Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/17c8fae0-29fa-32e8-9ab0-8acb90fb25ac.roa
File:                     17c8fae0-29fa-32e8-9ab0-8acb90fb25ac.roa (raw, json)
Hash identifier:          aP67ccOhW7UgS11Xtcy/avQxUnY6RpVOG/L7KhRNzIo=
Subject key identifier:   6B:81:46:B6:4C:03:79:B5:E8:F5:75:EB:F1:F1:CA:C8:EC:7E:28:00
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583F5E54D95980FB3463B5EBD400
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/17c8fae0-29fa-32e8-9ab0-8acb90fb25ac.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     40676
IP address blocks:        104.234.234.0/24 maxlen: 24
                          104.234.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:5e:54:d9:59:80:fb:34:63:b5:eb:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=0b991b04-aeab-4509-a064-6e9047383250
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2b:b1:87:42:7d:b5:0d:a8:2b:73:f2:1e:37:
                    d5:92:29:02:d2:b1:f1:9f:8f:f7:a7:e7:db:29:14:
                    4e:4d:fa:52:82:ed:71:ee:ee:c5:b2:b5:51:26:14:
                    2a:e1:c2:2b:64:0d:cf:ce:3f:aa:8f:b6:15:d6:a0:
                    08:74:68:e8:9b:1a:2f:1b:fb:ee:7b:41:aa:65:ef:
                    ef:79:8f:30:a2:46:21:06:49:d4:0a:09:5d:ac:8c:
                    36:9a:2d:e4:d9:25:9b:89:7b:8b:da:28:43:d6:0e:
                    5f:33:e2:29:6f:96:08:66:f5:8c:2a:ab:04:b8:02:
                    2a:1e:b2:7e:18:c7:b6:e9:4a:d0:52:3d:dc:06:89:
                    b9:2e:9b:2e:e3:40:4e:7e:62:88:c9:74:8f:5f:a3:
                    6b:09:62:30:d9:49:c4:24:a2:7c:05:31:a1:67:23:
                    bc:23:5d:c4:fd:49:17:a8:a4:46:bf:5a:ff:b4:83:
                    57:c3:e4:ac:88:98:ee:95:9b:bf:da:76:49:24:f8:
                    d8:fd:5e:8f:63:88:a5:82:b7:da:36:b4:de:bb:3c:
                    cf:35:ea:15:b1:30:6c:19:46:27:36:bb:57:e4:a6:
                    d4:a6:f2:2f:df:ef:84:79:04:96:31:19:a8:7a:f5:
                    68:c0:a8:b5:aa:b0:e5:0a:79:51:1c:d7:11:c0:06:
                    76:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:81:46:B6:4C:03:79:B5:E8:F5:75:EB:F1:F1:CA:C8:EC:7E:28:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/17c8fae0-29fa-32e8-9ab0-8acb90fb25ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.200.0/24
                  104.234.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:23:35:c4:0c:ac:42:ca:58:34:1d:94:8d:cd:b7:c5:d4:ca:
         51:86:d4:b1:3e:88:23:d7:ec:a1:9f:aa:a9:6f:0c:d2:36:54:
         cd:2e:8a:51:fc:2c:ba:cf:93:00:ce:82:de:b1:ab:ba:b1:fc:
         fa:b2:71:1f:4e:45:f1:e5:50:f8:a6:ba:a5:e2:c9:13:18:af:
         54:5e:58:17:35:a1:63:b1:ac:0b:c5:c2:58:32:32:98:07:0f:
         ce:b5:36:f1:8a:3c:fe:bc:d6:79:aa:a0:95:96:f1:cf:91:98:
         00:b0:c6:3b:11:c3:ec:35:26:2c:50:85:18:00:5e:51:f4:79:
         c5:0b:82:dc:1d:01:72:ec:b7:d3:59:fe:61:0e:33:1d:b9:ff:
         e4:01:fc:ff:e0:e1:50:dc:2d:8d:35:3f:1c:c4:d7:1c:39:91:
         26:8a:cb:42:d4:dd:3b:26:45:b2:e8:67:bf:0a:ee:9b:84:21:
         84:ce:5e:0f:b1:de:ac:65:a7:4a:70:f9:cd:19:91:ea:79:58:
         5f:a4:ed:df:0e:92:97:af:2a:5a:87:91:1f:5a:1a:fb:39:95:
         fa:71:33:57:d0:b4:78:b8:cc:40:35:2d:62:b4:ef:99:30:12:
         0a:79:69:06:d6:ce:41:29:3e:bd:39:ab:73:31:73:c8:a4:bb:
         58:d7:0f:af
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWD9eVNlZgPs0Y7Xr1AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2ZjZkYmQtNWExZi00OGIxLWFjN2EtN2I3YzAzNmM3
MGYwMB4XDTIxMTIxMzE1MTgwMFoXDTI0MDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
MGI5OTFiMDQtYWVhYi00NTA5LWEwNjQtNmU5MDQ3MzgzMjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCuxh0J9tQ2oK3PyHjfVkikC0rHxn4/3p+fb
KRROTfpSgu1x7u7FsrVRJhQq4cIrZA3Pzj+qj7YV1qAIdGjomxovG/vue0GqZe/v
eY8wokYhBknUCgldrIw2mi3k2SWbiXuL2ihD1g5fM+Ipb5YIZvWMKqsEuAIqHrJ+
GMe26UrQUj3cBom5Lpsu40BOfmKIyXSPX6NrCWIw2UnEJKJ8BTGhZyO8I13E/UkX
qKRGv1r/tINXw+SsiJjulZu/2nZJJPjY/V6PY4ilgrfaNrTeuzzPNeoVsTBsGUYn
NrtX5KbUpvIv3++EeQSWMRmoevVowKi1qrDlCnlRHNcRwAZ2HwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFGuBRrZMA3m16PV16/HxysjsfigAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZm
NmRiZC01YTFmLTQ4YjEtYWM3YS03YjdjMDM2YzcwZjAvMTdjOGZhZTAtMjlmYS0z
MmU4LTlhYjAtOGFjYjkwZmIyNWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmY2ZjZkYmQtNWExZi00OGIxLWFj
N2EtN2I3YzAzNmM3MGYwL2ZmNmY2ZGJkLTVhMWYtNDhiMS1hYzdhLTdiN2MwMzZj
NzBmMC5jcmwwHwYDVR0jBBgwFoAUtiZZXutxL1WTpJ9RO8h8b3R0PQUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZmNmRiZC01YTFmLTQ4YjEtYWM3YS03Yjdj
MDM2YzcwZjAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAaOrIAwQA
aOrqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAC4jNcQMrELKWDQdlI3Nt8XUylGG1LE+iCPX7KGfqqlvDNI2
VM0uilH8LLrPkwDOgt6xq7qx/PqycR9ORfHlUPimuqXiyRMYr1ReWBc1oWOxrAvF
wlgyMpgHD861NvGKPP681nmqoJWW8c+RmACwxjsRw+w1JixQhRgAXlH0ecULgtwd
AXLst9NZ/mEOMx25/+QB/P/g4VDcLY01PxzE1xw5kSaKy0LU3TsmRbLoZ78K7puE
IYTOXg+x3qxlp0pw+c0Zkep5WF+k7d8OkpevKlqHkR9aGvs5lfpxM1fQtHi4zEA1
LWK075kwEgp5aQbWzkEpPr05q3Mxc8iku1jXD68=
-----END CERTIFICATE-----