Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/3e38ba68-adae-31c1-b053-bbb17f1fedc6.roa
File:                     3e38ba68-adae-31c1-b053-bbb17f1fedc6.roa (raw, json)
Hash identifier:          b0/lvUEB48H/O2qEg18ef/RCvDK3cs78eSNVmLhYI2g=
Subject key identifier:   C3:22:69:CE:BD:88:C5:D4:F1:B2:BB:BB:9D:7D:A2:83:EB:C8:71:FD
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583DCC8CE94B1DDFF35DFC7A8900
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/3e38ba68-adae-31c1-b053-bbb17f1fedc6.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     46573
IP address blocks:        104.234.210.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:cc:8c:e9:4b:1d:df:f3:5d:fc:7a:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=f1369b20-409f-4277-8be2-03b0976ef561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:60:6f:6a:73:d8:c8:f5:8f:a5:63:47:54:e7:
                    3e:06:70:76:66:86:3e:0b:e7:f1:dc:47:25:79:eb:
                    0a:f4:c9:32:e4:80:f5:79:ed:e9:78:8a:30:a4:08:
                    5a:b6:2a:90:1b:ec:d6:6a:ec:9b:15:27:19:7f:3c:
                    85:2a:7c:97:b2:55:a1:13:3c:e7:07:f2:b7:45:6c:
                    f8:44:b7:5a:17:1f:5c:56:e9:f5:e5:78:9b:7d:d4:
                    b6:cf:4a:82:4f:80:e5:a6:3f:0e:87:70:78:43:89:
                    32:a3:71:03:20:6c:f9:28:da:cf:1a:d4:20:e5:68:
                    f4:2c:cc:e8:16:8f:d0:7d:05:5c:6e:a8:92:5d:24:
                    0f:43:c3:98:fd:39:17:0b:87:fe:62:64:76:03:c7:
                    11:d5:a6:a7:87:d5:a4:e9:ce:95:da:ce:71:cf:f6:
                    19:fc:0b:53:cd:55:ae:b9:a7:64:04:80:11:ca:e4:
                    60:3f:4e:85:9e:95:f5:6f:54:34:b4:91:b0:ae:f1:
                    3e:14:0d:cd:b5:e8:18:79:75:0b:55:e0:2e:5a:37:
                    df:9a:dd:90:7f:5c:1b:9e:35:99:e0:56:0a:a6:59:
                    1c:fd:e4:7d:5a:65:2c:a7:c9:49:eb:ab:03:86:c0:
                    45:a0:b5:f8:fe:84:3f:c4:4b:f6:7a:a7:61:81:32:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:22:69:CE:BD:88:C5:D4:F1:B2:BB:BB:9D:7D:A2:83:EB:C8:71:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/3e38ba68-adae-31c1-b053-bbb17f1fedc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:94:87:0c:2e:ab:bf:5a:7b:0c:dc:27:9d:5c:9b:a1:4b:0b:
         d3:cd:f0:bd:08:25:29:0a:cb:78:eb:c7:08:ac:05:e7:49:9f:
         72:da:a4:15:da:e5:76:80:c1:21:21:ec:32:f4:2c:0e:a4:e8:
         29:0d:5f:45:cb:4a:a2:ae:ac:98:f3:33:43:07:b8:65:0d:09:
         7c:f3:71:84:3b:52:66:47:5a:99:24:6b:c6:8c:77:bf:53:bb:
         ba:11:c8:9d:15:cf:3a:5a:55:d3:e2:06:a0:9f:61:5f:35:87:
         6b:c9:8e:a8:a1:54:42:37:aa:4b:aa:b7:ad:1d:3a:e4:57:e3:
         25:70:aa:56:42:7c:e2:ab:6e:b5:69:55:e4:6a:dc:15:86:19:
         76:18:31:75:9a:46:79:14:02:e8:b8:40:b8:60:5b:cd:90:8d:
         ca:65:8e:61:cf:9e:cf:cf:01:28:9a:e0:1e:92:9b:5c:e7:46:
         8d:25:bb:38:fa:c5:d6:6b:6a:15:5c:85:f5:a5:40:32:83:2a:
         b9:5b:fb:65:f8:26:a6:5a:e2:41:52:2c:90:6a:3c:ef:9a:c6:
         89:a8:3e:a2:f0:e5:07:04:d7:42:9a:b8:d9:65:34:e8:0e:c3:
         b7:84:21:9c:3a:6b:a8:33:1c:eb:2c:82:cc:4b:bf:e0:63:84:
         9c:c7:f0:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3MjOlLHd/zXfx6iQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2ZjZkYmQtNWExZi00OGIxLWFjN2EtN2I3YzAzNmM3
MGYwMB4XDTIxMTIxMzE1MTgwMFoXDTIzMDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
ZjEzNjliMjAtNDA5Zi00Mjc3LThiZTItMDNiMDk3NmVmNTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmBvanPYyPWPpWNHVOc+BnB2ZoY+C+fx3Ecl
eesK9Mky5ID1ee3peIowpAhatiqQG+zWauybFScZfzyFKnyXslWhEzznB/K3RWz4
RLdaFx9cVun15XibfdS2z0qCT4Dlpj8Oh3B4Q4kyo3EDIGz5KNrPGtQg5Wj0LMzo
Fo/QfQVcbqiSXSQPQ8OY/TkXC4f+YmR2A8cR1aanh9Wk6c6V2s5xz/YZ/AtTzVWu
uadkBIARyuRgP06FnpX1b1Q0tJGwrvE+FA3NtegYeXULVeAuWjffmt2Qf1wbnjWZ
4FYKplkc/eR9WmUsp8lJ66sDhsBFoLX4/oQ/xEv2eqdhgTIUXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMMiac69iMXU8bK7u519ooPryHH9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZm
NmRiZC01YTFmLTQ4YjEtYWM3YS03YjdjMDM2YzcwZjAvM2UzOGJhNjgtYWRhZS0z
MWMxLWIwNTMtYmJiMTdmMWZlZGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmY2ZjZkYmQtNWExZi00OGIxLWFj
N2EtN2I3YzAzNmM3MGYwL2ZmNmY2ZGJkLTVhMWYtNDhiMS1hYzdhLTdiN2MwMzZj
NzBmMC5jcmwwHwYDVR0jBBgwFoAUtiZZXutxL1WTpJ9RO8h8b3R0PQUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZmNmRiZC01YTFmLTQ4YjEtYWM3YS03Yjdj
MDM2YzcwZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOrSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFKUhwwuq79aewzcJ51cm6FLC9PN8L0IJSkKy3jrxwisBedJn3LapBXa
5XaAwSEh7DL0LA6k6CkNX0XLSqKurJjzM0MHuGUNCXzzcYQ7UmZHWpkka8aMd79T
u7oRyJ0VzzpaVdPiBqCfYV81h2vJjqihVEI3qkuqt60dOuRX4yVwqlZCfOKrbrVp
VeRq3BWGGXYYMXWaRnkUAui4QLhgW82QjcpljmHPns/PASia4B6Sm1znRo0luzj6
xdZrahVchfWlQDKDKrlb+2X4JqZa4kFSLJBqPO+axomoPqLw5QcE10KauNllNOgO
w7eEIZw6a6gzHOssgsxLv+BjhJzH8Bc=
-----END CERTIFICATE-----