Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/6701c8e5-d02b-3d6b-9c02-c744a746fb87.roa
File:                     6701c8e5-d02b-3d6b-9c02-c744a746fb87.roa (raw, json)
Hash identifier:          mzTDnMiLi2PfaJdU87S+plXiXHmpLp63jJaML1lvLaE=
Subject key identifier:   30:90:CC:C9:01:27:88:B9:67:13:69:16:A5:B7:57:15:B7:F4:0C:B2
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583FC06D12D53B53C6E317E464B0
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/6701c8e5-d02b-3d6b-9c02-c744a746fb87.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     14445
IP address blocks:        104.234.189.0/24 maxlen: 24
                          104.234.196.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c0:6d:12:d5:3b:53:c6:e3:17:e4:64:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=f61aa8e1-7544-4acd-931a-b4ce5ac04010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cf:b1:a3:e0:31:91:5f:f9:aa:bd:d0:a9:f9:
                    5e:28:72:8d:3e:73:85:b9:4c:e8:56:0b:79:bd:85:
                    c5:f5:aa:ac:24:e5:e6:d3:02:06:ab:3d:3b:c1:35:
                    d0:29:5c:cb:28:3d:e7:f8:76:2a:2d:92:9d:97:38:
                    06:f0:71:ff:c0:0c:e3:d5:87:38:f7:27:4e:e7:fc:
                    0f:0c:a0:26:13:82:fe:fb:65:17:a1:91:a8:ea:7f:
                    f6:e3:45:fd:e4:5c:51:a5:2a:45:48:33:c5:14:7a:
                    66:37:6c:cd:b5:a9:2d:6f:b9:f8:f1:a2:a3:83:22:
                    e1:6a:69:36:50:1f:cb:0b:ee:df:b3:88:d0:74:01:
                    30:0a:3d:4f:22:8d:4c:82:cd:1b:aa:8e:2d:e3:39:
                    1e:1f:bb:f0:a0:29:35:8f:31:c4:91:62:d0:ed:22:
                    d0:2a:3e:86:84:41:ad:7a:3f:59:d6:65:11:9e:4f:
                    a2:fe:e3:25:1c:54:71:64:d1:1e:5b:9a:72:55:05:
                    cf:eb:a8:b3:8c:a8:42:fd:63:43:cc:34:87:0a:6e:
                    bd:12:cc:62:20:1f:f1:9e:c0:69:bf:99:b2:ad:85:
                    1a:93:c6:8c:4e:60:cd:54:81:6f:2c:e2:83:b0:93:
                    2d:fd:b0:ef:31:1e:04:2d:95:da:5b:bd:c8:d7:cc:
                    86:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:90:CC:C9:01:27:88:B9:67:13:69:16:A5:B7:57:15:B7:F4:0C:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/6701c8e5-d02b-3d6b-9c02-c744a746fb87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.189.0/24
                  104.234.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:d1:82:63:ba:79:c1:b1:48:27:f4:a3:2c:ec:45:22:72:e7:
         02:cd:9b:5a:39:9c:4f:39:ca:5a:6f:52:09:55:9c:61:4f:ce:
         18:48:11:3a:f7:6a:c7:ef:62:44:3a:57:db:9c:27:24:8f:c6:
         9b:dc:b9:83:24:5f:e4:0e:a0:75:1a:77:58:c4:f8:46:ab:a6:
         e6:57:83:29:30:88:e2:31:7e:16:7f:b9:18:24:17:31:f4:6f:
         eb:8f:21:a7:c1:bd:1d:6d:f0:5e:c0:38:8a:d2:f8:33:7c:ed:
         31:38:fa:37:a2:07:3f:80:fa:91:1b:f4:11:66:35:1d:3c:ce:
         b3:d7:21:e2:81:99:3e:6d:d3:88:b5:04:e1:7b:b1:35:0b:c3:
         07:8b:90:64:08:66:05:2c:95:2e:c2:f8:e8:9d:bb:56:ff:29:
         e0:6e:7d:a4:de:e4:52:f4:17:c9:c6:86:ab:4d:dc:b7:04:93:
         ff:81:8e:63:41:b7:76:66:b0:4a:14:93:c4:cc:91:e6:74:1f:
         ac:8c:43:e1:88:0d:d2:0a:12:72:aa:2b:f4:8a:dc:ab:15:1d:
         09:ca:28:bc:83:24:60:99:65:54:8a:68:d4:c1:6d:39:11:66:
         4e:87:8c:37:bf:b8:67:3d:a8:13:58:78:93:d9:44:a4:94:16:
         0c:48:5a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----