46:de:a6:45:de:c6:0c:85:
                    26:a8:0a:3d:52:91:b0:12:21:c1:e6:b0:5a:30:ce:
                    79:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:1D:1B:0B:5D:7D:5D:8F:C6:20:44:11:F3:68:D7:62:D4:A5:CE:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/7f858de5-8e97-3d42-93cd-452a67700e01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd/d4482104-b7a8-4919-8b27-9583ddf9e8dd.crl

            X509v3 Authority Key Identifier:
                keyid:F0:24:1C:AB:FF:49:06:0E:5D:16:A8:73:6D:AA:C5:C8:82:67:95:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4482104-b7a8-4919-8b27-9583ddf9e8dd.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2c00:fd80::/41
                  2604:2c00:ff00::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:9c:39:c7:21:55:6d:a2:6b:20:91:cb:6c:d8:65:23:91:c8:
         5a:ce:d8:7b:45:27:f1:8e:22:72:64:2e:a2:6b:1d:92:68:78:
         a5:0a:b1:8d:3d:af:dd:3d:2b:67:ae:74:d4:e5:92:2f:c8:87:
         c2:8a:8a:03:a5:2e:3d:9b:83:8b:03:df:95:cb:73:b4:51:a6:
         85:10:ea:77:e9:aa:cf:42:ec:5d:57:2e:c0:26:38:41:cf:36:
         8d:12:82:60:16:68:e6:dd:66:cb:35:76:24:62:05:40:ab:bf:
         14:b2:8a:1e:b6:4b:f0:18:d2:59:2a:ba:92:b0:a0:8b:78:72:
         be:eb:a1:f4:c2:a3:0b:83:8f:54:c9:9b:40:52:e9:53:64:94:
         b1:dd:a5:39:41:f4:0a:d8:18:ac:38:79:49:53:29:2e:41:2f:
         c4:e4:32:b2:bc:5c:f6:96:65:ac:a9:93:a4:6b:aa:1c:74:12:
         02:9a:b6:75:7c:29:a2:b0:af:e2:ce:29:23:35:b9:6c:e0:e0:
         ac:73:b3:9b:b4:45:81:c2:51:36:35:43:d6:27:25:fc:2b:03:
         ad:3f:31:dc:6d:22:45:f9:22:0e:84:72:0c:8b:c3:6b:1d:6c:
         35:1d:3b:ca:8e:c2:02:3d:37:a0:b4:aa:dc:38:11:62:a3:d2:
         6e:f3:39:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----