Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/f872afbc-2526-3bff-bf9c-a28c4ab201fb.roa
File:                     f872afbc-2526-3bff-bf9c-a28c4ab201fb.roa (raw, json)
Hash identifier:          3T1Q5rPuomYAaYZG4z7TQQrdWVdhyvf09gBbo6tun6I=
Subject key identifier:   AB:40:52:38:F1:E9:A7:EB:F5:52:FA:6B:7C:71:87:2F:5F:96:24:2A
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583F2FB1D386323433210250D480
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/f872afbc-2526-3bff-bf9c-a28c4ab201fb.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     19437
IP address blocks:        104.234.4.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:2f:b1:d3:86:32:34:33:21:02:50:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=6afb0a43-3884-46f0-adf9-fc0f365a3b85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2d:51:7f:87:84:bd:1e:2d:07:56:9f:28:62:
                    0c:a4:1b:78:03:46:1f:78:70:65:a4:05:7e:ac:2d:
                    2e:ce:e7:7d:6d:d4:e8:7d:9f:1e:d3:aa:56:c3:a3:
                    51:c8:ce:55:11:01:3a:86:9b:ce:4d:67:6e:a7:a3:
                    87:1f:0a:83:cc:90:c9:14:0a:30:5b:a5:1e:fb:19:
                    5f:c1:61:da:1a:c4:5b:c6:ab:38:9b:69:ff:fd:96:
                    f3:f5:59:45:9c:10:49:37:8c:c3:39:c2:53:6c:e6:
                    cb:47:38:fd:53:cd:03:ea:c4:6a:36:7e:94:57:df:
                    d1:90:ad:38:c6:b3:ec:60:48:38:88:91:d4:04:0d:
                    84:94:a8:91:e8:d2:9a:5b:2b:a2:26:0f:06:7c:22:
                    09:d9:2a:42:30:74:dd:25:18:4d:26:f7:f4:62:e0:
                    10:e3:5c:fe:4b:24:bf:a0:ba:cd:5e:74:7b:5c:75:
                    9f:06:87:f7:d7:51:91:92:98:3a:d2:a7:02:5e:ad:
                    eb:28:e1:e6:20:70:97:34:f2:6a:72:35:56:db:46:
                    b0:87:23:40:56:e6:bb:92:59:52:eb:2d:ef:2e:a7:
                    04:68:a5:0e:dc:34:57:1c:6b:69:87:ff:bd:d7:05:
                    75:da:e2:08:85:ce:79:41:c5:d0:34:a6:6d:6a:41:
                    6c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:40:52:38:F1:E9:A7:EB:F5:52:FA:6B:7C:71:87:2F:5F:96:24:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/f872afbc-2526-3bff-bf9c-a28c4ab201fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.4.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:66:4f:22:82:cb:1e:56:d9:47:cb:71:80:0b:7a:49:4d:54:
         75:d5:01:3c:4a:fc:f4:90:d3:83:4f:49:77:c4:27:9e:e2:a5:
         b5:76:f4:af:6a:b0:c2:3c:76:78:28:0c:da:9f:31:c5:23:3c:
         fe:3b:d3:35:65:ae:7e:cd:b0:cb:74:83:d0:27:dd:d0:f1:6f:
         bc:97:03:08:8d:db:13:bf:c8:35:bb:1c:3c:2f:25:5f:ef:3f:
         40:9c:b4:3d:50:7a:32:d4:16:b3:7f:93:f7:14:7d:94:5b:25:
         65:5d:ee:2f:91:f9:90:f5:12:4e:5a:de:52:c4:34:9a:f7:87:
         e2:9e:9f:c0:5e:96:dd:b7:da:81:0a:c5:07:28:06:57:f0:57:
         c9:7a:46:4b:42:f2:dc:6f:57:fc:ac:a6:53:4e:0e:2e:cf:ea:
         49:c1:93:6c:b8:f7:00:03:84:cc:bf:fe:c8:b0:df:f6:a4:7a:
         8c:ce:ef:55:91:f5:d6:09:b1:1e:66:7b:00:89:b2:7f:95:d1:
         64:96:ba:3c:8b:21:94:bd:a9:4c:1b:39:c6:3d:ee:52:b0:ed:
         bb:62:62:d0:1f:b9:76:82:7f:c3:74:31:5f:0e:d4:d6:db:23:
         05:4e:55:83:e1:bb:e8:c3:8f:21:83:af:71:16:0e:4b:d9:61:
         ad:1c:fa:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD8vsdOGMjQzIQJQ1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2ZjZkYmQtNWExZi00OGIxLWFjN2EtN2I3YzAzNmM3
MGYwMB4XDTIxMTIxMzE1MTgwMFoXDTI0MDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
NmFmYjBhNDMtMzg4NC00NmYwLWFkZjktZmMwZjM2NWEzYjg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhy1Rf4eEvR4tB1afKGIMpBt4A0YfeHBlpAV+
rC0uzud9bdTofZ8e06pWw6NRyM5VEQE6hpvOTWdup6OHHwqDzJDJFAowW6Ue+xlf
wWHaGsRbxqs4m2n//Zbz9VlFnBBJN4zDOcJTbObLRzj9U80D6sRqNn6UV9/RkK04
xrPsYEg4iJHUBA2ElKiR6NKaWyuiJg8GfCIJ2SpCMHTdJRhNJvf0YuAQ41z+SyS/
oLrNXnR7XHWfBof311GRkpg60qcCXq3rKOHmIHCXNPJqcjVW20awhyNAVua7kllS
6y3vLqcEaKUO3DRXHGtph/+91wV12uIIhc55QcXQNKZtakFs4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKtAUjjx6afr9VL6a3xxhy9fliQqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZm
NmRiZC01YTFmLTQ4YjEtYWM3YS03YjdjMDM2YzcwZjAvZjg3MmFmYmMtMjUyNi0z
YmZmLWJmOWMtYTI4YzRhYjIwMWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmY2ZjZkYmQtNWExZi00OGIxLWFj
N2EtN2I3YzAzNmM3MGYwL2ZmNmY2ZGJkLTVhMWYtNDhiMS1hYzdhLTdiN2MwMzZj
NzBmMC5jcmwwHwYDVR0jBBgwFoAUtiZZXutxL1WTpJ9RO8h8b3R0PQUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZmNmRiZC01YTFmLTQ4YjEtYWM3YS03Yjdj
MDM2YzcwZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBaOoEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHpmTyKCyx5W2UfLcYALeklNVHXVATxK/PSQ04NPSXfEJ57ipbV29K9q
sMI8dngoDNqfMcUjPP470zVlrn7NsMt0g9An3dDxb7yXAwiN2xO/yDW7HDwvJV/v
P0CctD1QejLUFrN/k/cUfZRbJWVd7i+R+ZD1Ek5a3lLENJr3h+Ken8Belt232oEK
xQcoBlfwV8l6RktC8txvV/ysplNODi7P6knBk2y49wADhMy//siw3/akeozO71WR
9dYJsR5mewCJsn+V0WSWujyLIZS9qUwbOcY97lKw7btiYtAfuXaCf8N0MV8O1Nbb
IwVOVYPhu+jDjyGDr3EWDkvZYa0c+pc=
-----END CERTIFICATE-----