Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/d2f1b503-3726-3ad9-9c7c-80b7913f5882.roa
File:                     d2f1b503-3726-3ad9-9c7c-80b7913f5882.roa (raw, json)
Hash identifier:          wHKqnypd/AVm0xcZeappY9z8JPvNcD1LxY/2MvStNL4=
Subject key identifier:   69:B8:BA:D6:9D:5D:39:08:E8:9A:D7:82:E1:60:BE:32:09:2C:3D:7C
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F432858400410139106A3693448857700
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/d2f1b503-3726-3ad9-9c7c-80b7913f5882.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     212219
IP address blocks:        104.234.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:04:10:13:91:06:a3:69:34:48:85:77:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=9b7fd7b6-297b-45d4-a466-eceea6840199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:03:0a:39:fb:65:fe:52:f6:ba:c9:93:7c:85:
                    90:d2:c8:52:21:bd:ad:4b:e1:62:9a:44:a2:9e:53:
                    bb:2d:17:fd:e8:b6:18:5f:db:67:37:5f:3a:ef:10:
                    ce:12:0f:c2:0d:cd:d6:1e:d1:be:41:6e:47:28:bd:
                    c3:ed:08:8a:2c:a6:c9:ff:3d:fc:1d:62:e1:79:d0:
                    e8:73:f9:91:d2:62:90:14:8a:62:6e:aa:4b:4d:e3:
                    69:29:04:24:7f:ac:0b:47:8e:a4:62:bc:ad:60:28:
                    81:a0:59:7b:de:ee:7b:f0:a1:07:c6:6a:ef:9f:67:
                    bb:f4:58:be:e7:5c:a6:aa:77:91:aa:7d:58:fc:a8:
                    21:00:19:ba:1e:56:b6:fc:11:09:01:67:4f:4c:8d:
                    26:3b:a7:0c:80:6c:8e:47:fa:d3:59:11:49:8b:b1:
                    2b:e8:af:01:23:7c:92:21:9d:14:ff:7f:94:28:df:
                    55:2d:f8:6e:e0:ee:3e:50:72:33:67:ec:93:6c:ff:
                    bc:c3:07:76:63:6a:7b:aa:be:55:2a:07:1a:20:1f:
                    08:dc:39:99:88:83:a4:83:7f:0c:1c:da:52:b0:4c:
                    59:6c:c9:cb:b9:79:7f:65:48:f0:6f:1d:25:aa:12:
                    a7:44:f5:97:62:d2:e5:2c:7e:6a:c5:f7:a4:95:aa:
                    27:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B8:BA:D6:9D:5D:39:08:E8:9A:D7:82:E1:60:BE:32:09:2C:3D:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/d2f1b503-3726-3ad9-9c7c-80b7913f5882.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.47.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:6b:42:70:94:5f:83:aa:a0:25:df:bf:6b:eb:0a:e0:13:64:
         b2:c9:28:a6:e4:1b:79:0f:8e:05:05:f9:7a:27:c6:56:82:b9:
         35:ee:e7:f8:5b:cc:1b:99:23:71:24:1c:1f:dd:16:3d:55:e2:
         a0:f1:8b:88:2d:23:20:6e:54:03:f1:20:9b:55:a8:75:7d:83:
         ce:d6:97:13:2d:b3:70:65:c7:ec:0c:10:52:ba:94:f9:d8:61:
         f5:56:c1:0e:97:ba:60:22:c8:24:82:47:1c:35:e8:03:81:51:
         84:93:32:5e:0a:a6:96:9b:61:73:a5:b5:c9:38:35:c8:c6:b6:
         85:a6:97:a5:cc:ce:4a:7a:42:a2:06:27:3b:8a:8b:40:95:07:
         cd:e8:29:5b:7c:80:2c:05:35:df:33:94:6d:9e:b2:a8:8c:2d:
         3b:44:5b:92:37:f1:ed:4c:5f:1d:d4:66:3c:2b:c9:3f:c8:81:
         16:2a:28:b0:29:3f:cb:8d:8c:a6:a8:a2:dc:f6:3d:4c:95:9b:
         6a:78:5d:f7:16:d9:ea:08:f6:be:ca:3a:1d:b4:ac:67:ed:a8:
         4e:89:07:d5:7a:37:5c:a8:94:97:3b:33:98:aa:11:f9:86:0d:
         d4:20:8f:b5:ac:21:24:ad:76:22:6e:6a:57:66:f0:4b:56:50:
         1c:08:87:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----