Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/357d9ccb-d338-3bea-b8dd-c5f91c601485.roa
File:                     357d9ccb-d338-3bea-b8dd-c5f91c601485.roa (raw, json)
Hash identifier:          nUFXKjENCAxJ/dR8Rk2ZiGB6ql2RMrwvoEtPfBF/CKs=
Subject key identifier:   1B:83:B5:F9:A9:CC:D0:90:5D:36:78:EE:82:02:F6:A3:E0:0F:B8:FA
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328584014B9F965E3C283C2228E7720
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/357d9ccb-d338-3bea-b8dd-c5f91c601485.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Tue 04 Mar 2025 05:00:00 +0000
asID:                     60721
IP address blocks:        104.234.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:14:b9:f9:65:e3:c2:83:c2:22:8e:77:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Mar  4 05:00:00 2025 GMT
        Subject: CN=d69465a2-e6aa-48eb-8745-97647ea45cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ee:60:e8:77:c0:06:c0:6e:36:75:00:b0:13:
                    d4:70:fb:2b:7d:05:10:55:81:d5:74:68:7c:ad:1f:
                    aa:4f:c0:3e:20:36:e6:e1:dd:b5:c8:85:8d:66:34:
                    99:a9:44:3a:66:ab:9e:2b:79:22:d6:c8:d4:11:db:
                    07:e5:4f:6f:6b:6e:2a:81:2d:93:2c:e7:80:f1:d8:
                    47:8a:f5:4a:4a:5e:a7:cc:a1:f8:a8:90:fc:38:77:
                    5e:96:be:e5:a7:d8:6c:1a:d6:b9:df:b9:24:3a:d1:
                    3f:18:06:1d:3e:09:af:e1:a6:07:88:33:78:77:60:
                    d5:d8:4e:45:7a:28:d0:34:61:fd:2c:e7:7e:3e:ca:
                    fe:72:b1:59:26:3d:00:91:4b:c4:12:ee:e5:8d:cc:
                    16:f0:04:be:4d:5c:8d:3d:82:6a:f1:6d:24:1f:c1:
                    b1:ca:11:fd:00:52:6d:f4:cd:03:88:f1:66:0a:08:
                    00:6b:a7:9a:e9:a8:ef:07:45:09:16:17:28:29:1c:
                    11:11:b9:c7:81:3f:be:9e:e4:48:42:15:8f:51:47:
                    a8:2b:cd:09:74:dc:f8:41:d6:34:66:11:05:0d:02:
                    ed:86:03:10:fd:8e:62:b9:58:ff:a7:66:fe:d5:54:
                    9d:bb:23:1a:ec:d1:84:ad:b8:f6:45:cd:e9:77:08:
                    18:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:83:B5:F9:A9:CC:D0:90:5D:36:78:EE:82:02:F6:A3:E0:0F:B8:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/357d9ccb-d338-3bea-b8dd-c5f91c601485.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:61:12:b9:36:2c:bd:5c:98:a4:e5:85:20:a4:9d:c1:5f:f6:
         a9:25:d2:e7:d4:d5:b5:ef:f5:13:6b:03:90:6b:69:bc:21:1b:
         cf:8c:75:7a:54:12:d2:b7:71:b2:01:aa:65:46:27:c4:90:bf:
         08:20:5b:24:46:e8:0b:59:44:fc:28:58:53:87:35:5e:d1:89:
         e1:cd:c3:99:4d:0e:59:fb:fa:13:d1:91:99:ff:f1:e1:36:35:
         c3:72:cf:33:88:c5:0c:34:a9:2e:22:76:c5:cc:89:b5:ca:2d:
         f9:2c:d5:4d:76:e3:d7:c9:c1:71:6a:f2:51:83:45:7a:37:2c:
         25:54:42:8c:94:4f:56:45:36:37:a2:37:a9:86:24:d9:9a:a0:
         a4:fb:6d:80:27:d8:32:96:fd:b1:82:93:c0:c0:cd:f3:05:7f:
         2d:5b:5b:8c:00:5f:35:97:f0:d3:94:8a:5d:14:20:7e:5e:58:
         18:ad:f3:f8:aa:c3:f8:12:f1:37:35:2b:b9:06:15:67:d4:2d:
         1c:7e:d6:c9:e0:48:d2:fc:10:b0:1c:d1:f6:de:cf:5b:1b:37:
         5b:d1:b9:34:11:46:b5:1e:14:5e:5a:0f:57:32:a0:ec:7a:1f:
         ad:82:66:ff:d5:3e:e7:4a:c4:bc:20:11:fb:51:fb:48:58:7a:
         ee:aa:0d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----