Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/b22f33df-3430-3317-a029-2854bd7de3f6.roa
File:                     b22f33df-3430-3317-a029-2854bd7de3f6.roa (raw, json)
Hash identifier:          uLEZh0lu0BOUCMJfmyIMuVYs5YAUG1P025unL/MTOHw=
Subject key identifier:   11:E8:84:E7:F6:2B:99:62:05:FC:CC:00:05:84:78:57:7F:75:40:16
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583FC06B7D33A2F600C9B30A4580
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/b22f33df-3430-3317-a029-2854bd7de3f6.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     40676
IP address blocks:        104.234.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c0:6b:7d:33:a2:f6:00:c9:b3:0a:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=9d213d16-7743-4fc2-b717-b57d55abf713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9a:9d:b0:cc:89:44:c5:11:9b:4b:20:15:f6:
                    cf:c7:08:bc:6a:17:67:ce:58:5d:aa:49:79:43:8e:
                    f2:da:ca:e7:ed:02:69:e7:87:41:d0:7c:c9:af:11:
                    c9:66:e2:84:d1:fa:de:ef:dc:d3:b5:fe:d2:c7:97:
                    96:f1:cd:bd:41:01:37:2e:d4:e1:71:08:d4:e2:35:
                    bd:2a:47:ae:47:7b:67:5c:a7:b7:13:b8:f4:46:89:
                    83:e3:b5:54:94:19:ea:ab:46:31:b4:85:90:9d:12:
                    0b:8f:4f:bb:9a:df:5a:fc:af:7b:12:ea:b9:7d:c6:
                    27:29:42:92:3f:7b:e0:e1:73:2c:66:59:41:fd:fb:
                    e9:c7:2b:c8:01:45:f7:83:47:d6:be:1d:41:57:2b:
                    87:5c:8d:3f:98:bf:62:5a:5a:f2:ff:f3:33:1f:fb:
                    30:38:61:5f:84:d3:81:bc:f1:52:36:2a:c0:16:3a:
                    b1:6c:05:05:d2:84:a2:5e:e8:f5:19:16:52:1d:36:
                    49:ea:42:ac:42:59:8f:64:65:96:d8:8f:aa:67:92:
                    12:02:1d:0c:3e:8b:a6:a1:d0:ef:14:e6:0d:eb:23:
                    9c:b7:d0:27:62:3c:65:43:5e:21:ae:3e:29:34:aa:
                    3f:fb:71:a2:04:47:a4:c7:a5:6c:b7:f1:e9:f6:45:
                    c2:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:E8:84:E7:F6:2B:99:62:05:FC:CC:00:05:84:78:57:7F:75:40:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/b22f33df-3430-3317-a029-2854bd7de3f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:8c:ce:49:bf:8c:6f:65:f7:8a:a2:b4:4a:a6:8a:f8:d8:c6:
         4b:ec:24:8f:b5:54:bf:ba:07:80:86:e5:e6:1f:f2:dd:55:46:
         64:45:05:6d:59:a9:a1:d7:f8:2f:40:28:7e:fc:3d:34:48:70:
         a8:bc:29:0a:a0:4e:8c:d6:a3:5a:5c:51:78:3e:16:2e:a9:98:
         74:17:15:51:b1:f4:76:cc:18:f7:1e:86:93:fa:55:61:6a:2d:
         9e:d4:db:ad:80:ca:56:8b:03:67:a0:7e:d2:5f:41:c6:56:da:
         53:af:a4:02:fd:56:e1:8a:7d:df:a6:c7:7b:2e:56:81:d8:d6:
         a5:98:8f:02:fc:8e:74:f3:8a:05:ab:61:2e:39:c7:26:89:cf:
         f9:00:a2:df:dd:f7:4c:9a:b0:68:47:71:38:b8:14:63:48:31:
         5a:b6:97:fe:82:b5:34:5c:61:da:d4:cf:14:b1:2c:bf:1d:6c:
         70:1c:2c:73:6c:8d:70:c8:4b:ec:52:b5:ac:96:e1:a3:39:95:
         5c:e7:4e:4f:59:3a:71:43:ba:43:be:7c:d9:63:64:b2:89:66:
         ab:f9:72:31:43:fc:ea:6f:71:52:20:f9:ec:03:4f:37:fb:8a:
         b9:0b:52:85:12:c9:c2:62:78:aa:f5:8e:76:71:fa:b0:bf:d1:
         92:ae:8a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----