Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/7e59c297-4c4f-3112-8c6a-cf38704c12ef.roa
File:                     7e59c297-4c4f-3112-8c6a-cf38704c12ef.roa (raw, json)
Hash identifier:          21i9CCMWIV1VO3iH7k9c4Z1j0Ln77gBUWWGjJYeRg4A=
Subject key identifier:   84:E3:5F:53:12:FC:1F:99:03:C0:C3:EE:FF:03:F5:22:17:ED:B5:80
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583DC75E12BB12ECBA9D718BF280
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/7e59c297-4c4f-3112-8c6a-cf38704c12ef.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     397423
IP address blocks:        104.234.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:c7:5e:12:bb:12:ec:ba:9d:71:8b:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=accf5ff0-eb27-40fd-83bb-907086ae5857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8d:25:be:ab:e6:ba:b6:38:99:04:cc:50:2c:
                    da:2d:22:90:4a:cd:6c:7b:56:6c:25:8f:4e:e4:fb:
                    ad:94:fa:7c:60:6a:0e:9b:43:46:fb:cf:00:2f:e5:
                    82:ed:4d:46:61:af:03:0c:a3:1a:ed:c0:fc:77:31:
                    06:de:6b:9a:93:93:76:7c:cb:89:aa:48:fb:82:fe:
                    98:88:c8:b7:b0:e7:05:20:5c:97:40:bc:27:0e:9e:
                    e2:b8:b8:27:6d:59:86:81:39:ee:f6:6e:38:32:be:
                    2d:8b:fe:50:ee:89:86:b6:f5:b3:d4:46:44:e7:14:
                    af:c5:f5:c9:35:28:64:ba:14:92:50:0a:3b:6b:07:
                    ba:19:eb:eb:07:76:ab:db:de:9f:09:b1:9f:f9:46:
                    d0:40:cf:01:9b:8a:09:d8:cc:2e:42:e1:95:f2:f1:
                    6a:f3:ca:b6:c9:50:1f:93:5c:c0:ca:bf:e5:62:c6:
                    29:99:7d:9c:28:f6:0c:ff:ec:a3:2e:3f:14:5e:dd:
                    49:af:26:b9:c5:47:76:20:6f:30:95:c0:dc:bc:8d:
                    da:b6:2d:57:dc:f1:a7:d6:76:20:c2:fc:15:8d:b3:
                    90:b9:c3:aa:09:82:f3:c2:ad:e3:2f:2c:a2:56:ba:
                    7c:dc:7a:92:0b:5a:0e:fc:dc:4c:17:ea:40:54:ba:
                    8f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E3:5F:53:12:FC:1F:99:03:C0:C3:EE:FF:03:F5:22:17:ED:B5:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/7e59c297-4c4f-3112-8c6a-cf38704c12ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:57:71:f0:45:74:29:47:58:e9:b3:4f:9b:43:08:a5:83:7e:
         ab:86:30:64:46:ee:27:d3:b8:94:06:82:f5:35:a3:fd:d1:d3:
         31:27:a5:da:14:36:ef:f3:b0:2c:d7:1a:7f:b4:3f:03:13:2c:
         38:cc:12:b8:44:24:f9:ac:d1:ca:54:f2:8f:15:5e:e1:f0:3e:
         a0:f2:01:82:43:1e:8c:b1:5b:fa:d8:c0:34:82:27:0d:3e:d1:
         7c:78:b1:a9:a1:b3:2e:0c:da:98:93:79:77:7a:12:9f:06:26:
         cf:06:50:be:a1:9a:a6:44:3c:7f:83:37:e3:90:5a:3f:0f:81:
         18:75:5f:6c:28:18:71:be:77:d5:0d:5f:a1:54:f1:0a:52:68:
         98:3d:d0:fd:d1:94:3b:fc:b5:04:79:d8:14:d4:37:5d:53:b9:
         6e:19:7f:3d:aa:95:94:a5:e0:f6:72:68:f3:28:f5:01:25:e8:
         46:8a:41:3c:21:a8:cd:60:5b:92:c8:bd:b3:c9:0e:67:58:67:
         9d:db:ae:b7:c0:ce:01:4a:b8:b2:b3:48:bb:d5:95:04:de:44:
         8f:e4:25:a9:e7:34:f1:8b:6f:f1:34:d4:b9:fe:8c:b2:8c:78:
         cb:44:de:de:01:08:58:63:c9:ad:ff:90:e9:b6:70:f3:28:45:
         73:e7:b7:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD3HXhK7Euy6nXGL8oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2ZjZkYmQtNWExZi00OGIxLWFjN2EtN2I3YzAzNmM3
MGYwMB4XDTIxMTIxMzE1MTgwMFoXDTIzMDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
YWNjZjVmZjAtZWIyNy00MGZkLTgzYmItOTA3MDg2YWU1ODU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo0lvqvmurY4mQTMUCzaLSKQSs1se1ZsJY9O
5PutlPp8YGoOm0NG+88AL+WC7U1GYa8DDKMa7cD8dzEG3muak5N2fMuJqkj7gv6Y
iMi3sOcFIFyXQLwnDp7iuLgnbVmGgTnu9m44Mr4ti/5Q7omGtvWz1EZE5xSvxfXJ
NShkuhSSUAo7awe6GevrB3ar296fCbGf+UbQQM8Bm4oJ2MwuQuGV8vFq88q2yVAf
k1zAyr/lYsYpmX2cKPYM/+yjLj8UXt1Jrya5xUd2IG8wlcDcvI3ati1X3PGn1nYg
wvwVjbOQucOqCYLzwq3jLyyiVrp83HqSC1oO/NxMF+pAVLqPJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFITjX1MS/B+ZA8DD7v8D9SIX7bWAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZm
NmRiZC01YTFmLTQ4YjEtYWM3YS03YjdjMDM2YzcwZjAvN2U1OWMyOTctNGM0Zi0z
MTEyLThjNmEtY2YzODcwNGMxMmVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmY2ZjZkYmQtNWExZi00OGIxLWFj
N2EtN2I3YzAzNmM3MGYwL2ZmNmY2ZGJkLTVhMWYtNDhiMS1hYzdhLTdiN2MwMzZj
NzBmMC5jcmwwHwYDVR0jBBgwFoAUtiZZXutxL1WTpJ9RO8h8b3R0PQUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZmNmRiZC01YTFmLTQ4YjEtYWM3YS03Yjdj
MDM2YzcwZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOraMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE5XcfBFdClHWOmzT5tDCKWDfquGMGRG7ifTuJQGgvU1o/3R0zEnpdoU
Nu/zsCzXGn+0PwMTLDjMErhEJPms0cpU8o8VXuHwPqDyAYJDHoyxW/rYwDSCJw0+
0Xx4samhsy4M2piTeXd6Ep8GJs8GUL6hmqZEPH+DN+OQWj8PgRh1X2woGHG+d9UN
X6FU8QpSaJg90P3RlDv8tQR52BTUN11TuW4Zfz2qlZSl4PZyaPMo9QEl6EaKQTwh
qM1gW5LIvbPJDmdYZ53brrfAzgFKuLKzSLvVlQTeRI/kJannNPGLb/E01Ln+jLKM
eMtE3t4BCFhjya3/kOm2cPMoRXPnt04=
-----END CERTIFICATE-----