Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/2a7dea62-bce3-3f47-9b05-b7eebc914777.roa
File:                     2a7dea62-bce3-3f47-9b05-b7eebc914777.roa (raw, json)
Hash identifier:          CSFhLQxm/87YBTqTwUtF/K/vpJcdRcf/LZlAW7py5RQ=
Subject key identifier:   7A:46:66:00:A6:B4:11:0C:F1:FF:D4:19:42:68:07:7C:1F:6A:04:33
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583DE57124517E054FD99AC60600
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/2a7dea62-bce3-3f47-9b05-b7eebc914777.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     40676
IP address blocks:        104.234.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:e5:71:24:51:7e:05:4f:d9:9a:c6:06:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=c7c618fc-bb37-40a4-95b1-75aa788affd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e4:24:d8:03:9d:d0:77:01:28:1a:e3:d6:fe:
                    7f:4c:cf:4a:59:cf:be:46:59:cc:f6:04:e5:03:28:
                    58:e3:5b:c2:da:d1:d0:f8:a5:c3:6a:97:05:f1:4d:
                    23:07:58:f5:00:81:b1:34:d2:8a:80:40:ff:bd:63:
                    c1:71:13:ad:50:39:be:c7:8e:52:49:80:5f:57:f3:
                    13:d5:46:6b:d8:e9:c6:eb:d7:90:d8:f5:06:59:43:
                    e8:13:3d:ce:fb:23:c9:d3:b8:4f:73:29:6b:40:e7:
                    f4:79:02:95:85:da:fc:61:36:06:5c:fc:95:a6:23:
                    cb:91:ee:c5:7c:a7:3c:4f:a8:d4:93:76:99:38:c4:
                    85:2b:0e:13:0b:03:fa:19:c4:42:80:13:e8:73:10:
                    3c:8d:63:b6:c2:0c:0b:ee:14:45:18:31:58:86:b7:
                    85:62:d4:4c:a5:bc:55:b7:a6:08:a7:07:75:3e:ad:
                    77:9b:88:22:e7:f0:a9:df:54:8d:27:8f:a1:8d:95:
                    3c:50:46:ea:1f:63:ee:2e:11:38:8d:56:ce:13:9a:
                    fe:ad:12:64:5a:cd:27:02:26:19:46:78:f2:b0:93:
                    10:50:5a:0f:cc:93:c5:f6:4c:2d:20:58:68:6c:e0:
                    15:8b:58:4b:7b:68:7e:6e:85:9f:52:8f:ca:d0:b7:
                    b0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:46:66:00:A6:B4:11:0C:F1:FF:D4:19:42:68:07:7C:1F:6A:04:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/2a7dea62-bce3-3f47-9b05-b7eebc914777.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:eb:7d:1f:24:4b:a0:f3:ad:68:6e:6d:8c:02:cb:9c:be:fc:
         5c:a8:40:8c:60:f2:18:bf:18:45:4f:2a:e7:e0:bb:37:ce:c1:
         fc:d9:80:f8:23:55:da:f5:4a:96:26:90:62:fa:96:5b:64:ce:
         56:b7:6d:08:0f:8b:a6:03:07:f5:d9:e6:10:47:8e:f3:ef:3b:
         f4:80:4c:7a:ec:76:55:d8:00:4c:38:01:27:6b:2d:a3:48:d0:
         6b:fe:c3:11:54:40:0f:ab:b1:fc:0c:5a:01:bc:eb:53:a5:11:
         4c:36:75:e5:3f:d3:09:23:50:9b:08:6e:6f:9a:06:15:36:ba:
         f1:69:d8:2a:c0:7a:c3:56:a6:e4:1f:06:9c:8e:fa:97:a9:6b:
         10:7b:d4:f9:24:b0:db:5f:3e:bd:8d:5f:1e:24:ab:72:8c:d9:
         9c:d1:af:c8:af:1b:7d:56:f1:18:58:c9:d4:ac:03:f4:17:7c:
         7c:65:52:bb:41:db:3f:59:cd:2e:1f:16:dd:81:3e:01:8b:44:
         8c:b8:90:09:b7:da:7e:aa:8b:3c:34:2c:80:f1:b9:59:01:7e:
         0c:1a:9b:d1:4f:f2:14:bb:e0:b6:92:9e:4d:08:f8:47:03:37:
         de:4e:49:3e:d9:58:44:ca:62:f0:a4:e7:90:07:65:c7:bd:be:
         97:ae:2b:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----