Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/bbbf36ea-d57b-3b54-b03a-29e24e50fa28.roa
File:                     bbbf36ea-d57b-3b54-b03a-29e24e50fa28.roa (raw, json)
Hash identifier:          UZy9A2U6vpbCuJv+A0gJWoiBewTXrzpbLLiWcuIeKW4=
Subject key identifier:   7A:41:E1:56:3B:E2:91:62:FE:70:41:E4:8C:6B:F2:24:10:F1:1F:CB
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F43285840521614AA4A98F876AB985E40
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/bbbf36ea-d57b-3b54-b03a-29e24e50fa28.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 26 Mar 2025 04:00:00 +0000
asID:                     212219
IP address blocks:        104.234.116.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:52:16:14:aa:4a:98:f8:76:ab:98:5e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Mar 26 04:00:00 2025 GMT
        Subject: CN=14812e33-043e-4368-b6aa-1f34aa0101ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:b1:62:f1:30:22:de:e9:3b:d9:23:0a:c1:
                    c7:66:b0:24:e9:05:f7:19:0e:23:66:40:a3:9f:ce:
                    a2:84:51:14:69:a6:88:fc:56:01:56:fa:a2:7b:3b:
                    28:02:1a:3a:11:7c:ef:07:80:cf:23:34:df:5c:96:
                    52:74:2e:51:8b:8d:b1:67:c0:68:91:bf:fd:dc:20:
                    c6:ef:52:f6:87:6d:62:e1:4b:7d:47:44:25:27:1b:
                    85:2e:bd:d1:f5:f6:bd:9f:70:9b:e7:cd:76:01:69:
                    24:1c:50:19:ac:ec:70:f8:64:9f:f1:2e:69:01:b0:
                    e5:26:d5:7c:2e:f1:6d:b7:d6:aa:99:11:56:da:c6:
                    10:38:e6:62:0c:7b:69:e9:89:f1:70:ac:f3:86:dc:
                    e2:06:e5:60:3f:fa:f0:87:00:1a:8e:26:77:83:44:
                    24:7e:d8:ec:fc:bf:25:d2:f9:58:7e:3b:ac:9d:75:
                    e1:6b:4e:fe:88:4c:1a:08:46:39:74:e0:94:b3:9f:
                    08:7d:43:c3:b1:d3:5f:bb:93:53:f3:07:ff:4c:d3:
                    55:6c:df:55:3a:03:a8:27:1e:08:b7:85:2c:32:a2:
                    8b:a2:84:35:3c:51:ae:c5:3e:9c:03:e3:d2:a5:39:
                    1f:fc:86:07:2f:ca:74:70:71:18:ee:c7:78:81:5b:
                    b9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:41:E1:56:3B:E2:91:62:FE:70:41:E4:8C:6B:F2:24:10:F1:1F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/bbbf36ea-d57b-3b54-b03a-29e24e50fa28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:de:4e:70:c8:36:8c:4f:64:83:f0:9c:34:05:3f:d1:51:2b:
         ec:13:5e:bd:d7:37:f1:38:26:53:98:19:c7:56:8c:be:a2:31:
         07:33:0e:67:70:d3:a3:51:96:27:54:be:3b:a1:5e:1f:fc:8e:
         ab:1d:2a:61:05:39:3f:ec:54:4e:ab:6a:9b:b4:c1:23:5a:98:
         19:25:7b:ba:70:c8:e0:7a:9f:5a:a3:ad:df:0d:a0:ef:37:dd:
         b3:3d:59:0c:62:04:ab:1b:8f:cc:22:18:12:1f:35:64:de:36:
         f3:b6:6b:f2:47:73:a4:52:62:f4:a2:53:32:36:cb:99:b0:e6:
         54:fe:65:f4:2c:36:42:61:dc:d1:b0:a9:1c:4f:e0:c4:43:b5:
         c7:58:83:30:b4:f5:5f:82:03:32:16:a8:c5:a7:3c:1f:77:d7:
         29:56:61:0e:ab:76:bf:97:bc:ee:4f:24:cd:be:06:c2:19:78:
         7e:4b:aa:ce:62:9e:6c:00:0a:42:c6:3c:a2:43:94:ec:22:92:
         f0:fd:cd:45:fa:59:84:05:00:be:fd:0f:fb:7f:78:e9:75:86:
         ad:66:19:27:be:a7:d3:23:30:05:a0:55:8c:56:a4:00:da:33:
         9d:73:7f:77:1c:2b:51:5e:09:70:ff:4a:71:16:79:23:65:9c:
         db:f7:c7:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEBSFhSqSpj4dquYXkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2ZjZkYmQtNWExZi00OGIxLWFjN2EtN2I3YzAzNmM3
MGYwMB4XDTIxMTIxMzE1MTgwMFoXDTI1MDMyNjA0MDAwMFowLzEtMCsGA1UEAxMk
MTQ4MTJlMzMtMDQzZS00MzY4LWI2YWEtMWYzNGFhMDEwMWNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqT2xYvEwIt7pO9kjCsHHZrAk6QX3GQ4jZkCj
n86ihFEUaaaI/FYBVvqiezsoAho6EXzvB4DPIzTfXJZSdC5Ri42xZ8Bokb/93CDG
71L2h21i4Ut9R0QlJxuFLr3R9fa9n3Cb5812AWkkHFAZrOxw+GSf8S5pAbDlJtV8
LvFtt9aqmRFW2sYQOOZiDHtp6YnxcKzzhtziBuVgP/rwhwAajiZ3g0Qkftjs/L8l
0vlYfjusnXXha07+iEwaCEY5dOCUs58IfUPDsdNfu5NT8wf/TNNVbN9VOgOoJx4I
t4UsMqKLooQ1PFGuxT6cA+PSpTkf/IYHL8p0cHEY7sd4gVu5OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHpB4VY74pFi/nBB5Ixr8iQQ8R/LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZm
NmRiZC01YTFmLTQ4YjEtYWM3YS03YjdjMDM2YzcwZjAvYmJiZjM2ZWEtZDU3Yi0z
YjU0LWIwM2EtMjllMjRlNTBmYTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmY2ZjZkYmQtNWExZi00OGIxLWFj
N2EtN2I3YzAzNmM3MGYwL2ZmNmY2ZGJkLTVhMWYtNDhiMS1hYzdhLTdiN2MwMzZj
NzBmMC5jcmwwHwYDVR0jBBgwFoAUtiZZXutxL1WTpJ9RO8h8b3R0PQUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZmNmRiZC01YTFmLTQ4YjEtYWM3YS03Yjdj
MDM2YzcwZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOp0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3eTnDINoxPZIPwnDQFP9FRK+wTXr3XN/E4JlOYGcdWjL6iMQczDmdw
06NRlidUvjuhXh/8jqsdKmEFOT/sVE6rapu0wSNamBkle7pwyOB6n1qjrd8NoO83
3bM9WQxiBKsbj8wiGBIfNWTeNvO2a/JHc6RSYvSiUzI2y5mw5lT+ZfQsNkJh3NGw
qRxP4MRDtcdYgzC09V+CAzIWqMWnPB931ylWYQ6rdr+XvO5PJM2+BsIZeH5Lqs5i
nmwACkLGPKJDlOwikvD9zUX6WYQFAL79D/t/eOl1hq1mGSe+p9MjMAWgVYxWpADa
M51zf3ccK1FeCXD/SnEWeSNlnNv3x5s=
-----END CERTIFICATE-----