Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/cea32bbf-36b2-31fd-80d4-e855e933a83c.roa
File:                     cea32bbf-36b2-31fd-80d4-e855e933a83c.roa (raw, json)
Hash identifier:          N81kx1/LdmMxVjEBKujP6cCQg4guAqm1XsNjsY6zlXc=
Subject key identifier:   7A:E6:26:0E:36:6F:07:B2:2D:C0:10:28:64:FE:E4:5C:49:BC:8F:49
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583F8BEAE9F23DD7362336221800
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/cea32bbf-36b2-31fd-80d4-e855e933a83c.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     60721
IP address blocks:        104.234.121.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:8b:ea:e9:f2:3d:d7:36:23:36:22:18:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=7c05cf05-d21e-47df-be95-0cbf17938f1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:f2:6c:d6:5b:45:fd:94:20:c4:63:73:da:43:
                    41:20:40:cb:ae:0d:3e:1e:4b:7d:cc:15:69:c5:7a:
                    8c:10:43:f5:17:53:fe:50:1a:d7:44:0a:7e:cc:ec:
                    42:34:ba:dc:b9:7e:d4:1c:25:b2:e0:f0:ce:47:47:
                    be:3c:ce:a5:66:75:5e:ad:0a:fa:9a:8b:d0:b2:63:
                    21:98:48:e4:99:40:a4:9f:c8:a0:6a:b1:10:1f:f7:
                    3c:69:38:e6:48:48:fc:d3:92:2b:5d:b7:14:05:ad:
                    2f:ca:05:bf:9b:40:ca:19:fe:39:59:4a:0c:85:ec:
                    b9:5a:a8:0a:97:d7:e7:c3:bc:32:3c:49:83:aa:c3:
                    97:29:15:a5:d9:49:81:ec:80:2a:9c:81:89:e3:59:
                    f6:05:79:65:0d:6a:5f:22:6a:35:93:9d:73:ec:3a:
                    a2:67:c7:6d:63:8f:93:49:2b:77:8a:15:3e:b2:bf:
                    89:8b:2f:c3:89:6e:6f:89:11:b5:bf:c7:ec:d6:48:
                    23:ca:af:2d:5d:6c:1f:0f:63:e3:14:5e:73:e0:cd:
                    4c:37:e8:c5:93:04:7e:9b:10:71:cf:44:db:9e:b6:
                    34:cc:7b:d4:e4:d4:86:f3:29:d6:72:09:f6:3c:cc:
                    31:e5:07:ad:c5:35:b1:58:ec:09:4c:8d:31:3b:1e:
                    2a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E6:26:0E:36:6F:07:B2:2D:C0:10:28:64:FE:E4:5C:49:BC:8F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/cea32bbf-36b2-31fd-80d4-e855e933a83c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:8d:1f:ad:f9:b1:8c:ec:fe:04:bc:3f:e5:0e:70:db:e9:bb:
         ac:cd:8d:02:48:6b:82:fe:3e:22:a5:86:1e:c1:a8:00:51:2b:
         f2:b3:24:d9:d4:67:b1:60:c3:82:59:c6:f1:17:5b:cf:19:09:
         bf:09:dd:a7:af:8f:bf:59:11:f7:0f:b2:ff:fd:1b:6c:8d:05:
         d6:9c:ec:aa:b9:0c:d9:2f:b0:f9:cd:68:a3:82:e6:59:13:61:
         bd:80:c6:0e:54:ee:52:c6:af:b3:c6:ea:e3:cb:f9:bd:35:d8:
         3c:39:91:2f:0a:86:ef:fe:32:e2:83:7f:8f:ec:06:99:fb:8a:
         ed:e0:fe:aa:38:4b:37:0b:7a:e1:ca:11:00:bb:83:8f:d8:38:
         eb:26:b8:e2:55:e9:1c:5c:f2:ea:f6:70:fe:da:0e:ce:c3:f8:
         2b:62:f9:25:63:cd:d4:87:ca:98:13:9b:1f:29:bd:da:63:b8:
         4e:12:85:87:8d:1b:17:74:9c:87:b6:e5:1d:36:22:5e:f4:ab:
         64:5f:89:c8:58:2e:1e:2d:1a:7d:01:a9:31:14:86:32:39:33:
         11:65:1a:1a:10:ab:ee:5f:d2:8b:33:21:b2:68:44:86:af:95:
         8d:a3:71:1e:bc:d2:2c:cb:63:89:00:39:ae:8a:0e:2b:38:3c:
         e5:d7:9c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----