Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/16845e71-f6da-3e8b-8a9e-d733da25cb79.roa
File:                     16845e71-f6da-3e8b-8a9e-d733da25cb79.roa (raw, json)
Hash identifier:          jYSnq4ZivbeMMt7a/hHZexEXa7KuoJAdGZ2R+MPFj9Y=
Subject key identifier:   FB:4F:2D:17:AC:B5:CC:A7:09:C0:29:9C:C9:80:46:77:F5:89:13:20
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583FC06BC8097CF4829EC320C000
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/16845e71-f6da-3e8b-8a9e-d733da25cb79.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     23470
IP address blocks:        104.234.234.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c0:6b:c8:09:7c:f4:82:9e:c3:20:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=806128d4-5bdc-4d1a-b27e-a17155407e5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:76:e2:f7:52:bc:3b:92:0e:58:8b:be:76:33:
                    e5:93:cf:90:9f:7d:b2:d9:d4:b5:cf:fd:6e:26:f4:
                    52:44:d8:ea:bf:76:dd:d5:35:82:38:bf:14:d1:71:
                    cd:06:86:4f:46:ab:39:e5:43:a0:44:09:04:ef:75:
                    b0:2f:c1:f9:79:25:fb:6f:f9:88:96:d0:40:7f:21:
                    38:49:bd:72:92:fe:64:d8:83:b4:93:6f:d6:ec:4d:
                    5b:79:80:98:0c:05:e8:88:e7:21:87:21:30:17:9e:
                    d8:1c:aa:62:a9:67:4d:d6:42:cf:f1:bf:d7:91:58:
                    2e:ec:a4:5c:6c:29:26:d0:fe:17:17:03:66:a8:e6:
                    05:ad:bb:97:5c:48:81:44:54:99:2e:38:40:9d:a6:
                    48:8c:82:ad:8d:1b:40:10:c0:15:2a:2e:50:bc:2d:
                    11:d5:79:8e:6e:37:76:cd:01:77:54:bc:8d:e1:0d:
                    3e:23:9e:6e:65:ab:9d:63:8f:86:ac:12:9a:f7:a7:
                    f5:78:8c:de:73:52:44:91:ed:a4:0a:25:91:a0:6d:
                    e5:c6:8c:6d:54:d8:f4:9c:a3:9e:9f:04:9d:ab:75:
                    5f:59:61:14:f0:66:7e:9a:99:37:d8:f8:10:5b:57:
                    f4:85:6d:c7:82:56:49:38:6d:a0:65:34:a1:64:3c:
                    69:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4F:2D:17:AC:B5:CC:A7:09:C0:29:9C:C9:80:46:77:F5:89:13:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/16845e71-f6da-3e8b-8a9e-d733da25cb79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:09:f4:53:e1:36:af:fe:94:07:f3:a7:aa:d7:e8:ac:4b:7a:
         38:79:07:76:7e:b7:61:f6:ce:71:08:e2:4a:c0:63:57:2a:6e:
         34:5c:78:d2:e4:e8:70:26:9e:b7:bb:61:80:e2:be:9d:c5:de:
         89:30:73:6c:c1:a1:e4:25:7f:38:7c:f1:00:bd:fc:58:61:5f:
         fb:5a:54:94:01:f3:a8:05:07:8c:98:ba:03:6b:02:49:8f:db:
         fb:92:ca:4c:d7:5c:31:9f:34:66:a5:21:c0:3f:4b:32:07:54:
         fa:6a:47:59:4b:3c:fd:2a:0e:2a:71:8e:a2:37:3f:93:3d:2f:
         7d:6a:c5:52:16:cd:7d:bf:01:2e:b3:67:85:ac:9d:5e:fa:66:
         7a:6a:67:3b:a4:25:13:8e:f8:67:14:c8:39:b3:c9:8f:8d:d4:
         58:da:6b:cb:c7:c1:90:20:94:b7:89:37:ae:7d:54:f4:87:bd:
         82:4a:9f:93:73:ac:ef:d3:4b:77:67:5e:f3:7d:ca:b7:90:b8:
         86:4d:41:c8:54:2e:64:e5:c8:4e:1b:2b:94:4e:e8:d5:a1:b5:
         f1:17:4b:f2:db:6e:75:5f:c4:28:49:1b:10:7f:d6:46:60:8a:
         ae:1b:b7:0c:d9:72:c4:ea:77:e6:8c:1d:5e:63:cf:b9:27:d2:
         2f:43:91:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----