Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/3610c32f-be29-341d-86e5-ce8196c4b440.roa
File:                     3610c32f-be29-341d-86e5-ce8196c4b440.roa (raw, json)
Hash identifier:          XKCygd9kyTAdmn66MBvUSTWyZBBHyX10jXtlWJZp88E=
Subject key identifier:   14:82:50:25:99:F8:BD:28:AB:95:04:41:41:E2:A1:44:7C:7C:D1:AE
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583FB4FD03AF0BADF14CB81526C0
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/3610c32f-be29-341d-86e5-ce8196c4b440.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     1239
IP address blocks:        104.234.55.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b4:fd:03:af:0b:ad:f1:4c:b8:15:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=03a452de-e280-413e-9910-f8a6da05a528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:92:bd:1d:84:a8:d5:1a:0b:ff:e8:58:09:35:
                    bb:0b:87:59:73:3b:00:af:69:03:f3:0c:e4:67:da:
                    14:63:fc:be:0e:b0:23:89:3b:61:f4:bf:b3:48:1e:
                    ef:17:0b:43:df:26:90:ca:0e:a5:44:5e:50:f8:23:
                    de:1d:6e:a0:d9:fc:22:1a:8e:8a:b5:f2:11:18:21:
                    fe:3b:c2:db:56:a1:60:84:53:87:b5:f3:ba:e0:90:
                    98:0d:bb:c1:a4:9b:f2:d1:da:9a:4c:22:ca:e3:c7:
                    6a:3d:c3:9b:b9:0d:40:68:c1:ca:24:93:ea:66:65:
                    4d:3c:15:6f:54:e6:01:5f:69:32:d0:2c:28:c5:40:
                    6e:0b:21:23:e2:62:47:2d:1f:2f:91:8b:08:57:89:
                    79:73:2c:14:02:52:e8:78:77:71:a0:cf:87:af:1b:
                    af:00:9c:f2:ec:2a:e7:35:49:63:42:60:a1:1c:46:
                    3b:ee:89:ad:3b:55:f2:10:24:af:ec:d7:d0:bc:09:
                    f4:aa:4d:5c:8b:ab:42:dd:f2:4a:f1:74:26:22:3d:
                    49:cc:c0:c2:5a:c5:a5:71:4c:e2:30:e9:72:1c:15:
                    0f:99:eb:1f:05:b8:5a:2e:0e:f0:92:56:0e:50:3a:
                    78:80:47:23:c1:00:4a:41:51:0d:6a:25:2a:9c:46:
                    f1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:82:50:25:99:F8:BD:28:AB:95:04:41:41:E2:A1:44:7C:7C:D1:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/3610c32f-be29-341d-86e5-ce8196c4b440.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c2:39:b4:12:cb:a4:d0:7b:71:93:2c:5b:df:23:6d:07:04:
         30:ec:65:9b:45:26:96:bf:df:82:bc:00:64:14:c5:97:27:e0:
         af:6a:df:e5:98:52:22:f1:3a:64:45:4b:bc:d8:8a:99:de:cb:
         1a:a5:b8:6c:b1:65:40:6c:c5:e3:57:37:74:23:50:69:ee:18:
         5e:15:be:85:1d:c5:0c:6f:0a:a6:fd:be:67:ca:4a:af:3d:5d:
         19:a7:66:17:43:f0:54:8d:13:6c:f1:0e:83:0e:6c:62:0a:5a:
         d4:44:81:1c:41:44:21:2b:ba:ae:6f:17:95:10:89:1a:65:48:
         23:09:6e:a0:c3:b6:0e:04:9e:e1:cc:7a:78:10:95:c9:f4:8a:
         bd:d6:96:84:b2:d3:73:ec:98:a8:3a:4d:49:5b:17:31:4a:0f:
         22:78:41:1d:d4:26:8f:67:1f:56:5a:b5:ac:41:d9:9b:f9:f4:
         18:a8:e9:4c:29:48:83:2e:88:4a:c9:9c:86:3d:0b:3a:5b:bd:
         56:38:13:0b:d8:8d:96:76:7b:eb:9d:84:f5:78:10:91:2e:64:
         a9:1c:1e:58:b7:9a:3b:28:7b:97:3e:42:ab:32:22:3f:35:14:
         62:c7:58:1d:4c:08:79:99:fe:c7:63:5f:f0:96:86:dd:16:87:
         57:2a:ec:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----