Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/f9bf5a6b-0e5a-30f4-a2fe-bd3f979c3f8e.roa
File:                     f9bf5a6b-0e5a-30f4-a2fe-bd3f979c3f8e.roa (raw, json)
Hash identifier:          +BjfzQI9YFRmeG4tv0tb13zZv4yax2jab+XBwA/khik=
Subject key identifier:   1D:68:31:09:CD:2C:C9:79:4E:C7:F9:5E:D1:D9:79:92:64:51:12:67
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583D17C35AAD9066F57DE610A880
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/f9bf5a6b-0e5a-30f4-a2fe-bd3f979c3f8e.roa
Signing time:             Mon 13 Dec 2021 05:00:00 +0000
ROA not before:           Mon 13 Dec 2021 05:00:00 +0000
ROA not after:            Tue 31 Jan 2023 05:00:00 +0000
asID:                     147293
IP address blocks:        104.234.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:17:c3:5a:ad:90:66:f5:7d:e6:10:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 05:00:00 2021 GMT
            Not After : Jan 31 05:00:00 2023 GMT
        Subject: CN=2d55b10b-6df1-4058-8079-24a1de7e59e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d3:fc:af:4d:79:a2:b6:bb:e8:bc:60:74:2c:
                    63:4e:3e:30:f1:61:40:c8:20:77:8e:f8:63:4d:57:
                    ad:91:6a:c1:1e:34:8f:11:38:ca:3e:16:6d:c0:7f:
                    f2:05:83:f9:1b:2d:d4:0a:c2:20:01:53:64:e3:be:
                    60:d2:bc:0f:da:fe:0d:fd:67:05:b4:8c:02:15:fc:
                    c5:40:04:b0:b1:50:31:b4:84:c3:87:37:4a:91:b8:
                    54:9b:99:1a:1a:3d:81:ec:15:04:6e:e1:dc:8f:a1:
                    b8:de:9d:bd:b6:21:2f:55:19:d5:a1:c9:0e:7e:5b:
                    c7:26:27:aa:1a:c8:79:cb:81:fe:2e:77:d6:16:2f:
                    2e:c4:49:d8:fb:52:84:27:ae:78:fb:aa:2b:4b:69:
                    c7:ca:62:a8:f2:3e:7c:c5:73:9b:fa:cf:85:5f:5b:
                    13:5e:cb:4a:bb:39:ce:b9:e1:58:d8:c2:c0:3d:69:
                    65:52:bb:9e:b5:2c:65:71:67:5c:23:b7:10:44:a7:
                    17:54:ae:c6:db:21:6c:81:d7:a6:a6:fe:0d:5a:4f:
                    bd:76:99:12:ba:1f:dd:be:32:e4:22:fe:b9:e3:07:
                    c8:72:53:4c:6a:7c:b0:a4:3a:a8:f2:34:13:9b:b8:
                    a0:cb:3c:b4:2a:8d:01:bf:01:a9:16:15:68:44:41:
                    bb:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:68:31:09:CD:2C:C9:79:4E:C7:F9:5E:D1:D9:79:92:64:51:12:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/f9bf5a6b-0e5a-30f4-a2fe-bd3f979c3f8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:8a:3b:93:f6:e4:38:2f:d1:bb:67:03:11:7c:25:04:8b:b1:
         cc:ec:1a:d7:4b:55:2a:e4:bf:cc:26:a0:a4:59:63:62:1a:2f:
