Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/aa170cf1-c886-3c83-9511-6c7ea4a72d49.roa
File:                     aa170cf1-c886-3c83-9511-6c7ea4a72d49.roa (raw, json)
Hash identifier:          tyXMciXAK9aHMcD9O43ejYuvhf0vBOnQZYebi5KFTeI=
Subject key identifier:   15:21:10:6F:DF:77:AE:E9:1B:E6:64:01:23:F5:C1:4B:0B:06:32:A3
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583FCC814AD8AAAF0D43FB167FA0
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/aa170cf1-c886-3c83-9511-6c7ea4a72d49.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     204769
IP address blocks:        104.234.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:cc:81:4a:d8:aa:af:0d:43:fb:16:7f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=228b41b5-9190-4611-b1a1-dba842e3ee85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:3c:73:92:42:44:f3:8f:9f:ec:fe:e4:86:
                    e9:eb:e7:fe:b5:6d:71:a0:88:1c:05:d9:99:03:28:
                    c7:d3:15:89:b6:ee:de:9b:8e:2a:31:04:b1:81:ad:
                    06:47:b8:dd:1d:3b:48:f9:d1:d4:6a:97:d1:1c:77:
                    2a:3f:ff:8d:f6:01:75:a4:d7:61:80:4a:56:24:54:
                    78:d6:3a:3d:4e:30:a0:c3:38:02:56:48:d1:21:15:
                    f1:29:de:aa:3a:bb:cd:fa:98:0a:c1:49:d0:71:63:
                    9f:50:32:08:71:4d:07:a1:2a:dc:ce:0b:e1:d9:f0:
                    b3:de:71:1a:77:c4:14:af:4a:a8:81:0e:a1:11:29:
                    92:b5:5c:c3:79:22:61:e9:b9:e0:9a:f1:02:da:3e:
                    c9:ea:20:30:ae:a9:54:e5:d3:8e:f7:c8:ff:30:52:
                    8e:4b:d7:32:5a:8b:23:f3:5f:31:74:03:6c:47:cc:
                    74:91:c4:12:01:1a:34:3d:bd:d3:a6:bd:be:22:8b:
                    65:bf:b7:40:f3:ec:89:28:91:a9:de:fc:65:a1:0e:
                    74:29:2b:73:17:5f:67:a7:af:8b:ba:e0:f9:7f:f6:
                    55:aa:5c:42:8b:92:a8:4b:6e:df:40:d8:7d:05:f9:
                    c7:24:4b:7f:de:ca:a7:bb:58:d7:5f:8d:9a:05:f7:
                    42:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:21:10:6F:DF:77:AE:E9:1B:E6:64:01:23:F5:C1:4B:0B:06:32:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/aa170cf1-c886-3c83-9511-6c7ea4a72d49.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:61:08:fe:f7:0a:05:01:63:5e:3d:47:59:a7:fe:72:ab:fa:
         a0:2e:ee:0e:23:f1:8e:07:2d:b2:4d:41:22:28:70:30:b5:32:
         b1:6b:0f:ac:fa:d2:a0:e5:9b:8d:60:1d:2b:58:83:16:8e:68:
         7a:93:9a:f3:bc:00:29:10:ed:49:88:72:17:c0:ea:d5:a3:ca:
         20:fa:48:34:a2:8f:65:0e:bb:6c:48:c4:2f:fd:c0:b6:31:c6:
         53:f1:89:90:ba:c7:03:18:6f:96:94:19:ed:a1:fd:e5:5c:8d:
         40:8b:71:02:4c:9e:11:74:db:cc:1b:1a:ed:e7:ea:d8:64:ee:
         ac:57:d3:46:2c:f3:66:78:c3:44:1f:d0:79:78:74:8e:28:17:
         62:f2:57:b6:ee:ab:ae:e9:e0:91:d5:45:00:30:14:c0:17:ad:
         07:ea:a5:d4:71:95:5d:31:a2:fa:f4:a5:46:aa:4b:6f:29:24:
         db:c4:cc:84:4c:43:5e:23:9c:4d:dc:44:b0:68:cc:93:5b:b1:
         3d:f2:2f:40:f9:4a:92:d6:71:53:0e:b0:45:5e:e9:79:f6:ec:
         e8:3d:01:ff:5f:7d:e3:ec:09:7f:0d:f3:6e:c0:3e:5b:cf:07:
         83:79:a4:a1:ad:54:d0:60:6c:3d:fa:38:90:b3:ab:ab:e2:a1:
         81:6f:90:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/MgUrYqq8NQ/sWf6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2ZjZkYmQtNWExZi00OGIxLWFjN2EtN2I3YzAzNmM3
MGYwMB4XDTIxMTIxMzE1MTgwMFoXDTI0MDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
MjI4YjQxYjUtOTE5MC00NjExLWIxYTEtZGJhODQyZTNlZTg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssY8c5JCRPOPn+z+5Ibp6+f+tW1xoIgcBdmZ
AyjH0xWJtu7em44qMQSxga0GR7jdHTtI+dHUapfRHHcqP/+N9gF1pNdhgEpWJFR4
1jo9TjCgwzgCVkjRIRXxKd6qOrvN+pgKwUnQcWOfUDIIcU0HoSrczgvh2fCz3nEa
d8QUr0qogQ6hESmStVzDeSJh6bngmvEC2j7J6iAwrqlU5dOO98j/MFKOS9cyWosj
818xdANsR8x0kcQSARo0Pb3Tpr2+Iotlv7dA8+yJKJGp3vxloQ50KStzF19np6+L
uuD5f/ZVqlxCi5KoS27fQNh9BfnHJEt/3sqnu1jXX42aBfdCLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBUhEG/fd67pG+ZkASP1wUsLBjKjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZm
NmRiZC01YTFmLTQ4YjEtYWM3YS03YjdjMDM2YzcwZjAvYWExNzBjZjEtYzg4Ni0z
YzgzLTk1MTEtNmM3ZWE0YTcyZDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmY2ZjZkYmQtNWExZi00OGIxLWFj
N2EtN2I3YzAzNmM3MGYwL2ZmNmY2ZGJkLTVhMWYtNDhiMS1hYzdhLTdiN2MwMzZj
NzBmMC5jcmwwHwYDVR0jBBgwFoAUtiZZXutxL1WTpJ9RO8h8b3R0PQUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZmNmRiZC01YTFmLTQ4YjEtYWM3YS03Yjdj
MDM2YzcwZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOq8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1hCP73CgUBY149R1mn/nKr+qAu7g4j8Y4HLbJNQSIocDC1MrFrD6z6
0qDlm41gHStYgxaOaHqTmvO8ACkQ7UmIchfA6tWjyiD6SDSij2UOu2xIxC/9wLYx
xlPxiZC6xwMYb5aUGe2h/eVcjUCLcQJMnhF028wbGu3n6thk7qxX00Ys82Z4w0Qf
0Hl4dI4oF2LyV7buq67p4JHVRQAwFMAXrQfqpdRxlV0xovr0pUaqS28pJNvEzIRM
Q14jnE3cRLBozJNbsT3yL0D5SpLWcVMOsEVe6Xn27Og9Af9ffePsCX8N827APlvP
B4N5pKGtVNBgbD36OJCzq6vioYFvkMc=
-----END CERTIFICATE-----