Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/a13d8ac2-2053-3cdc-b17e-0ccd43c3b96b.roa
File:                     a13d8ac2-2053-3cdc-b17e-0ccd43c3b96b.roa (raw, json)
Hash identifier:          qV/kXxNNAI5rCf9Aa1vfmt1jcRNhCfk9Qp6Xx3QzVBI=
Subject key identifier:   76:CA:14:7B:FE:1D:C2:12:2D:34:06:77:6E:8C:BF:3F:4A:09:F1:18
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583FFED59E2921B09B873B9D3700
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/a13d8ac2-2053-3cdc-b17e-0ccd43c3b96b.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     211585
IP address blocks:        104.234.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:fe:d5:9e:29:21:b0:9b:87:3b:9d:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=636c564f-3af0-494b-9753-a70615f79909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:09:6c:c9:6c:d7:4b:7a:49:12:04:0c:aa:78:
                    c9:a3:df:68:fe:c1:e6:e1:d4:db:c8:c7:79:45:2e:
                    17:18:10:43:1e:12:bb:b5:cb:71:a1:40:29:a4:0e:
                    d5:58:1b:37:22:6a:10:06:a8:92:cd:e5:f9:2d:2e:
                    55:be:aa:f6:49:b5:08:29:d9:84:ec:45:2f:f3:d3:
                    c8:85:bf:af:f0:13:b5:db:04:7e:2e:a8:90:68:4b:
                    57:e1:9c:5d:88:1b:bc:56:61:49:38:04:e4:fa:fe:
                    ea:24:53:fa:b3:2d:92:ef:23:bc:a4:9c:28:7f:55:
                    e1:24:77:1e:11:48:14:3a:2f:7d:0c:97:ab:eb:a8:
                    3f:5f:f7:23:aa:62:81:50:85:c0:82:f8:a4:7c:32:
                    94:8a:0b:d6:00:bf:48:e7:74:cb:f2:29:54:b3:9d:
                    fe:6d:4f:81:0c:ad:68:b9:7a:ca:5d:2a:5e:2f:99:
                    df:cb:9b:d7:2c:b8:96:40:94:fe:6d:b6:5d:c0:0f:
                    c9:c2:e0:76:23:85:31:05:e7:30:d9:3a:bd:b9:8e:
                    95:07:9b:ad:f3:03:45:52:13:ca:31:92:10:ff:80:
                    c3:dc:8f:de:de:58:b9:8f:e0:96:12:af:ef:12:60:
                    70:53:99:a8:01:74:84:3d:d1:ec:af:10:3b:c6:48:
                    53:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:CA:14:7B:FE:1D:C2:12:2D:34:06:77:6E:8C:BF:3F:4A:09:F1:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/a13d8ac2-2053-3cdc-b17e-0ccd43c3b96b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:dc:f6:f5:9f:59:ac:e9:47:7d:3e:a0:0e:9e:0c:98:54:5e:
         5f:0d:a9:30:c3:6e:b4:16:99:40:57:3e:4c:b2:79:f6:7c:79:
         f4:af:fc:25:7e:c6:8c:ab:f9:e9:33:51:78:75:0d:a8:8c:83:
         ee:cb:7f:31:63:e3:a5:66:e9:c7:86:33:88:dd:dd:fb:e8:8a:
         29:03:81:cc:f5:1b:0b:6f:f4:30:04:ec:fb:f6:e6:b0:6a:3e:
         c5:22:b7:b0:bb:b8:c1:43:1b:9f:b4:3a:bb:5b:4f:b6:80:8c:
         8b:fd:7a:b8:f2:8d:ef:af:1b:41:a8:ce:be:fe:67:9b:5e:54:
         46:78:b1:40:d2:17:fe:e3:f0:be:a5:ef:fc:49:85:b8:f0:a5:
         0a:50:08:5c:87:ac:cf:d0:b0:8e:91:fd:91:89:db:a5:87:64:
         fe:df:e6:66:b5:42:08:57:55:47:bf:3a:1e:31:e0:51:7d:58:
         3c:08:f1:9d:da:82:b1:c9:03:8d:90:3e:8d:09:2b:c6:dd:29:
         5b:8a:08:e8:be:c8:ce:d6:0b:8a:d4:26:9c:65:16:b5:58:a0:
         a3:79:c5:ad:39:81:f2:21:81:3d:28:52:4c:90:d9:84:a4:a9:
         5b:84:76:6f:82:dd:e1:98:2a:3e:29:c2:e3:7d:89:9d:53:5d:
         25:0c:c1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----