Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/e4ad76d7-aef9-3f80-a0a7-698a673630d0.roa
File:                     e4ad76d7-aef9-3f80-a0a7-698a673630d0.roa (raw, json)
Hash identifier:          5b0I0p9yzAKcuE9zn+qi2oMplWEMgQJWJuMUg1UepSg=
Subject key identifier:   40:61:0A:81:B6:28:D1:83:3D:58:7F:16:2D:5E:F7:73:07:28:23:89
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583FEB26A9F00551F8381B952A80
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/e4ad76d7-aef9-3f80-a0a7-698a673630d0.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     207279
IP address blocks:        104.234.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:eb:26:a9:f0:05:51:f8:38:1b:95:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=2e430af1-5e55-4a39-943e-6969bb3ebb25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:4e:19:36:28:8c:84:4b:0a:f8:45:ed:be:cc:
                    41:54:19:1b:58:c3:be:e0:a5:f7:42:1b:15:c6:28:
                    80:92:08:25:aa:56:a4:c3:0f:b1:da:1f:fe:25:c9:
                    6f:81:14:b3:dd:63:e5:44:e0:64:22:57:c0:bc:46:
                    56:75:6d:c9:77:45:cb:1d:97:ec:4a:33:ad:f1:05:
                    35:ad:55:bf:af:19:3e:50:0a:4c:a3:89:41:18:80:
                    75:96:e9:1b:f9:5e:e3:8d:51:4e:53:60:c3:5c:f3:
                    8e:cc:06:ec:c5:7d:57:ff:63:7c:14:7f:05:19:d5:
                    fc:64:35:33:65:b0:59:51:cf:28:0c:f0:e2:7d:e9:
                    b0:fb:9a:f3:82:8b:68:bd:b1:01:cd:70:70:26:fc:
                    a2:dc:6e:65:a1:15:73:26:46:ca:97:cc:6c:cc:cf:
                    39:31:14:99:1a:6b:df:e4:dd:ca:c1:a5:7d:c6:02:
                    c5:41:c6:56:0d:1e:ef:cf:fe:eb:0b:34:a3:ef:c3:
                    3c:3c:b4:dd:5b:57:0c:71:44:3e:22:61:dd:6f:27:
                    e8:d9:95:21:97:a0:ee:dc:e3:b7:87:4b:f3:d7:cc:
                    9c:13:63:9c:72:78:b2:5c:de:83:26:70:04:08:70:
                    98:21:0f:23:3b:39:09:5f:e2:92:dd:62:0f:04:5e:
                    68:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:61:0A:81:B6:28:D1:83:3D:58:7F:16:2D:5E:F7:73:07:28:23:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/e4ad76d7-aef9-3f80-a0a7-698a673630d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:ad:cc:7f:38:91:db:0f:98:da:3d:2d:3d:dc:b5:f9:15:02:
         93:f9:5e:8e:47:d0:4d:a2:83:94:97:b9:dc:7f:81:a5:af:4f:
         99:71:1b:62:65:82:4a:bc:c1:4a:88:62:25:e2:30:db:c9:a8:
         b4:19:42:6c:e6:73:ed:e1:e8:70:ee:c8:d8:9f:6b:6b:ec:97:
         e5:9d:7a:ba:54:62:ef:03:3d:ba:e6:98:69:fe:eb:cd:b2:58:
         3c:25:59:34:a3:e4:24:36:71:80:ce:3b:bc:91:81:ac:08:ef:
         19:b6:81:a1:0e:99:94:64:35:9c:99:77:36:8a:39:d3:1d:1b:
         12:1b:a4:20:67:3b:f5:99:94:95:2d:fb:8a:fe:29:0b:b2:b7:
         99:de:97:4d:5d:38:7b:b2:d2:74:3d:81:8a:1f:0d:ae:a6:5e:
         55:46:64:56:6b:d6:5d:f0:12:fc:23:66:d1:a1:78:70:36:d1:
         8a:53:ac:f1:2e:28:76:2d:f7:22:9c:3a:d6:ac:6e:15:17:fe:
         0d:fc:0d:61:77:f2:d6:68:47:bb:c5:73:f5:0b:f5:b4:95:ef:
         66:ee:f4:2c:5e:a2:6b:d5:5e:ca:36:3e:35:44:f2:92:01:7f:
         08:b7:c0:e6:f9:62:db:e5:e7:95:a8:04:64:4e:79:dc:c2:59:
         cc:47:6f:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD/rJqnwBVH4OBuVKoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2ZjZkYmQtNWExZi00OGIxLWFjN2EtN2I3YzAzNmM3
MGYwMB4XDTIxMTIxMzE1MTgwMFoXDTI0MDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
MmU0MzBhZjEtNWU1NS00YTM5LTk0M2UtNjk2OWJiM2ViYjI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiE4ZNiiMhEsK+EXtvsxBVBkbWMO+4KX3QhsV
xiiAkgglqlakww+x2h/+JclvgRSz3WPlROBkIlfAvEZWdW3Jd0XLHZfsSjOt8QU1
rVW/rxk+UApMo4lBGIB1lukb+V7jjVFOU2DDXPOOzAbsxX1X/2N8FH8FGdX8ZDUz
ZbBZUc8oDPDifemw+5rzgotovbEBzXBwJvyi3G5loRVzJkbKl8xszM85MRSZGmvf
5N3KwaV9xgLFQcZWDR7vz/7rCzSj78M8PLTdW1cMcUQ+ImHdbyfo2ZUhl6Du3OO3
h0vz18ycE2OccniyXN6DJnAECHCYIQ8jOzkJX+KS3WIPBF5onwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEBhCoG2KNGDPVh/Fi1e93MHKCOJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZm
NmRiZC01YTFmLTQ4YjEtYWM3YS03YjdjMDM2YzcwZjAvZTRhZDc2ZDctYWVmOS0z
ZjgwLWEwYTctNjk4YTY3MzYzMGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmY2ZjZkYmQtNWExZi00OGIxLWFj
N2EtN2I3YzAzNmM3MGYwL2ZmNmY2ZGJkLTVhMWYtNDhiMS1hYzdhLTdiN2MwMzZj
NzBmMC5jcmwwHwYDVR0jBBgwFoAUtiZZXutxL1WTpJ9RO8h8b3R0PQUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZmNmRiZC01YTFmLTQ4YjEtYWM3YS03Yjdj
MDM2YzcwZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOrxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF+tzH84kdsPmNo9LT3ctfkVApP5Xo5H0E2ig5SXudx/gaWvT5lxG2Jl
gkq8wUqIYiXiMNvJqLQZQmzmc+3h6HDuyNifa2vsl+WderpUYu8DPbrmmGn+682y
WDwlWTSj5CQ2cYDOO7yRgawI7xm2gaEOmZRkNZyZdzaKOdMdGxIbpCBnO/WZlJUt
+4r+KQuyt5nel01dOHuy0nQ9gYofDa6mXlVGZFZr1l3wEvwjZtGheHA20YpTrPEu
KHYt9yKcOtasbhUX/g38DWF38tZoR7vFc/UL9bSV72bu9CxeomvVXso2PjVE8pIB
fwi3wOb5Ytvl55WoBGROedzCWcxHb5s=
-----END CERTIFICATE-----