Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/0274b475-0d8e-3e00-bc64-bc81a217105e.roa
File:                     0274b475-0d8e-3e00-bc64-bc81a217105e.roa (raw, json)
Hash identifier:          PF8mwgNQVe6xA4dv0zp2egoSHhbhSNaUZsd8NwBnsKc=
Subject key identifier:   D0:4E:8D:B8:75:52:F2:59:FA:84:8C:1E:C8:95:DB:44:26:56:A9:32
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583D17C2EE922C9E1C2AD67609A0
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/0274b475-0d8e-3e00-bc64-bc81a217105e.roa
Signing time:             Mon 13 Dec 2021 05:00:00 +0000
ROA not before:           Mon 13 Dec 2021 05:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     32931
IP address blocks:        104.234.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:17:c2:ee:92:2c:9e:1c:2a:d6:76:09:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 05:00:00 2021 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=6559f83f-87b6-4651-91e3-9467130fd8c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b1:1d:af:b4:7e:e3:e3:88:e4:de:9b:7b:a9:
                    4a:a9:e2:c9:d8:97:a3:11:e1:09:42:ac:19:ce:79:
                    5d:06:b3:af:89:72:31:65:7c:6d:de:3d:c8:9b:86:
                    b8:34:5c:d6:ca:ab:61:4d:78:23:d1:06:74:df:01:
                    76:2b:31:44:53:12:5e:39:16:c9:69:30:50:72:e7:
                    74:eb:d7:9f:fa:fc:e0:2a:40:ea:56:e3:6b:5e:0d:
                    0e:0f:f2:dd:b5:e7:ba:1e:95:69:b1:ce:6c:1c:fa:
                    8c:ba:1e:0c:82:8b:0f:e4:88:73:3f:3b:15:78:ee:
                    b2:bd:84:77:21:27:76:ee:70:71:9c:45:e3:4f:c7:
                    e9:ce:b6:0e:2b:a7:7b:98:40:e5:ef:9a:cf:8a:db:
                    bf:48:bf:33:40:ef:cf:a9:d6:20:c1:ff:a8:36:fc:
                    77:2f:51:28:b8:a2:51:55:a6:df:bd:2d:19:fc:cf:
                    0f:99:4e:fb:d4:71:ff:88:7e:a9:dd:e1:9c:5f:e0:
                    8f:fa:9e:89:64:66:49:78:ea:d8:fe:98:fd:0a:4b:
                    df:43:87:7a:7c:e6:ec:0f:63:ad:7c:e8:6d:e2:3b:
                    17:f2:22:f2:f6:32:af:be:fb:b4:67:05:5c:cf:b6:
                    82:f1:71:5c:6d:29:22:3a:09:f2:2b:49:5f:ff:9e:
                    74:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:4E:8D:B8:75:52:F2:59:FA:84:8C:1E:C8:95:DB:44:26:56:A9:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/0274b475-0d8e-3e00-bc64-bc81a217105e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:0a:25:87:ce:9a:da:d4:25:0e:88:47:3d:df:fb:39:21:4f:
         36:d4:82:9e:f8:de:f7:ae:b0:a4:8c:9f:4c:d3:18:4e:70:82:
         6b:f9:a8:0c:3a:6d:80:45:ff:1d:24:b5:90:41:bd:f8:1a:52:
         22:ef:1c:7e:25:da:5b:3a:41:f0:18:f3:8f:e0:07:f3:51:15:
         2f:05:76:0d:bf:75:33:b4:63:f2:df:a9:93:92:92:c5:03:e7:
         36:4c:11:98:cf:04:84:4b:f5:98:f9:99:da:12:12:3a:34:ba:
         fc:6b:5a:78:8c:e1:b8:90:81:a6:94:9b:6d:62:12:49:0f:d8:
         d5:55:8b:16:7b:47:7f:ff:38:8b:8b:73:5d:a7:61:4a:38:76:
         65:9b:54:58:d2:a7:a5:b1:47:f8:d0:a2:85:ea:5f:9f:0b:a4:
         11:11:fd:9b:64:7d:c6:3c:c7:b9:7b:37:94:ee:d2:f1:cc:a8:
         f5:28:28:30:dd:41:d4:ac:5d:d5:f7:fe:e4:5b:be:33:ff:f0:
         86:cd:14:54:82:28:ad:b2:36:62:87:6b:30:21:d0:3a:46:b0:
         75:e2:bd:aa:20:81:7e:e8:b9:cb:6b:12:a0:b7:5e:c6:65:24:
         6d:f2:64:6f:82:dc:66:1a:ad:49:c5:6a:20:0e:3d:e8:05:b3:
         ed:08:0b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----