Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/51fe0760-0368-35c3-b6f6-b90dbe8a57ae.roa
File:                     51fe0760-0368-35c3-b6f6-b90dbe8a57ae.roa (raw, json)
Hash identifier:          +aUCzh5oduLEOyUmIc6aUGRjiYeiWLIeVOgq+iSN3WU=
Subject key identifier:   72:A2:72:F2:59:0A:B6:6B:B2:AC:5F:AF:1B:56:D3:14:7B:48:F6:18
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583FB663716B1566966A3C40E240
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/51fe0760-0368-35c3-b6f6-b90dbe8a57ae.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     49581
IP address blocks:        104.234.158.0/24 maxlen: 24
                          104.234.238.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b6:63:71:6b:15:66:96:6a:3c:40:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=11bab80b-5f79-440c-879b-978bd82a284f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0d:f1:1f:46:a8:4a:c7:ae:db:41:db:26:ce:
                    78:c4:98:a7:fb:5d:ed:da:cd:91:2a:8c:61:a7:92:
                    45:96:b7:99:6c:0f:21:d2:c7:82:19:02:69:12:39:
                    ae:40:fa:da:7e:fa:79:26:0a:bb:1c:89:a5:aa:16:
                    b9:9f:7d:6e:8d:55:dc:a6:8b:17:9b:fc:ed:ca:ad:
                    4e:c2:58:26:d8:2e:93:d3:c6:5f:1a:41:b4:d2:3d:
                    cb:8d:c7:22:57:60:b2:8f:c3:aa:90:03:13:0c:0b:
                    1e:5c:7b:b5:9c:a2:00:d2:88:da:77:33:68:8c:2e:
                    cd:61:9c:f5:97:57:d9:3d:33:64:13:21:34:40:aa:
                    4d:ce:e6:ae:73:3b:95:f7:c0:5a:15:45:64:fe:1f:
                    c5:0b:75:a9:fa:03:be:86:63:93:f3:a6:09:3b:69:
                    24:6b:71:4c:ff:b4:8a:36:f5:6c:0f:e3:7f:da:a7:
                    ed:9a:63:77:93:da:56:ce:af:ef:ce:0d:c4:4e:dd:
                    7a:fd:16:34:5e:bb:a1:7d:3a:29:20:87:fc:1c:25:
                    fe:0a:6d:da:2d:aa:73:29:8a:13:ed:7c:a0:d5:3c:
                    9c:4e:42:61:b8:58:ff:f5:eb:ca:b7:c7:83:46:bf:
                    6d:93:89:00:bc:4d:43:3e:d7:d3:b9:fa:2a:8e:a7:
                    1d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:A2:72:F2:59:0A:B6:6B:B2:AC:5F:AF:1B:56:D3:14:7B:48:F6:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/51fe0760-0368-35c3-b6f6-b90dbe8a57ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.158.0/24
                  104.234.238.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:f1:60:a3:64:50:4c:cd:74:ac:d9:d3:cb:20:7d:1a:9b:41:
         af:08:f8:96:5b:24:ed:00:0d:f6:8c:99:8a:4f:ce:6c:b0:ab:
         58:e0:f2:46:8b:e6:b0:e7:0b:4f:21:8c:9d:6a:79:63:82:20:
         b9:ea:a5:62:38:03:db:99:cb:15:3c:7a:7b:f2:e5:4f:42:80:
         ee:16:5a:c1:3a:91:72:74:76:5a:c2:04:db:b8:ee:d2:37:6f:
         b8:c0:2a:b1:2e:89:89:0c:e0:0a:7e:5a:45:04:04:64:23:32:
         b4:d0:f2:dc:90:ea:8e:18:cc:8b:5f:32:ec:b1:f8:9f:41:ca:
         09:fd:15:0c:71:89:ab:30:2a:66:4f:c0:e5:25:5f:a2:03:13:
         6d:fc:6c:0d:41:c3:2a:e6:91:dc:a2:03:97:76:bf:b0:83:f4:
         f6:61:07:7b:09:3e:44:bf:39:4d:5b:db:00:7e:18:0f:da:a9:
         65:8a:71:86:c2:28:b4:d1:90:59:8b:0d:02:fc:94:13:50:20:
         eb:32:dc:4a:3d:51:cb:b2:26:97:73:61:c1:73:d8:9d:71:59:
         8e:bf:dc:5a:44:e9:0d:f9:cc:e8:a7:66:94:f8:9c:b3:19:60:
         52:f4:b6:2c:2d:cc:e5:8a:d6:7f:7d:0c:70:6b:70:e2:94:b3:
         ff:47:c1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----