Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/a7e4c8d9-a18a-3141-b914-a3791b625b47.roa
File:                     a7e4c8d9-a18a-3141-b914-a3791b625b47.roa (raw, json)
Hash identifier:          NSoV4JUR7VZ4WAHD3WWgSZSNI2ZSnoYdA3YXsTZoO1o=
Subject key identifier:   20:11:7F:A8:E9:83:46:C4:80:11:C8:49:E7:EB:60:69:C3:5B:50:FB
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F43285840872FFE9A9088495EA90C1840
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/a7e4c8d9-a18a-3141-b914-a3791b625b47.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Mon 14 Apr 2025 04:00:00 +0000
asID:                     207279
IP address blocks:        104.234.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:87:2f:fe:9a:90:88:49:5e:a9:0c:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Apr 14 04:00:00 2025 GMT
        Subject: CN=76f1c5ac-e5c0-4c93-a394-2b41eef9d38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cc:f0:d6:e7:d2:1d:cf:b8:0f:ee:89:de:48:
                    18:ee:1a:e2:33:fb:c3:63:94:94:cd:b7:48:4a:64:
                    cf:64:cf:42:70:15:00:9c:31:0f:7a:17:c0:a4:e9:
                    07:40:61:41:ee:01:fe:a7:47:cc:4b:0d:8c:84:3b:
                    90:ee:5b:bc:ea:fb:58:79:20:f9:ea:fc:71:4e:3e:
                    eb:36:2f:c2:3b:65:21:4d:60:95:0c:35:11:8f:b7:
                    25:da:4b:53:85:54:cb:0c:e5:d1:c9:63:a9:27:d5:
                    ba:91:55:47:bb:d1:c3:07:74:d5:c9:00:03:43:d5:
                    0e:0d:5a:e0:1a:46:50:73:9f:ae:64:c9:b9:9f:1a:
                    8f:00:13:65:94:12:a3:a9:7e:da:42:b4:25:37:54:
                    20:ed:de:ed:ab:ee:14:de:cf:56:b1:68:94:90:3b:
                    87:24:9c:7d:5d:d7:f0:b5:6f:e0:ba:9e:74:9e:74:
                    b6:24:c6:8f:2d:63:da:6d:c9:22:c8:d0:95:7a:d1:
                    5a:d8:1f:05:b7:41:77:08:8e:ea:cd:51:09:e6:16:
                    22:82:6c:7d:c0:76:50:20:45:57:ec:a5:8e:98:13:
                    0b:eb:c4:83:55:c1:3c:5d:86:e5:27:ea:28:21:70:
                    f7:dc:61:ed:f8:31:f3:6d:e6:be:7f:ff:0d:36:be:
                    f2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:11:7F:A8:E9:83:46:C4:80:11:C8:49:E7:EB:60:69:C3:5B:50:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/a7e4c8d9-a18a-3141-b914-a3791b625b47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:08:94:19:0c:dd:4c:1d:1d:f6:73:98:f5:01:f3:77:24:52:
         b7:a9:6a:28:fa:5f:b2:50:a9:ae:89:b5:7c:5e:dc:3d:79:a6:
         fe:27:66:a9:3c:3e:94:5e:17:fc:5c:d1:ee:82:2c:80:7b:8d:
         9d:5d:41:0d:9a:87:fe:af:05:af:4b:41:5d:69:e1:2f:b5:05:
         aa:a9:ce:21:d9:d2:cf:1d:6b:37:c9:0a:4c:7e:e6:f2:2c:90:
         7d:90:ad:4e:43:13:93:ed:91:d6:0c:85:2a:ea:11:4e:51:cc:
         aa:04:34:9f:ee:05:cd:1a:26:4b:87:b4:a6:ce:0f:6d:b1:c1:
         66:10:8c:e1:74:f2:41:17:0d:6b:b5:c0:a7:d5:1c:30:12:03:
         d4:95:76:d1:21:88:0b:73:ed:b9:12:9d:fe:01:2c:ca:30:17:
         dc:8f:e3:d7:fc:57:63:0b:b5:17:43:9b:d9:19:66:ea:b7:08:
         b1:21:6e:09:b1:d7:9f:a5:dc:ee:2e:31:6c:eb:6b:b5:34:ba:
         60:90:d7:83:2f:d7:ee:f8:21:3c:7f:b4:a0:95:86:71:e7:53:
         e5:ec:a7:df:8c:11:cf:32:cd:77:02:1c:04:28:e6:d7:c5:b5:
         bb:22:08:bb:5a:be:09:06:23:62:fb:b3:ff:c9:f4:ed:45:6c:
         2e:69:f1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----