Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/13205d04-8fe4-3228-be88-52dbe212dee6.roa
File:                     13205d04-8fe4-3228-be88-52dbe212dee6.roa (raw, json)
Hash identifier:          JN3lzTJb6oUdPq40ZATC2KSziA1CvG5qdOevbdaTo4c=
Subject key identifier:   FF:B6:B0:2F:02:76:2B:AE:28:F0:E9:B0:68:43:77:B8:14:F5:D7:7C
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583E01802EBC7C42648CDA951180
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/13205d04-8fe4-3228-be88-52dbe212dee6.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     57814
IP address blocks:        206.53.54.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:01:80:2e:bc:7c:42:64:8c:da:95:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=52cdfa61-bd9b-449b-a17c-8bd996db77f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:17:8a:01:19:63:f2:8a:a1:1b:55:b4:10:0e:
                    51:62:ee:f1:b4:af:12:52:3c:a4:95:12:df:cf:15:
                    57:41:ed:1a:4b:a0:c2:f8:f7:be:ea:92:ea:3b:27:
                    4b:5a:d6:b2:a3:1f:02:df:dc:c4:c8:93:f5:37:d4:
                    d9:49:0c:0b:d3:ec:39:55:8d:3b:87:52:70:b5:98:
                    a9:2e:65:b2:b7:db:30:43:0d:c3:69:de:b0:16:3a:
                    a8:e2:24:ff:7c:01:26:b9:42:1e:fb:58:e8:84:75:
                    f4:ac:22:bb:db:2d:6c:fd:fe:fa:8f:80:c1:f9:09:
                    2e:09:62:b6:29:30:e9:57:a3:a2:cf:3b:a4:80:a7:
                    c6:be:1e:f0:a0:7f:84:49:d0:cc:23:95:5b:5f:0b:
                    62:5c:cf:b1:61:ad:38:a0:60:13:46:c0:df:02:bc:
                    27:3d:9e:a0:6a:ea:fe:fc:e3:13:7c:47:a3:94:4a:
                    b7:79:58:66:61:d1:3d:30:5a:b0:95:f3:92:9c:ff:
                    63:06:0c:7d:cb:1b:c8:b0:bb:ec:3b:5d:56:4c:8a:
                    e9:7f:7c:a6:e5:8d:57:41:75:9f:71:c7:35:b4:c2:
                    d1:4c:50:ce:04:96:ed:34:d6:23:43:23:1d:e0:19:
                    cb:43:d7:4e:2f:e6:59:d6:fd:04:cd:e4:a5:3d:4d:
                    c2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B6:B0:2F:02:76:2B:AE:28:F0:E9:B0:68:43:77:B8:14:F5:D7:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/13205d04-8fe4-3228-be88-52dbe212dee6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:d2:f5:83:b9:5f:cd:10:dc:d5:87:15:05:f0:96:1a:c9:ad:
         7b:f4:e7:ca:71:aa:7f:3c:21:8a:6d:22:b6:2f:1f:fc:1d:b8:
         54:5b:9e:dc:24:fc:90:bc:70:5e:42:05:3e:f5:b5:f6:00:32:
         2c:f9:b5:ed:08:30:78:1e:3e:53:f4:ae:94:5a:bd:c8:04:77:
         69:d6:15:d5:f9:1d:e1:e3:ce:25:19:1d:9a:3d:00:ec:0b:b8:
         a2:6b:c3:cc:85:1f:da:6f:7b:ad:f1:5a:74:12:75:b2:a1:d6:
         cb:f3:98:bf:b7:e3:6a:f4:a9:60:ff:95:0f:7b:e0:09:b5:ac:
         f2:53:42:94:74:78:63:3a:fb:2e:0e:c3:c5:62:28:d7:e9:a1:
         e6:cf:1d:eb:9d:57:d5:64:3c:00:1f:90:39:16:7b:47:00:4a:
         a5:19:32:2e:4d:39:ee:54:e5:10:0b:c0:36:1f:e5:da:6f:3a:
         75:e8:79:11:53:0c:9c:ad:4a:b0:e0:54:70:1e:72:40:c1:a0:
         ce:d5:6d:db:29:45:e6:11:09:5d:ae:22:54:ae:9b:df:c0:71:
         dd:bc:63:10:ef:d3:93:c7:4d:50:3d:ea:d2:71:31:1c:17:f8:
         c3:36:4a:ff:19:14:b7:3a:53:de:7f:89:db:1e:a4:4c:4d:ef:
         44:6a:f1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----