Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/9fc72e3e-7aa2-3d87-951d-f788e6b89667.roa
File:                     9fc72e3e-7aa2-3d87-951d-f788e6b89667.roa (raw, json)
Hash identifier:          HfNovYzUrZOvhAk/1/AzqqWGjgPtKtgUZO/j5pzLDcY=
Subject key identifier:   CF:2F:18:2B:92:D4:A3:F2:F6:FB:76:14:DD:43:E3:4F:68:B2:35:42
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583CFC61F321593C3303D1DC5580
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/9fc72e3e-7aa2-3d87-951d-f788e6b89667.roa
Signing time:             Mon 13 Dec 2021 05:00:00 +0000
ROA not before:           Mon 13 Dec 2021 05:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     40676
IP address blocks:        104.234.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:fc:61:f3:21:59:3c:33:03:d1:dc:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 05:00:00 2021 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=74e0292f-d592-4467-9c2c-0b34f1238dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ba:e4:44:d9:82:c2:a0:46:93:f1:cc:30:7c:
                    c3:2d:38:9b:82:b6:09:49:15:f2:85:44:78:39:3d:
                    b4:7d:d6:73:cd:c0:34:7a:4d:f3:80:84:dd:a0:4f:
                    e4:a1:b0:b1:e1:cf:ab:9d:79:99:b0:f6:d9:aa:40:
                    e4:ef:94:b2:1e:5e:af:3f:53:57:58:a1:3f:c2:a6:
                    e4:18:a0:70:52:94:96:08:6d:80:80:63:d0:b3:e0:
                    29:c6:23:89:9f:cf:35:fc:8f:d7:f4:7f:bb:15:38:
                    a6:7b:68:57:f8:89:36:20:d8:35:43:dd:ed:ce:4a:
                    3a:8a:87:5c:f2:1c:63:1c:34:03:05:4b:13:94:55:
                    2e:b4:8f:e9:98:53:73:ba:50:d8:c6:b5:17:29:26:
                    0f:a9:4a:c7:6a:20:16:a0:36:c6:a7:ca:dd:92:dd:
                    3e:29:e1:68:96:20:7e:91:6c:b3:10:43:81:cd:3c:
                    9d:36:4d:e7:8b:7c:50:ad:14:d2:72:27:de:f3:bb:
                    c8:69:5a:35:e4:e1:a4:02:bb:26:79:a7:13:1e:87:
                    50:74:29:c3:b2:d0:3f:3c:ef:e6:b9:b1:cf:64:f1:
                    24:25:42:b4:64:fc:1b:a7:e1:02:b3:39:df:3c:d8:
                    df:9a:ca:cc:b2:13:57:15:13:1a:79:a9:a0:20:9c:
                    69:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2F:18:2B:92:D4:A3:F2:F6:FB:76:14:DD:43:E3:4F:68:B2:35:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/9fc72e3e-7aa2-3d87-951d-f788e6b89667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:52:1d:3c:bd:e0:01:6f:0c:7f:c4:b8:2a:cf:74:cd:d4:ec:
         3f:e9:c1:a3:75:0d:db:85:b8:b2:5d:df:4c:14:20:74:a6:b4:
         bd:64:51:54:83:34:53:0f:24:88:7a:dd:1f:98:68:fb:df:60:
         7a:9f:20:37:c7:04:8f:bf:46:ef:8f:42:93:68:16:c2:66:33:
         31:f8:41:54:d4:a5:46:0d:c3:0b:d5:5e:c1:57:e8:5a:14:c7:
         05:8b:52:00:6e:1b:24:af:74:58:2c:bd:21:f1:2f:b4:fc:8e:
         7c:fa:c3:ec:f6:b8:f2:51:4e:51:db:06:ab:85:49:32:93:a7:
         ed:82:35:c8:42:31:9a:a0:31:65:ab:2c:59:ca:66:1f:58:00:
         62:76:7a:45:3a:d8:39:0f:a1:8e:e2:62:19:b5:94:83:e0:07:
         c1:30:af:cf:8c:4f:9b:e0:6c:95:93:c8:a6:d3:ae:e5:e8:82:
         09:30:3c:b6:f5:87:65:c1:db:d0:f4:7e:24:3f:4e:33:b1:9b:
         4b:1d:53:73:5e:4c:69:3c:82:c7:43:55:b3:1d:de:73:bb:82:
         13:5c:dd:53:02:59:87:8a:ff:0a:93:92:d1:5d:f1:cf:00:4a:
         be:89:25:99:38:21:93:bb:83:fc:86:f7:0d:f0:8c:92:3a:8c:
         3b:9d:b0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----