Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/679eb8de-8c77-3a32-a0f8-2e2410165768.roa
File:                     679eb8de-8c77-3a32-a0f8-2e2410165768.roa (raw, json)
Hash identifier:          Lk7R04wKwBj+GhahskN2hbNDtD8+qpveLsn51XrOVH0=
Subject key identifier:   A6:37:A5:44:FA:C5:C0:01:EE:8D:86:BB:35:37:77:D9:E8:13:C1:02
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F432858403D35FA2D2474A4573B169080
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/679eb8de-8c77-3a32-a0f8-2e2410165768.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Tue 18 Mar 2025 04:00:00 +0000
asID:                     40676
IP address blocks:        104.234.34.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:3d:35:fa:2d:24:74:a4:57:3b:16:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Mar 18 04:00:00 2025 GMT
        Subject: CN=eb8e9483-b78a-4dc9-b5bb-996a326cb142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c0:e6:79:ac:af:41:ef:e7:d4:3e:4a:5d:86:
                    5b:7a:ca:00:aa:c0:ed:44:85:13:a1:84:b3:a1:2e:
                    52:21:9c:4b:b3:9c:8a:9d:e3:94:e1:c7:bd:0c:be:
                    c7:3c:bf:98:8b:a7:39:b0:bb:9f:2e:87:cc:7d:f5:
                    24:fa:fb:f7:54:90:bc:46:4a:c2:06:47:ea:b6:55:
                    8b:cf:20:4f:63:5c:b8:e6:bc:a1:28:79:84:b7:df:
                    9c:52:09:3a:e7:c9:35:27:c9:18:1e:de:20:64:77:
                    d1:3b:e5:80:2d:e4:87:34:45:02:9b:0c:9f:7a:4b:
                    01:21:8e:cf:a8:8d:91:d6:ad:d2:9c:75:23:23:b0:
                    d5:cb:be:45:ee:be:66:b6:d2:21:09:78:1e:47:8d:
                    57:df:fe:a2:8f:05:9e:a8:4b:c4:62:0e:94:1b:d8:
                    c3:24:40:3b:9a:a4:51:3c:e2:3e:59:1f:1a:05:bd:
                    9d:15:bc:73:62:3c:f6:36:6f:75:58:bc:2f:49:e0:
                    86:a5:ce:2a:f3:e7:4e:b0:70:a4:fc:2d:76:d2:0e:
                    96:e8:49:f1:1f:f1:41:a1:52:65:a8:de:37:1f:57:
                    41:10:9f:ec:5c:cf:18:03:a4:08:a3:e7:a5:94:ce:
                    2d:3a:06:50:f7:9d:ec:e9:c1:4a:20:a0:b7:17:2b:
                    e2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:37:A5:44:FA:C5:C0:01:EE:8D:86:BB:35:37:77:D9:E8:13:C1:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/679eb8de-8c77-3a32-a0f8-2e2410165768.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:02:71:68:92:a1:24:5a:11:69:05:04:20:31:09:6a:61:d6:
         fd:97:f0:af:04:12:2a:87:7d:d3:aa:1c:89:2b:29:e7:17:3c:
         47:3b:07:b6:3d:98:7c:74:f4:2d:b9:64:b6:3c:07:e6:ad:00:
         ca:ff:7f:4d:9d:20:b4:61:e8:cd:12:08:2a:93:12:03:a2:86:
         fc:60:72:38:bf:91:e7:03:6c:55:e6:ac:cc:72:ad:70:24:88:
         59:bb:64:47:4e:e8:4a:f9:ec:5d:ae:cb:d6:4a:13:88:18:4c:
         42:ab:61:2f:40:52:d2:52:1c:2a:b4:00:45:d5:9f:57:96:f7:
         cb:ad:94:aa:41:4c:db:22:09:e0:c0:f5:70:03:db:b3:d7:c9:
         bf:21:f2:9b:d7:96:4b:c7:03:b6:50:91:9e:05:57:15:c6:5f:
         e4:c0:1f:83:b4:89:26:61:19:3f:f1:dc:d6:2e:d3:cb:93:48:
         4e:1c:31:0f:66:4b:d6:6f:32:c5:ce:e8:2a:58:29:21:14:66:
         36:8f:cd:ce:f7:e0:fb:64:96:80:a9:07:c3:de:74:0f:c1:4f:
         6d:39:ff:62:1d:d0:4e:e0:cf:a5:64:81:fa:a9:ef:54:f7:81:
         3c:36:f5:ae:52:6e:4d:96:d1:e3:56:70:91:04:17:d9:f1:a2:
         49:cc:c5:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----