Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/195e8b35-86d4-370e-aeb1-3fe95b813b5d.roa
File:                     195e8b35-86d4-370e-aeb1-3fe95b813b5d.roa (raw, json)
Hash identifier:          CtDkTFKJtH1ZhjNzcLn5AfH0mpsPbN5foRnWb9D3q2o=
Subject key identifier:   E7:F0:B5:EE:DE:F8:86:1F:56:1C:6C:BE:52:F2:74:93:30:B7:09:57
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583F53E78A8FAFC7C998B8A77A00
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/195e8b35-86d4-370e-aeb1-3fe95b813b5d.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     61317
IP address blocks:        104.234.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:53:e7:8a:8f:af:c7:c9:98:b8:a7:7a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=e501c5f7-6bc9-47de-b269-45baf9a34c65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:75:3a:72:d7:95:ac:45:bd:cd:b9:fa:f8:dd:
                    10:fe:24:48:9b:b0:d0:bc:f8:fc:95:50:dc:58:6e:
                    16:33:05:11:38:2d:30:97:35:75:97:2e:1f:f6:5a:
                    e2:98:72:57:28:e8:85:4b:f3:3c:e3:96:97:f2:d1:
                    18:63:8f:9a:69:77:11:c4:d5:bd:cf:69:8e:a5:6a:
                    a3:5c:be:e3:cd:ea:85:18:96:b1:08:96:9b:44:b8:
                    d9:06:fd:2c:08:d4:55:e8:a7:99:18:83:eb:cc:18:
                    71:79:36:84:2c:a0:38:d2:22:7d:fd:b5:ad:47:4a:
                    ba:0e:f0:8c:6a:ac:0a:66:8d:5c:9c:cd:47:0b:9e:
                    50:32:1a:64:98:75:ae:7d:bd:f5:3a:3c:65:c9:42:
                    bf:9f:f6:b5:dc:79:a5:27:95:22:47:27:f5:2c:01:
                    50:63:54:6d:1b:4e:5f:4b:af:5a:d5:27:45:d1:24:
                    2a:12:e2:22:59:20:fc:97:ab:49:ed:e8:b4:dc:69:
                    9b:4a:65:2b:3a:6e:27:dd:4f:74:85:62:26:f8:d7:
                    79:99:31:5f:46:ec:49:70:ce:ab:f7:0b:4b:8f:24:
                    e9:b7:7f:09:d6:ae:ca:31:e4:9d:a5:a2:26:a1:f9:
                    d3:b5:36:68:c4:b7:a0:0c:89:39:a0:85:00:40:c8:
                    43:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F0:B5:EE:DE:F8:86:1F:56:1C:6C:BE:52:F2:74:93:30:B7:09:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/195e8b35-86d4-370e-aeb1-3fe95b813b5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:86:26:cd:0f:f5:02:40:be:1e:ce:67:fb:12:c1:76:2f:e8:
         ae:cd:78:cd:ca:16:a2:a1:72:f6:dc:7f:3a:3b:ee:1a:2c:4b:
         f9:5f:53:e5:b5:04:e9:f0:f8:d5:eb:ad:d7:ae:cb:98:c4:76:
         10:c6:96:73:15:c0:47:b6:09:4a:8e:ae:06:77:29:eb:18:aa:
         fc:e3:3f:87:0a:23:09:72:ee:ac:b1:ef:3a:09:af:26:8e:34:
         86:b3:fc:74:6f:fe:f2:2e:94:64:7c:43:f9:5b:7a:e1:bc:2b:
         47:2d:ce:75:9a:4f:24:86:4e:83:1d:05:a0:de:1d:2e:17:03:
         1c:02:d6:e5:6d:ee:d1:b3:fd:bb:c5:a4:fc:7a:83:b8:5f:da:
         da:31:b8:1e:d8:37:fc:44:01:70:3b:91:63:00:57:7b:b6:2a:
         37:4a:96:59:99:42:62:bc:c5:b9:f5:ea:b2:22:ad:a8:06:48:
         8b:f2:90:bf:e1:0e:81:4f:15:a7:81:44:bc:02:5d:e8:82:e5:
         34:65:b0:00:70:b9:58:3e:57:0e:c5:c5:b7:4e:10:b9:9f:c8:
         07:0f:f8:ae:ba:8a:ab:91:9e:62:f4:a2:6b:df:89:e9:1e:95:
         b7:a1:bb:72:f7:84:71:64:d0:49:5d:16:3d:54:91:ed:34:e0:
         ce:38:d7:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----