Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/38d0725c-0454-384c-884b-33c99374df2c.roa
File:                     38d0725c-0454-384c-884b-33c99374df2c.roa (raw, json)
Hash identifier:          EyXZSM3P59mGB3rljk93rFgLQt3GMtqTad7KABbBh18=
Subject key identifier:   47:1C:54:E5:93:83:BB:D9:FA:2C:36:FC:29:DF:99:4C:9D:2E:A4:1D
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583FCC819D9D3D9CF5E74D6F5E00
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/38d0725c-0454-384c-884b-33c99374df2c.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     61317
IP address blocks:        104.234.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cc:81:9d:9d:3d:9c:f5:e7:4d:6f:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=d11d1f05-9f27-45a5-8887-efc1fa69b320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8f:8a:2c:83:64:d7:48:bb:02:3d:71:9a:45:
                    bf:2d:b5:95:b5:5c:01:6b:bc:5b:f6:03:4b:21:44:
                    e7:c3:79:42:cb:2c:b6:56:51:33:52:b3:52:6b:30:
                    f7:94:ff:39:f0:e6:a4:83:43:2c:89:38:b7:77:1a:
                    d8:45:30:b1:6e:84:3f:f4:72:c0:c7:91:fc:0c:ef:
                    eb:89:91:30:6f:5f:08:9f:34:8b:fb:31:ba:36:4f:
                    8f:4a:21:fd:4c:ae:61:1b:ee:4b:0e:66:24:44:a7:
                    a9:0b:22:83:62:16:e5:6d:16:5e:46:11:9d:cc:1d:
                    8f:10:b5:28:74:5d:75:d0:a6:02:c5:a3:c8:99:62:
                    fc:86:de:dd:bf:63:77:7e:11:fe:27:4a:38:18:11:
                    34:84:56:95:16:82:1a:38:e5:5c:b9:bd:1d:02:20:
                    40:0b:7a:41:5c:49:f6:1b:61:b2:63:b9:78:ad:6b:
                    d1:d4:9a:db:c8:91:63:d2:3b:7e:ac:f0:f7:84:bb:
                    ae:79:39:3b:b3:25:90:d5:38:6c:d1:54:ff:d3:77:
                    a6:06:7c:ad:51:5a:58:79:9d:af:21:33:bf:9d:22:
                    c6:7b:78:1e:bb:b2:15:27:fc:a6:7b:7a:54:a6:78:
                    94:e9:ee:17:50:35:95:33:58:f5:e8:19:b9:a6:b7:
                    50:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1C:54:E5:93:83:BB:D9:FA:2C:36:FC:29:DF:99:4C:9D:2E:A4:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/38d0725c-0454-384c-884b-33c99374df2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:40:5c:fc:1f:2f:85:9a:9f:44:73:05:7f:8a:90:19:01:43:
         c8:13:7b:32:2c:38:e1:21:59:d7:86:01:0a:ea:2d:88:67:36:
         60:5d:7e:b6:dd:87:a4:d9:af:03:35:90:a0:a0:df:32:24:67:
         39:51:82:57:fa:6a:30:60:dc:e1:dd:6e:1b:07:68:a1:43:02:
         40:40:c8:31:78:39:e4:f0:fa:f4:93:b8:e7:c1:a6:57:6f:56:
         6c:cb:3d:9a:03:8d:66:50:2c:78:a8:d1:10:eb:f1:c3:09:6a:
         64:a3:29:eb:ec:3d:1e:0c:ba:f8:0a:12:9e:14:99:66:5a:4b:
         4f:86:c1:23:83:b1:63:66:cc:ad:a4:13:a7:a8:a6:d8:5e:58:
         84:e0:1d:d3:8a:d8:52:50:1b:f4:f1:f9:6f:70:aa:dd:04:36:
         72:5d:db:7a:d7:1e:3e:e0:a5:68:33:17:9a:1f:61:0e:32:49:
         4c:45:3e:f5:2f:03:8d:5b:85:b2:98:0d:66:72:bf:31:42:28:
         ae:d3:48:0b:34:3e:ad:82:61:47:e9:8d:52:46:93:4d:e3:33:
         89:61:c9:44:b2:2c:c4:76:04:2f:66:d5:c2:e3:b0:2e:3e:4e:
         d6:8f:f4:c4:4b:df:f2:b2:94:97:8f:7e:6d:80:5a:74:98:d1:
         cc:c8:21:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----