Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/aab32627-4873-3966-83ad-21e67bbf42b8.roa
File:                     aab32627-4873-3966-83ad-21e67bbf42b8.roa (raw, json)
Hash identifier:          VfolIznDcgHktHyU88iS4lZ6MrJlVRQ301tg1yfdCT0=
Subject key identifier:   F0:CA:98:E3:78:BF:57:18:19:F6:D3:52:12:78:C7:1B:93:2B:F9:CB
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583C8C548734EA286419FDDD2280
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/aab32627-4873-3966-83ad-21e67bbf42b8.roa
Signing time:             Mon 13 Dec 2021 05:00:00 +0000
ROA not before:           Mon 13 Dec 2021 05:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     61317
IP address blocks:        104.234.255.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:8c:54:87:34:ea:28:64:19:fd:dd:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 05:00:00 2021 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=bc70f100-3bcb-4831-aac7-f74a7df40552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:61:a5:7f:78:12:27:12:81:0d:3e:b6:4f:c0:
                    9d:b6:22:8f:5e:d7:af:18:61:19:30:96:46:18:ce:
                    59:4e:fc:29:6d:97:e5:83:00:0e:75:5f:f5:fe:fd:
                    a8:a4:1d:95:c8:74:f7:25:e3:04:39:75:ea:16:e8:
                    a7:33:55:d6:42:4e:4f:84:ac:b9:4a:79:54:bc:c1:
                    06:af:95:6a:61:65:65:5b:e0:07:86:f9:6c:81:b1:
                    7f:1a:98:e2:b3:43:cb:a6:3e:bb:cc:83:d9:91:f7:
                    b4:a6:69:64:ae:7e:fa:37:0a:74:9f:b3:6d:86:62:
                    69:a2:1d:24:45:52:64:21:5a:b3:16:01:3a:0c:e5:
                    bb:14:a8:7d:60:1a:d9:e2:64:14:d6:bc:da:cf:7a:
                    fb:7b:ee:80:0d:02:37:30:26:1b:5b:8d:f7:eb:3f:
                    41:ea:20:ad:90:3b:ed:09:49:dd:42:5a:74:11:bd:
                    b5:29:4a:50:fc:92:72:83:e8:94:70:2a:2e:74:dc:
                    b2:64:3a:3a:84:92:8e:5b:98:76:79:32:21:39:9c:
                    ac:16:c6:1b:87:74:02:56:d7:d7:71:85:30:e8:61:
                    8c:52:bf:01:10:f5:85:6f:40:03:e1:17:73:bf:8b:
                    c7:04:80:93:cd:2c:29:78:83:45:86:3a:75:1b:7c:
                    58:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CA:98:E3:78:BF:57:18:19:F6:D3:52:12:78:C7:1B:93:2B:F9:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/aab32627-4873-3966-83ad-21e67bbf42b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:9a:44:51:82:e3:50:78:8a:35:71:8e:53:37:71:f9:df:a6:
         b3:6e:ff:30:d6:aa:31:34:c9:39:d6:29:c6:d7:36:1d:59:15:
         52:58:6e:38:37:d5:32:22:84:c3:63:05:78:c5:36:94:8b:46:
         61:7c:5b:68:43:67:c0:44:57:eb:5d:0a:f0:dc:0e:63:c5:c4:
         67:94:94:9d:10:14:6a:37:e6:58:70:32:82:06:a7:76:15:02:
         7d:d0:09:ff:3a:a9:19:c8:20:79:b6:c3:e9:d5:2f:fb:5e:1d:
         0f:1e:e9:e9:f6:e8:7d:59:8a:a7:9a:76:71:77:53:a8:2d:ea:
         39:fc:39:96:d7:7b:12:81:38:21:fe:3a:d5:af:b3:70:ff:8f:
         13:22:9d:1b:04:6a:02:9f:92:5d:48:d1:f8:c6:28:26:41:b7:
         e7:32:4b:3e:a8:17:03:32:06:01:1c:fb:5b:d7:a7:3c:0a:8b:
         e5:cf:99:75:e2:9f:34:d9:46:d4:33:29:ef:b0:85:13:24:7d:
         7c:16:df:57:e0:fd:62:4e:37:07:76:43:79:64:6b:d2:5d:6f:
         c3:2e:45:a2:94:43:61:32:f2:24:ea:a4:74:4d:36:d0:8a:94:
         cb:f5:df:76:1b:ea:15:2c:57:d6:e2:a4:b6:cd:dd:bd:84:fd:
         49:49:f9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----