Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/7c13c87d-022d-3706-8327-37109d2a34c9.roa
File:                     7c13c87d-022d-3706-8327-37109d2a34c9.roa (raw, json)
Hash identifier:          LPZvUJhZ3XwSYdBbC2grCGriqCjO9O83JOm6hVs1sI8=
Subject key identifier:   99:82:F5:5B:37:11:8C:47:18:1B:D1:ED:04:A9:6F:6C:B4:FA:39:1D
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583FC07234CECB9724C1E3C79A80
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/7c13c87d-022d-3706-8327-37109d2a34c9.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     138737
IP address blocks:        104.234.179.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c0:72:34:ce:cb:97:24:c1:e3:c7:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=8fb64c60-cbd9-44a6-ab2a-a72aca2b475a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5d:4f:3d:1a:d0:76:ea:b3:86:cb:56:3f:2c:
                    76:e9:70:ee:78:7a:9e:bd:86:94:19:e5:6b:1d:16:
                    f8:dc:c7:6c:b8:42:3a:81:91:41:0a:64:1a:b7:a6:
                    6a:9c:20:af:7c:57:91:26:d5:43:ce:25:61:0e:30:
                    28:82:12:19:87:20:d8:60:9d:d3:05:8b:74:bb:37:
                    cf:25:10:ab:a8:25:c7:e2:9b:0c:18:67:9a:bb:59:
                    3b:10:25:f9:4b:be:05:5a:d6:54:4b:e8:c9:fa:f8:
                    27:50:9a:f5:81:a9:0a:b9:7f:54:f9:96:47:6a:e3:
                    2f:5d:54:5f:ca:45:1d:7b:0c:17:6d:82:8e:9d:2d:
                    d2:b1:16:68:ea:58:dd:b8:5c:78:69:b6:8a:fb:e8:
                    05:cd:f3:19:3d:4d:8e:b0:19:54:72:fc:19:1f:69:
                    c9:35:e8:31:5b:1f:5e:49:19:74:00:7b:c7:4c:f3:
                    a5:b4:79:25:3c:f0:29:01:46:8d:83:99:5a:0b:80:
                    c2:5e:6c:17:63:fa:3c:15:4e:16:6e:88:cd:9c:ec:
                    21:19:3d:24:90:ce:35:05:37:e2:ff:43:05:04:d9:
                    3a:f8:99:3c:fa:75:2c:58:af:48:11:a5:07:5e:23:
                    85:ad:3b:d8:0a:a6:af:0b:57:1e:61:cc:c0:d0:64:
                    b2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:82:F5:5B:37:11:8C:47:18:1B:D1:ED:04:A9:6F:6C:B4:FA:39:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/7c13c87d-022d-3706-8327-37109d2a34c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:e2:3d:63:0a:17:3f:71:05:64:e3:4f:a0:41:1d:60:ac:58:
         1b:75:53:58:11:77:b3:84:2e:06:f1:25:63:87:d0:b0:f5:22:
         c2:3d:43:fe:69:73:f6:31:29:da:de:34:16:c0:f7:d0:27:0b:
         96:17:b0:b0:24:5d:24:40:bb:9b:6b:28:f0:76:21:a6:74:77:
         86:ab:0f:4b:44:75:43:fe:99:72:cc:6f:db:f5:b0:da:6a:bc:
         76:0b:78:4a:ea:10:ca:93:0f:b5:2a:31:9f:65:ec:89:ab:08:
         0b:fa:3c:74:bd:ba:38:7e:d6:40:13:46:87:31:f8:b7:ca:c2:
         85:75:01:da:e5:64:92:f3:4a:90:bc:fe:f9:59:d3:78:4e:3e:
         f4:9b:76:19:7f:68:8c:a0:b6:2d:7f:c3:08:1f:2a:ff:40:b4:
         13:d2:1e:63:1e:af:ae:1c:0a:65:8d:75:5a:2b:88:74:30:94:
         c7:8c:55:7a:d1:56:a4:ae:2b:df:05:ac:f6:97:1e:ac:d3:3a:
         39:54:fd:9b:4e:ab:55:d3:d0:7f:ce:a7:8c:f7:cf:88:85:17:
         61:58:6c:79:a2:7b:c0:0c:1c:23:41:22:29:00:7b:a0:23:c3:
         4e:20:c7:dc:87:94:7f:d2:8b:8f:15:31:be:49:f9:8d:c6:e0:
         43:d5:4f:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/AcjTOy5ckwePHmoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2ZjZkYmQtNWExZi00OGIxLWFjN2EtN2I3YzAzNmM3
MGYwMB4XDTIxMTIxMzE1MTgwMFoXDTI0MDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
OGZiNjRjNjAtY2JkOS00NGE2LWFiMmEtYTcyYWNhMmI0NzVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjl1PPRrQduqzhstWPyx26XDueHqevYaUGeVr
HRb43MdsuEI6gZFBCmQat6ZqnCCvfFeRJtVDziVhDjAoghIZhyDYYJ3TBYt0uzfP
JRCrqCXH4psMGGeau1k7ECX5S74FWtZUS+jJ+vgnUJr1gakKuX9U+ZZHauMvXVRf
ykUdewwXbYKOnS3SsRZo6ljduFx4abaK++gFzfMZPU2OsBlUcvwZH2nJNegxWx9e
SRl0AHvHTPOltHklPPApAUaNg5laC4DCXmwXY/o8FU4WbojNnOwhGT0kkM41BTfi
/0MFBNk6+Jk8+nUsWK9IEaUHXiOFrTvYCqavC1ceYczA0GSymQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJmC9Vs3EYxHGBvR7QSpb2y0+jkdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZm
NmRiZC01YTFmLTQ4YjEtYWM3YS03YjdjMDM2YzcwZjAvN2MxM2M4N2QtMDIyZC0z
NzA2LTgzMjctMzcxMDlkMmEzNGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmY2ZjZkYmQtNWExZi00OGIxLWFj
N2EtN2I3YzAzNmM3MGYwL2ZmNmY2ZGJkLTVhMWYtNDhiMS1hYzdhLTdiN2MwMzZj
NzBmMC5jcmwwHwYDVR0jBBgwFoAUtiZZXutxL1WTpJ9RO8h8b3R0PQUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZmNmRiZC01YTFmLTQ4YjEtYWM3YS03Yjdj
MDM2YzcwZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOqzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADfiPWMKFz9xBWTjT6BBHWCsWBt1U1gRd7OELgbxJWOH0LD1IsI9Q/5p
c/YxKdreNBbA99AnC5YXsLAkXSRAu5trKPB2IaZ0d4arD0tEdUP+mXLMb9v1sNpq
vHYLeErqEMqTD7UqMZ9l7ImrCAv6PHS9ujh+1kATRocx+LfKwoV1AdrlZJLzSpC8
/vlZ03hOPvSbdhl/aIygti1/wwgfKv9AtBPSHmMer64cCmWNdVoriHQwlMeMVXrR
VqSuK98FrPaXHqzTOjlU/ZtOq1XT0H/Op4z3z4iFF2FYbHmie8AMHCNBIikAe6Aj
w04gx9yHlH/Si48VMb5J+Y3G4EPVT7k=
-----END CERTIFICATE-----