Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/2ae8833f-b74e-3d32-b880-1d6f830da6cc.roa
File:                     2ae8833f-b74e-3d32-b880-1d6f830da6cc.roa (raw, json)
Hash identifier:          UuaV0mtTVN67GwpkkIff2mcbizjeI9dd1ucy9g31oSs=
Subject key identifier:   FC:0B:10:9B:6E:F9:7E:BF:ED:D7:EC:DD:FF:6B:CE:5F:07:7C:43:CE
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583F6770F37FD330596934A90040
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/2ae8833f-b74e-3d32-b880-1d6f830da6cc.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     14445
IP address blocks:        104.234.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:67:70:f3:7f:d3:30:59:69:34:a9:00:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=85666f24-ba9b-457f-b805-dc45ab415e72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e5:54:26:7d:c0:41:41:a4:9a:25:09:25:17:
                    c2:85:63:95:ac:af:2f:4d:9a:50:73:a4:14:c2:0a:
                    ca:1d:72:12:f1:12:5f:05:6a:c2:9e:85:74:8d:88:
                    29:7d:e2:7c:e0:24:2e:f7:8b:da:1b:cd:91:b9:5e:
                    72:0c:dc:7d:ab:7c:aa:43:fb:73:88:b1:ce:0d:cf:
                    b6:7d:3c:71:fc:a7:70:24:4c:20:9d:fe:d3:c4:a8:
                    87:1a:b2:65:6e:06:ab:df:0c:65:03:cc:07:ae:12:
                    8e:e4:e5:8c:97:ec:e6:6d:72:d7:61:94:66:0e:7a:
                    98:75:6e:30:6f:4c:fc:be:b6:22:3a:ac:24:c6:05:
                    51:c2:6a:69:ea:fe:fe:97:a9:c3:c5:c9:4b:bd:73:
                    7b:c7:6e:0e:55:e0:88:50:82:5e:51:fd:a3:df:1d:
                    05:66:0a:4d:05:0b:a5:33:ad:4d:b5:45:83:53:74:
                    cc:c8:6d:b9:ab:96:cd:c1:18:9f:5a:95:0f:2d:d4:
                    d8:96:05:0e:bb:ae:64:43:63:45:55:80:b6:7b:9f:
                    49:0e:97:a7:b7:04:6e:61:cb:37:07:a8:77:5d:b2:
                    9f:a1:27:e4:75:f5:b9:a7:58:41:ad:08:66:ea:43:
                    d8:a2:01:d5:de:6d:45:5f:99:75:08:f7:d9:ae:ab:
                    d9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0B:10:9B:6E:F9:7E:BF:ED:D7:EC:DD:FF:6B:CE:5F:07:7C:43:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/2ae8833f-b74e-3d32-b880-1d6f830da6cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:1d:4e:fa:e3:2a:8c:e7:3e:f1:ca:6e:bc:be:fe:14:e8:61:
         f4:41:da:64:c2:f6:95:90:88:40:de:18:2e:72:7d:a9:1b:4a:
         9d:84:87:41:69:18:6c:36:1b:bc:dc:00:30:d9:95:c1:d4:6c:
         a3:f5:09:b6:71:cd:3e:d6:99:46:b2:96:76:fe:4c:e3:41:15:
         14:c0:d2:56:de:cd:f8:54:9e:0f:76:c0:58:7a:59:ad:03:a0:
         ca:2d:2b:46:88:60:33:ac:74:b4:6d:3c:cc:ea:9e:78:87:d1:
         54:c7:ac:f9:3d:55:e1:00:46:97:c4:7c:b6:8f:3e:fb:bb:74:
         e0:3d:e3:34:4b:9f:49:dd:d0:21:91:1d:93:e1:17:49:9b:96:
         7f:34:84:f9:dd:b4:7f:ba:21:f8:19:1a:eb:4f:76:a9:32:b1:
         c4:ca:3e:c6:b4:62:53:59:ba:1e:fa:fb:66:cc:44:ef:10:67:
         fd:8a:de:82:32:8f:7d:51:c7:fa:ca:0a:d8:15:17:e8:49:e5:
         79:82:27:9d:ea:b6:fe:e3:c2:50:a8:ac:6f:80:6d:88:1f:35:
         3a:cf:71:8a:49:44:e8:00:c8:a6:98:2f:9f:32:c2:40:d5:0c:
         41:34:42:95:37:21:25:22:3b:4a:4f:62:d0:13:87:37:76:5a:
         6b:61:f7:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----