Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/c27e09f4-2da1-33de-bfb1-8bedfd14948c.roa
File:                     c27e09f4-2da1-33de-bfb1-8bedfd14948c.roa (raw, json)
Hash identifier:          +6AI1h7Fpk9PpjIAEHPgo4ZPF5cCGnP0TuXWSgfIApY=
Subject key identifier:   E5:6F:3F:B4:6C:29:46:C3:B6:64:9A:B3:68:AB:0F:86:34:B4:98:E9
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583FB4FBF1B7A25822537E597940
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/c27e09f4-2da1-33de-bfb1-8bedfd14948c.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     1239
IP address blocks:        104.234.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b4:fb:f1:b7:a2:58:22:53:7e:59:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=ed8e6980-529c-4f0f-b9ee-9f1798bedb4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5f:85:f3:34:c6:09:a4:ae:c4:ce:be:39:14:
                    cd:dd:16:dd:6e:19:51:71:69:50:19:ba:95:ef:61:
                    1e:3f:7a:4d:e4:c3:bc:e0:4d:3e:94:2f:58:a1:14:
                    2d:c3:e7:73:08:e0:f5:fb:11:bc:c5:32:c3:3c:ec:
                    66:f9:fb:83:a7:90:b1:d6:bc:f1:23:73:1d:1d:c1:
                    39:06:b2:e0:e6:34:79:a4:17:45:3e:69:c8:fd:76:
                    8d:0a:23:79:ee:3f:54:e2:48:f0:4a:b9:c4:02:3e:
                    c1:5f:ca:7d:06:e9:b1:4a:12:be:1b:e1:b3:99:b9:
                    ef:d7:62:f2:89:c4:87:6b:43:9e:23:dc:26:61:03:
                    ef:81:15:d0:6a:e5:cd:82:25:c1:27:4c:0d:fb:96:
                    c3:5d:4d:c8:75:ca:39:dd:75:9e:60:9f:b1:4b:3c:
                    18:08:e8:7a:95:14:91:95:f4:0a:7b:ec:0a:ea:94:
                    e6:84:9c:60:42:6c:19:c8:ec:eb:7d:e7:d7:75:67:
                    13:46:7e:d1:6f:53:84:45:27:fd:5b:85:b0:c2:e1:
                    b8:04:19:d1:7b:22:b5:7e:23:1d:cf:90:73:f4:04:
                    ad:59:65:e7:b1:04:93:7a:82:f8:8b:7b:77:fd:41:
                    fc:0a:81:7e:12:52:b9:7f:ab:a4:90:93:66:0a:5e:
                    df:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6F:3F:B4:6C:29:46:C3:B6:64:9A:B3:68:AB:0F:86:34:B4:98:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/c27e09f4-2da1-33de-bfb1-8bedfd14948c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:99:2c:99:07:5f:70:a4:03:30:a9:89:eb:25:ff:3f:ca:56:
         91:0f:a8:b7:55:84:da:db:b2:46:4c:95:7c:b8:3b:e4:2e:05:
         b1:d1:6f:c7:70:63:5e:06:39:a8:40:0c:13:4f:4b:cf:1b:00:
         53:c0:b1:48:2e:cf:1d:af:ef:5f:ed:f4:e4:8f:a8:d7:07:10:
         f9:a2:ad:3d:c3:b4:d3:65:55:ad:95:9a:74:1e:90:55:ae:fb:
         b7:f4:b0:67:6f:c9:14:4b:3c:3f:7c:c1:05:c0:de:df:1f:e4:
         11:1e:60:41:f3:7a:c0:e0:d1:31:20:a7:4d:a1:2e:66:83:44:
         47:82:58:25:eb:49:45:2d:8a:c2:e6:7c:ac:af:f5:37:d3:3a:
         00:de:03:9a:23:2a:c6:ce:ad:f8:9b:b2:24:49:60:b7:8c:06:
         66:74:4a:b4:0f:c8:c1:4d:ca:99:25:7e:a3:75:60:a5:75:19:
         44:25:4d:7d:53:e4:e0:f3:d5:92:52:d4:72:81:28:67:47:c3:
         7c:b0:fa:55:23:cf:0e:61:3b:fe:57:57:c2:0d:ef:44:48:30:
         8d:02:4b:52:21:25:76:9a:c0:f5:8c:f7:57:56:08:2b:ec:60:
         f2:f6:02:3a:1d:98:fa:db:58:d4:ca:8c:8b:4d:f4:f0:4d:5b:
         d6:59:22:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----