Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/2/3130342e3234352e3132302e302f32322d3232203d3e203633333133.roa
File:                     3130342e3234352e3132302e302f32322d3232203d3e203633333133.roa (raw, json)
Hash identifier:          20j3E2TX+RN9p/PaJjWvzKs9rgKfpmNEOWFfkDM4Bys=
Subject key identifier:   15:68:28:03:B0:DC:57:C3:CF:A5:E5:3A:01:F0:7F:AB:F8:F0:99:9A
Certificate issuer:       /CN=98eab7485af39837d95c9074e753d19496a738b62277ef026d
Certificate serial:       6CD7337776ABE63F4159B966C1B493EDAF1DFE25
Authority key identifier: 3D:B0:95:0C:5D:6E:9F:AC:23:CD:32:8D:80:9E:6E:82:7C:B4:4A:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036/98eab7485af39837d95c9074e753d19496a738b62277ef026d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/2/3130342e3234352e3132302e302f32322d3232203d3e203633333133.roa
Signing time:             Tue 19 Apr 2022 13:43:39 +0000
ROA not before:           Tue 19 Apr 2022 13:38:39 +0000
ROA not after:            Tue 18 Apr 2023 13:43:39 +0000
asID:                     63313
IP address blocks:        104.245.120.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d7:33:77:76:ab:e6:3f:41:59:b9:66:c1:b4:93:ed:af:1d:fe:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98eab7485af39837d95c9074e753d19496a738b62277ef026d
        Validity
            Not Before: Apr 19 13:38:39 2022 GMT
            Not After : Apr 18 13:43:39 2023 GMT
        Subject: CN=15682803B0DC57C3CFA5E53A01F07FABF8F0999A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:af:7a:eb:ea:34:f0:ca:fc:00:a7:47:4f:
                    19:a9:6d:f2:05:a6:aa:85:18:55:47:7e:04:ca:69:
                    53:92:2e:dd:50:21:62:17:ce:2e:d8:55:da:e3:81:
                    fa:19:28:f7:90:a0:16:cf:36:83:f1:81:4e:36:cc:
                    df:e6:34:dc:72:0c:11:e8:63:2b:b1:98:15:3f:cf:
                    c4:f0:f8:62:37:e9:e0:f7:a2:55:6e:2c:7e:76:44:
                    7b:1b:5b:8a:e8:b3:ce:e3:df:a8:42:83:38:14:15:
                    c1:33:2f:d1:f6:75:98:56:ea:33:8b:51:88:76:36:
                    6b:1d:ae:81:59:74:12:85:a2:37:d7:1e:5c:0b:75:
                    cb:9e:40:f8:48:33:1a:7a:6b:ed:71:b3:31:d3:7d:
                    e9:a3:69:68:14:34:05:51:e8:38:0b:16:85:f7:7f:
                    5f:11:5c:ad:ab:4c:71:46:9f:40:4d:f3:b2:3a:79:
                    d6:2a:b6:4d:af:0f:e6:8d:36:15:95:e9:44:b1:79:
                    d9:e4:34:a5:f0:a1:7a:ee:a4:6b:e5:ea:bb:a8:bd:
                    8c:49:27:d8:74:0c:3a:90:16:7c:b4:3e:fc:ce:1f:
                    4e:52:87:b9:d1:ce:c2:9b:2c:f0:a1:c1:b2:07:d1:
                    34:b8:fd:ca:4a:ed:84:03:86:01:79:c2:19:10:c8:
                    ae:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:68:28:03:B0:DC:57:C3:CF:A5:E5:3A:01:F0:7F:AB:F8:F0:99:9A
            X509v3 Authority Key Identifier:
