Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/b486750f-8017-335b-8dd1-2272f65e72ac.roa
File:                     b486750f-8017-335b-8dd1-2272f65e72ac.roa (raw, json)
Hash identifier:          zlpryMNBwjGCJ5/lVyX7Mcu2Cz5H7AAsRdtgx7XurlE=
Subject key identifier:   EB:23:FA:63:8F:E7:97:A0:3B:42:52:17:E8:11:3D:60:33:87:3D:59
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583FC06C9A00F49C062FF336FA40
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/b486750f-8017-335b-8dd1-2272f65e72ac.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     397270
IP address blocks:        104.234.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:c0:6c:9a:00:f4:9c:06:2f:f3:36:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=d27cc2ff-a5fc-4140-96dd-afc1453061f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:33:ec:d4:9a:a0:f1:40:18:16:df:01:d2:88:
                    09:58:85:26:83:e8:10:47:d3:52:64:8f:83:09:3d:
                    0c:34:15:fe:15:ee:d4:c3:c0:1c:e6:d5:94:ad:9f:
                    f8:50:5e:bd:72:00:4c:72:c8:69:56:3e:8b:8f:1f:
                    07:fa:ef:9b:89:fd:cd:25:fd:03:82:19:13:45:66:
                    03:25:5e:48:7a:26:7c:60:32:72:4d:0b:79:f9:c9:
                    a8:8f:83:a7:fa:8d:02:5a:11:19:6f:c3:bf:72:00:
                    3c:18:80:99:57:da:44:a7:21:96:86:44:93:d4:a5:
                    56:01:f9:d5:82:8a:ee:eb:d8:a4:93:a6:43:86:aa:
                    9e:6f:b4:bb:5c:55:57:3b:ef:e6:39:2f:15:97:78:
                    f5:73:fd:14:3d:8f:6b:75:26:99:ed:1b:b8:74:f3:
                    2d:10:56:c1:13:92:f9:70:5a:07:2d:5f:46:cf:74:
                    c8:fd:4e:d0:cd:42:42:58:ea:28:a2:d2:65:ef:07:
                    5a:3c:e3:b0:d7:f8:41:c9:d0:64:6a:f4:0f:99:2e:
                    d7:c9:2c:02:79:9b:cf:4f:5b:8d:86:84:a4:62:83:
                    d5:f9:54:bb:38:b1:d8:fd:c2:de:78:d5:e1:fa:48:
                    97:c1:24:d3:9b:6c:d8:3f:62:1a:83:47:63:37:78:
                    a3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:23:FA:63:8F:E7:97:A0:3B:42:52:17:E8:11:3D:60:33:87:3D:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/b486750f-8017-335b-8dd1-2272f65e72ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:12:b8:41:d6:34:d5:76:2a:30:f3:18:a4:b3:3a:cc:2b:e0:
         26:5b:a4:b1:b2:a8:f0:e9:56:70:07:a2:3a:99:93:1b:eb:0e:
         c0:6a:50:9c:b3:6b:36:d6:e2:f8:00:b8:1c:a0:a1:c9:b9:c3:
         46:29:40:ec:87:64:3d:62:42:4c:4b:43:a2:5d:69:b7:96:72:
         56:59:fe:ea:cf:0c:b1:21:5a:c7:67:72:dd:84:29:cd:42:58:
         6d:83:ba:7b:c2:7d:10:e3:f4:5f:cf:b8:8a:53:75:e7:d4:bd:
         d3:9a:ed:03:c0:4e:8d:ff:f0:fd:75:f2:eb:30:d2:3e:06:ec:
         a5:ef:15:a5:7c:9b:0d:b4:7e:f2:d9:43:36:52:c4:26:35:21:
         b9:48:8b:d0:95:98:d3:b8:0d:83:96:b4:8a:a1:16:e4:c4:ee:
         87:6c:10:fb:a1:c6:32:24:9b:4c:1c:69:ad:46:ea:ca:f1:31:
         e8:d2:4b:42:1d:6f:2d:e3:8d:e7:1e:53:37:b0:26:5e:6a:c1:
         09:7c:4f:fb:d3:e7:f9:31:48:73:62:9d:c8:be:63:65:04:9c:
         d0:73:2d:21:d1:e8:14:29:c3:95:31:ae:11:00:36:c1:ea:2d:
         c7:d0:ba:21:e1:f7:de:58:d9:08:0e:38:06:ef:7c:d5:25:6f:
         bc:96:12:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----