         5f:29:cd:42:94:ba:be:79:e0:b6:e7:cd:81:f6:5b:61:b8:2c:
         5e:54:bc:c6:e8:af:23:1b:1e:f5:bd:2b:71:f3:c3:5a:ff:22:
         eb:10:3b:fd:a2:07:96:00:1d:0c:5c:b2:2b:d8:4b:c8:28:51:
         d1:f6:93:d1:29:f0:2e:d6:cb:78:d0:7e:68:48:b2:b1:26:a8:
         d4:38:46:7a:b5:c2:4e:1e:7d:7b:fb:59:6a:68:42:3e:30:42:
         1f:b0:32:b9:91:ef:5f:e4:8e:d6:e7:5f:7f:c6:81:4f:02:3b:
         df:62:db:38:09:e3:30:91:9c:d4:fd:2c:68:4e:21:94:db:8e:
         93:c1:8b:b4:de:95:e7:74:c7:b0:c2:1b:4d:dc:11:75:8e:2a:
         5a:5c:ba:52:43:82:55:4d:01:13:f7:43:c4:31:60:27:89:e1:
         18:8f:d8:08:e5:90:bf:4f:77:6a:26:12:de:39:d0:b7:12:06:
         21:a3:4b:6f:cb:7b:d6:3f:06:7f:b7:06:4a:b2:53:38:db:d0:
         21:c4:d0:50:13:c6:e6:f4:e2:b9:f6:ae:74:47:5f:98:8d:00:
         57:00:1e:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD0Xw1qtkGb1feYQqIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2ZjZkYmQtNWExZi00OGIxLWFjN2EtN2I3YzAzNmM3
MGYwMB4XDTIxMTIxMzA1MDAwMFoXDTIzMDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
MmQ1NWIxMGItNmRmMS00MDU4LTgwNzktMjRhMWRlN2U1OWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNP8r015ora76LxgdCxjTj4w8WFAyCB3jvhj
TVetkWrBHjSPETjKPhZtwH/yBYP5Gy3UCsIgAVNk475g0rwP2v4N/WcFtIwCFfzF
QASwsVAxtITDhzdKkbhUm5kaGj2B7BUEbuHcj6G43p29tiEvVRnVockOflvHJieq
Gsh5y4H+LnfWFi8uxEnY+1KEJ654+6orS2nHymKo8j58xXOb+s+FX1sTXstKuznO
ueFY2MLAPWllUruetSxlcWdcI7cQRKcXVK7G2yFsgdempv4NWk+9dpkSuh/dvjLk
Iv654wfIclNManywpDqo8jQTm7igyzy0Ko0BvwGpFhVoREG73wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFB1oMQnNLMl5Tsf5XtHZeZJkURJnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZm
NmRiZC01YTFmLTQ4YjEtYWM3YS03YjdjMDM2YzcwZjAvZjliZjVhNmItMGU1YS0z
MGY0LWEyZmUtYmQzZjk3OWMzZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmY2ZjZkYmQtNWExZi00OGIxLWFj
N2EtN2I3YzAzNmM3MGYwL2ZmNmY2ZGJkLTVhMWYtNDhiMS1hYzdhLTdiN2MwMzZj
NzBmMC5jcmwwHwYDVR0jBBgwFoAUtiZZXutxL1WTpJ9RO8h8b3R0PQUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZmNmRiZC01YTFmLTQ4YjEtYWM3YS03Yjdj
MDM2YzcwZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaOqwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC+KO5P25Dgv0btnAxF8JQSLsczsGtdLVSrkv8wmoKRZY2IaL18pzUKU
ur554LbnzYH2W2G4LF5UvMboryMbHvW9K3Hzw1r/IusQO/2iB5YAHQxcsivYS8go
UdH2k9Ep8C7Wy3jQfmhIsrEmqNQ4Rnq1wk4efXv7WWpoQj4wQh+wMrmR71/kjtbn
X3/GgU8CO99i2zgJ4zCRnNT9LGhOIZTbjpPBi7Teled0x7DCG03cEXWOKlpculJD
glVNARP3Q8QxYCeJ4RiP2AjlkL9Pd2omEt450LcSBiGjS2/Le9Y/Bn+3BkqyUzjb
0CHE0FATxub04rn2rnRHX5iNAFcAHng=
-----END CERTIFICATE-----