Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/53082cdd-9ce3-316f-a8d8-2f436f75bb8b.roa
File:                     53082cdd-9ce3-316f-a8d8-2f436f75bb8b.roa (raw, json)
Hash identifier:          eS8cBoHSnSzo0a/wbQVwpcIp8nT7WjVDxBr8otqQZIs=
Subject key identifier:   24:96:96:BA:4D:5D:0E:C7:21:F1:DD:4E:5C:19:69:9A:D7:01:4B:64
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F432858407C0F455C5F70A25BDF2DA080
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/53082cdd-9ce3-316f-a8d8-2f436f75bb8b.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Thu 10 Apr 2025 04:00:00 +0000
asID:                     395092
IP address blocks:        104.234.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:7c:0f:45:5c:5f:70:a2:5b:df:2d:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Apr 10 04:00:00 2025 GMT
        Subject: CN=84db8028-61da-4c93-9888-52cb8c5f59fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8b:a0:0d:c6:68:13:84:f6:95:f5:24:b0:4a:
                    af:eb:35:2e:9a:94:ca:9b:a7:5f:9d:ad:11:cf:bb:
                    9c:71:0e:ab:c4:7b:1d:59:90:51:aa:3f:74:91:63:
                    b3:50:9c:95:95:87:b2:9e:4f:00:67:a0:b3:40:f5:
                    da:13:b1:29:d2:2b:64:e1:b7:0f:42:7d:53:2a:6d:
                    c9:e7:ec:9f:5b:b6:13:ca:7b:5a:b0:8d:71:53:ae:
                    43:38:24:9b:31:f0:73:08:f1:9e:da:b4:1b:cf:06:
                    ce:7b:c5:d0:c1:f1:37:bc:63:e8:95:62:83:4b:54:
                    0f:3a:a8:35:03:53:1f:f7:c4:85:72:92:a9:5e:03:
                    62:53:68:59:1a:8c:ae:37:99:40:c1:17:3c:a1:53:
                    12:5a:3e:b8:f3:a5:61:9b:36:83:45:03:8b:e9:de:
                    38:ac:c9:37:40:16:41:7e:70:f7:54:9b:c4:4f:83:
                    1f:9a:d6:c0:8c:90:cb:5a:20:68:25:10:6a:60:1c:
                    f1:23:d2:22:6b:8e:78:6e:9b:f1:56:4a:a1:78:b1:
                    f4:c2:73:6a:c0:63:82:ad:3a:3a:a1:2b:30:c3:ba:
                    80:3b:01:68:dc:67:6f:9a:91:47:f6:54:84:4e:30:
                    32:55:33:8f:16:7c:07:c7:36:7c:d6:fe:bf:25:2d:
                    ae:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:96:96:BA:4D:5D:0E:C7:21:F1:DD:4E:5C:19:69:9A:D7:01:4B:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/53082cdd-9ce3-316f-a8d8-2f436f75bb8b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:9a:fb:75:0f:bf:69:14:7a:ec:d6:3f:fa:44:9b:36:61:51:
         a8:e3:b3:b2:32:d8:ba:29:44:ee:29:6b:95:f4:61:28:2d:38:
         a0:d3:17:fd:a5:9c:b0:d4:74:89:34:47:be:a5:b0:09:0d:3b:
         8c:77:76:64:15:36:a7:16:c1:f3:9e:2a:65:3c:ad:67:a1:2c:
         e4:89:63:46:31:53:6c:ed:5b:26:cf:e8:eb:64:54:b6:f4:a7:
         e7:7a:2d:eb:2b:79:12:b3:8d:c5:19:79:ea:37:1b:15:3d:15:
         7c:e5:c0:3f:8a:a5:6d:5f:0d:fe:56:4f:c8:f6:a0:7c:d9:5e:
         3d:e7:b8:06:f0:c5:f8:31:7c:21:ec:eb:58:cb:45:56:2b:ef:
         fc:2c:df:6f:84:15:99:76:80:11:33:96:72:8f:3d:65:c8:1e:
         c4:c5:41:3a:94:f8:e7:ad:77:57:68:a3:91:c5:7b:e7:e2:59:
         4f:72:15:63:da:a8:93:23:59:a1:98:26:a3:1d:5b:30:79:fa:
         24:5c:f6:7e:d5:e4:d9:b5:26:54:15:47:ce:c6:72:4b:ad:02:
         bb:51:3d:47:60:67:29:85:ff:42:be:f4:ca:31:cf:8f:2f:67:
         37:38:b6:bd:0e:47:5c:3e:a6:8d:b7:49:ca:fb:b7:4c:2f:f4:
         8f:d4:a7:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----