Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ef22d2ae-7a45-3e11-b165-6d37fbedd8a2.roa
File:                     ef22d2ae-7a45-3e11-b165-6d37fbedd8a2.roa (raw, json)
Hash identifier:          1rjCpYh7oAt4cqeP4vjKCld9Hd5wh5BwtVWzCKFfkPI=
Subject key identifier:   45:78:0F:99:56:B8:9F:CE:57:80:F0:BB:6E:6C:07:79:CC:17:3B:C1
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F432858400A9E498098B55B2657412500
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ef22d2ae-7a45-3e11-b165-6d37fbedd8a2.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Fri 28 Feb 2025 05:00:00 +0000
asID:                     29802
IP address blocks:        104.234.239.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:0a:9e:49:80:98:b5:5b:26:57:41:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Feb 28 05:00:00 2025 GMT
        Subject: CN=3a9f0f01-ea27-4cb6-9904-bef927425b43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fc:d5:6b:63:89:88:5f:37:00:95:6c:d3:66:
                    22:fd:86:6c:32:cf:c2:75:6e:5b:de:54:d6:97:ea:
                    01:d1:bd:dd:94:43:08:79:a3:37:a6:64:67:35:5b:
                    9d:ea:e5:18:55:c9:e0:03:eb:26:28:9c:e8:9c:c4:
                    bd:be:15:93:86:d0:27:c5:0e:3e:d3:58:89:5d:40:
                    a8:f9:ab:03:35:1e:17:dc:ec:d1:6b:4c:7f:b1:5f:
                    9b:7b:c0:9e:00:95:bc:2b:49:fb:fc:e1:b5:76:5f:
                    92:61:fd:52:b6:ed:eb:1f:b6:a5:08:bc:57:92:e5:
                    0b:f8:a0:84:02:b1:31:25:f7:3f:5c:0f:68:07:15:
                    bb:d5:36:1a:c8:57:98:44:1c:f8:35:d1:00:d7:8d:
                    d3:b2:0c:15:0f:50:a8:03:df:f4:88:7c:25:c7:bd:
                    32:9c:74:db:91:12:ce:88:24:6f:dc:67:f0:b7:08:
                    1a:08:f2:ed:cc:e6:98:d1:ad:72:77:29:24:0a:2e:
                    a0:15:49:12:5d:c2:da:06:41:dc:28:df:6d:8f:89:
                    34:09:5a:d8:79:c1:60:77:94:de:6c:17:ea:61:4f:
                    ab:3d:b7:67:da:c3:5f:07:2e:1a:21:2d:a4:cc:59:
                    12:e9:99:27:ce:3f:60:95:b6:f4:1f:51:4c:6b:e2:
                    b7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:78:0F:99:56:B8:9F:CE:57:80:F0:BB:6E:6C:07:79:CC:17:3B:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ef22d2ae-7a45-3e11-b165-6d37fbedd8a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.239.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:7b:22:e9:93:ee:2e:79:19:4e:c8:37:bc:e7:dc:cb:e9:2b:
         da:d6:90:a0:82:3e:20:52:00:81:da:8b:2b:fb:6e:96:9b:fe:
         20:da:1c:44:be:7c:46:01:c3:80:25:73:9b:2a:26:8b:b0:3d:
         4a:c9:f9:e6:02:88:79:0b:90:6e:9e:98:2e:06:85:98:2f:06:
         b7:09:ac:70:94:63:e5:ab:98:fe:d8:6e:e2:e5:69:ce:8c:1a:
         17:24:68:24:30:3e:e2:28:6e:fa:56:53:fe:51:e4:f6:44:3d:
         de:af:19:ff:c3:e1:9c:2d:2e:e4:57:5d:42:f1:74:91:54:ec:
         ea:14:66:51:63:f5:e9:d2:54:ed:f2:6d:ff:97:37:67:92:eb:
         79:9c:2e:dc:d4:91:24:73:6f:f7:c8:55:87:77:72:c7:b7:1b:
         77:b1:d1:53:8d:28:ce:53:78:2d:01:45:4e:89:d6:cf:55:f5:
         8e:d3:b7:43:fa:11:c8:e5:58:71:3f:d3:b1:a2:37:d0:2b:16:
         46:ad:1f:11:9c:c6:22:dc:85:7e:cb:13:95:f8:8b:81:7b:5c:
         36:d0:6c:2b:7e:4d:df:d1:2d:24:bc:16:f5:9c:fa:93:61:d6:
         58:d8:90:6d:0a:0a:7f:c1:48:50:80:39:9e:c5:22:40:61:5f:
         f7:10:fa:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----