                keyid:3D:B0:95:0C:5D:6E:9F:AC:23:CD:32:8D:80:9E:6E:82:7C:B4:4A:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/2/3DB0950C5D6E9FAC23CD328D809E6E827CB44AB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036/98eab7485af39837d95c9074e753d19496a738b62277ef026d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/2/3130342e3234352e3132302e302f32322d3232203d3e203633333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6d:b7:70:15:b0:f1:d4:1f:c4:78:3d:1c:ff:77:b2:99:46:a7:
         d0:a1:07:3d:68:82:ff:88:10:bd:a6:85:fb:60:08:d7:6c:14:
         21:42:a4:ea:b4:79:68:35:f0:61:5d:62:3c:e8:1b:1f:f1:91:
         45:e4:b6:7d:bb:71:b1:61:64:2d:86:42:52:07:1d:69:41:51:
         bc:5d:67:1c:0a:84:45:30:8e:c8:b2:c4:3d:01:a6:33:31:6d:
         f6:1a:63:10:b6:4e:bc:cd:18:98:7c:9b:1b:e9:f3:aa:37:04:
         f0:f4:07:3c:36:8f:63:43:2e:64:d6:b6:7f:a9:5a:3c:92:9e:
         a6:22:cc:59:83:b7:23:eb:65:6b:9c:4c:27:dc:65:e8:19:4a:
         df:9c:e0:c1:ed:b9:9b:7a:08:64:2c:55:4b:9e:c1:eb:36:63:
         23:61:99:17:56:ce:b3:c5:e7:a1:88:ce:16:b3:9e:42:50:19:
         9a:90:b2:63:db:28:41:cf:7e:93:7b:14:c4:9b:17:ff:03:ca:
         ad:46:04:30:49:18:f4:e3:15:c2:e4:de:6d:67:cf:ab:60:23:
         c4:db:f5:98:d6:32:e6:74:83:b9:fa:67:db:c4:3a:11:98:e0:
         79:a7:e7:5d:8a:d2:6a:5d:a9:a7:52:6d:8e:d2:62:48:f4:fb:
         fd:69:d4:86
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUbNczd3ar5j9BWblmwbST7a8d/iUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOThlYWI3NDg1YWYzOTgzN2Q5NWM5MDc0ZTc1M2QxOTQ5
NmE3MzhiNjIyNzdlZjAyNmQwHhcNMjIwNDE5MTMzODM5WhcNMjMwNDE4MTM0MzM5
WjAzMTEwLwYDVQQDEygxNTY4MjgwM0IwREM1N0MzQ0ZBNUU1M0EwMUYwN0ZBQkY4
RjA5OTlBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvr2veuvqNPDK
/ACnR08ZqW3yBaaqhRhVR34EymlTki7dUCFiF84u2FXa44H6GSj3kKAWzzaD8YFO
Nszf5jTccgwR6GMrsZgVP8/E8PhiN+ng96JVbix+dkR7G1uK6LPO49+oQoM4FBXB
My/R9nWYVuozi1GIdjZrHa6BWXQShaI31x5cC3XLnkD4SDMaemvtcbMx033po2lo
FDQFUeg4CxaF939fEVytq0xxRp9ATfOyOnnWKrZNrw/mjTYVlelEsXnZ5DSl8KF6
7qRr5eq7qL2MSSfYdAw6kBZ8tD78zh9OUoe50c7CmyzwocGyB9E0uP3KSu2EA4YB
ecIZEMiuKQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFBVoKAOw3FfDz6XlOgHwf6v4
8JmaMB8GA1UdIwQYMBaAFD2wlQxdbp+sI80yjYCeboJ8tEq2MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmN2ZiNzIyZTkwMTdmZmVhZDlmNTM0YWM1LzIv
M0RCMDk1MEM1RDZFOUZBQzIzQ0QzMjhEODA5RTZFODI3Q0I0NEFCNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzMxNzAwOGY0LTMwNDgtNDMzMC1hMzRiLTJhMzZkZmUwZjAzNi85OGVh
Yjc0ODVhZjM5ODM3ZDk1YzkwNzRlNzUzZDE5NDk2YTczOGI2MjI3N2VmMDI2ZC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjdmYjcyMmU5MDE3ZmZl
YWQ5ZjUzNGFjNS8yLzMxMzAzNDJlMzIzNDM1MmUzMTMyMzAyZTMwMmYzMjMyMmQz
MjMyMjAzZDNlMjAzNjMzMzMzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaPV4MA0GCSqGSIb3DQEB
CwUAA4IBAQBtt3AVsPHUH8R4PRz/d7KZRqfQoQc9aIL/iBC9poX7YAjXbBQhQqTq
tHloNfBhXWI86Bsf8ZFF5LZ9u3GxYWQthkJSBx1pQVG8XWccCoRFMI7IssQ9AaYz
MW32GmMQtk68zRiYfJsb6fOqNwTw9Ac8No9jQy5k1rZ/qVo8kp6mIsxZg7cj62Vr
nEwn3GXoGUrfnODB7bmbeghkLFVLnsHrNmMjYZkXVs6zxeehiM4Ws55CUBmakLJj
2yhBz36TexTEmxf/A8qtRgQwSRj04xXC5N5tZ8+rYCPE2/WY1jLmdIO5+mfbxDoR
mOB5p+dditJqXamnUm2O0mJI9Pv9adSG
-----END CERTIFICATE-----