Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/bc223f6c-b6a2-3f49-8151-a4fbb5f7643e.roa
File:                     bc223f6c-b6a2-3f49-8151-a4fbb5f7643e.roa (raw, json)
Hash identifier:          z1gxOKDqdtNvaAz8bWqR710Aq/27d6lutjJ37VchGqc=
Subject key identifier:   53:78:E3:48:31:3A:88:0C:E9:76:FC:14:58:D6:66:C0:3B:70:35:92
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328584047A3D1083668027CCAC27080
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/bc223f6c-b6a2-3f49-8151-a4fbb5f7643e.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Sat 22 Mar 2025 04:00:00 +0000
asID:                     17447
IP address blocks:        104.234.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:47:a3:d1:08:36:68:02:7c:ca:c2:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Mar 22 04:00:00 2025 GMT
        Subject: CN=e1abcf05-9020-4989-9f56-77b51bf0abef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ca:d0:e0:85:e0:bc:d4:91:e0:be:6e:f9:6a:
                    2c:c7:f1:91:9f:eb:07:17:83:47:c4:ad:08:ac:07:
                    76:0e:69:92:42:ed:28:ad:24:11:e9:24:ac:b6:00:
                    6b:e6:38:a2:02:ea:53:ad:f1:ad:b5:83:f7:a9:78:
                    57:ef:54:a3:bf:b6:2a:09:dc:44:b8:41:04:8e:70:
                    10:aa:5a:2e:b0:ba:ae:2d:3b:9d:94:a0:ca:95:6c:
                    77:ea:8d:a9:a9:a6:37:62:f9:b1:14:09:e5:4c:fb:
                    bc:29:d7:6b:95:55:65:9f:44:da:80:83:37:99:5f:
                    a3:54:47:ec:c9:d9:0c:e2:25:ba:d1:6f:e8:f3:45:
                    db:10:c8:ac:33:9d:19:c9:ee:1f:fd:b8:b6:4f:42:
                    09:07:cc:45:cd:07:57:59:d9:b0:ad:88:d6:87:e1:
                    cc:cb:a4:5d:7e:29:ca:b5:94:ef:5c:63:e6:57:aa:
                    21:f7:07:0e:9b:a9:ce:d3:2c:2c:e1:ea:c6:33:af:
                    cd:a4:a3:a0:86:33:67:70:0b:f7:fe:0a:15:97:f8:
                    d2:0b:21:68:61:27:7b:a6:9b:9d:aa:66:53:99:3d:
                    92:7f:50:e5:43:88:df:ef:e1:b0:e9:4d:6b:86:d9:
                    bd:56:ba:d8:2c:57:46:51:1c:67:88:99:14:a5:e2:
                    c8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:78:E3:48:31:3A:88:0C:E9:76:FC:14:58:D6:66:C0:3B:70:35:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/bc223f6c-b6a2-3f49-8151-a4fbb5f7643e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:b7:9a:f3:45:76:70:69:97:68:c5:a0:6f:ab:9b:95:74:74:
         56:ba:38:d1:10:da:0e:83:e1:8d:0a:cf:98:eb:e2:7b:5a:09:
         2c:ce:40:4e:23:b1:cd:15:3d:90:c9:5e:d8:34:18:c0:fd:6e:
         3c:eb:8c:e4:41:7b:33:69:bc:67:69:11:39:2e:c0:b3:69:12:
         f9:a7:03:c7:f0:25:cc:e0:52:69:a5:7a:f4:54:74:4d:58:33:
         f2:25:72:da:25:32:f2:60:2f:6b:2f:2d:69:1c:fb:58:dc:53:
         3c:2e:40:86:47:aa:10:e6:06:80:6a:b3:c9:38:7f:60:eb:87:
         6d:a4:a0:ec:73:bd:63:f5:43:df:3c:39:4f:1f:d2:75:b0:05:
         88:70:5d:d0:92:32:78:d9:19:31:61:b6:78:6a:e5:15:f3:95:
         75:29:03:37:3b:30:eb:8c:14:36:0a:e6:43:72:31:4a:db:8e:
         dc:46:cf:c7:4d:95:b8:50:07:02:a7:83:7c:5f:46:78:6f:de:
         6b:c4:66:31:2b:85:7e:d0:2c:80:12:05:f7:83:bb:3e:3e:c4:
         67:21:70:e5:69:65:23:74:62:5b:8a:fe:cc:2f:69:57:26:33:
         e8:6f:2b:9f:8a:95:31:2d:46:85:1d:83:80:00:a4:d7:12:b6:
         fc:28:4b:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----