Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25556365-a584-346f-b45c-9a62d8a201e3.roa
File:                     25556365-a584-346f-b45c-9a62d8a201e3.roa (raw, json)
Hash identifier:          Zz8UzSBeXLBLb+erCv89dxc7kfIur8/fK4w0Zrs/X+Q=
Subject key identifier:   EE:FF:65:ED:F3:07:70:73:DD:28:58:82:28:51:9F:71:86:D9:D0:51
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F43285840AD6CCB11078E9848CEDF14C0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25556365-a584-346f-b45c-9a62d8a201e3.roa
Signing time:             Mon 23 Jan 2023 12:00:00 +0000
ROA not before:           Mon 23 Jan 2023 12:00:00 +0000
ROA not after:            Tue 28 Feb 2023 05:00:00 +0000
asID:                     8987
IP address blocks:        98.74.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:ad:6c:cb:11:07:8e:98:48:ce:df:14:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Jan 23 12:00:00 2023 GMT
            Not After : Feb 28 05:00:00 2023 GMT
        Subject: CN=6801bead-a2ca-40b1-a798-4936e9bda596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:a3:2c:76:5d:d1:23:fe:c0:93:51:65:a8:2f:
                    bf:62:b9:9d:9b:a9:12:8e:11:1b:28:d8:be:8d:31:
                    3f:4f:8c:66:a2:54:5d:b9:b9:98:09:5a:93:58:8d:
                    77:6e:17:37:09:74:43:bd:38:25:20:1c:2c:11:de:
                    88:d6:f0:54:9e:f2:fb:4a:99:67:cb:08:79:a6:be:
                    fc:f1:82:ae:c4:f8:86:32:d7:f9:40:35:47:c1:3c:
                    3a:e6:5d:56:94:49:f9:56:c7:ee:71:dd:77:4a:24:
                    39:f1:2b:a4:34:c0:ce:30:0f:32:1b:0d:99:0a:20:
                    7a:00:4a:a3:b6:ae:94:ac:06:f8:44:d8:d2:7a:82:
                    67:1d:60:e5:d8:5d:91:90:27:94:a8:4f:97:dc:d0:
                    7f:87:b6:a9:77:1d:55:93:8b:de:d3:d8:e3:3f:d5:
                    34:65:7e:43:05:e0:c4:53:f2:a7:a3:40:cf:05:36:
                    51:ce:fc:98:a6:19:7a:18:60:1b:5f:05:93:bf:cb:
                    b6:a8:cd:9d:a0:a1:fa:26:6c:d4:14:c6:65:1f:64:
                    ec:49:6b:56:a6:4e:40:7a:0f:8c:af:ee:ad:1b:a3:
                    ed:19:20:74:c9:3f:ce:89:63:39:4a:03:17:bd:25:
                    ce:44:c3:c9:b9:4d:ef:bf:30:19:6c:e4:0b:59:66:
                    be:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FF:65:ED:F3:07:70:73:DD:28:58:82:28:51:9F:71:86:D9:D0:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/25556365-a584-346f-b45c-9a62d8a201e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.74.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:cc:6b:65:aa:ed:d1:f8:28:ac:b2:dd:cc:4e:8f:25:6e:70:
         dd:1b:fc:3f:cc:fc:d2:60:dd:e6:ab:c4:40:58:6f:99:de:ce:
         97:e3:19:c1:ed:fe:db:6f:c3:c6:a1:e6:47:b7:76:a9:80:d0:
         e6:f9:b7:7b:f4:7a:66:b5:25:36:41:64:b7:b6:19:97:8d:af:
         ed:60:20:8b:57:f8:e0:08:8a:a7:5a:c9:ac:4d:f1:cc:63:ce:
         ff:bc:1a:27:f4:1c:c5:07:57:8f:4b:8f:20:ff:ca:b1:6e:22:
         fb:13:e2:e6:90:e0:31:8c:e2:a2:1f:43:91:d6:b8:9a:ca:75:
         3f:0b:7b:40:29:c6:2a:d1:81:56:87:0b:88:d0:d9:f6:2d:8c:
         9b:75:d9:f9:47:7c:06:ea:78:9e:81:20:5f:c3:26:70:3a:19:
         45:95:20:25:0d:41:c0:3c:84:a0:60:94:f6:97:e3:12:5f:9d:
         ff:9c:6c:ee:12:c2:e5:f9:e8:90:d7:18:48:ec:ea:fe:19:11:
         32:56:b6:6e:f0:48:69:5a:b2:86:49:49:c7:33:77:ba:58:9e:
         bd:51:30:ab:52:c2:58:93:a5:bc:ed:f8:12:cf:0c:76:fd:0d:
         55:6e:52:d6:37:70:7c:2c:b4:64:47:79:07:c3:e4:26:67:77:
         7f:db:3d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----