Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c86dd299-3641-321b-b3c8-1048e3b83f08.roa
File:                     c86dd299-3641-321b-b3c8-1048e3b83f08.roa (raw, json)
Hash identifier:          kaBZDKnFXed8vKRoLW1W5ygXtBAFrI3ofJc+ulaBYp0=
Subject key identifier:   43:E3:72:E5:04:95:89:05:13:6D:91:34:57:5C:72:B9:12:51:DA:10
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F432858405C8D09ED3EBDC39E4F4946E0
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c86dd299-3641-321b-b3c8-1048e3b83f08.roa
Signing time:             Sun 25 Dec 2022 12:00:00 +0000
ROA not before:           Sun 25 Dec 2022 12:00:00 +0000
ROA not after:            Mon 30 Jan 2023 05:00:00 +0000
asID:                     14618
IP address blocks:        98.130.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:5c:8d:09:ed:3e:bd:c3:9e:4f:49:46:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: Dec 25 12:00:00 2022 GMT
            Not After : Jan 30 05:00:00 2023 GMT
        Subject: CN=c740c7ef-0f23-4321-b68a-6eb8740b9958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0b:98:fb:73:78:e4:67:40:f5:d2:9c:5a:a6:
                    db:e1:6f:28:d2:58:ec:8d:7a:b0:06:5d:84:76:f7:
                    7f:17:40:5c:2f:6c:83:d9:6a:8f:29:2d:fa:4f:92:
                    86:a0:15:e8:83:15:27:c8:45:29:54:8a:8b:4b:49:
                    0f:63:5c:8b:2c:d3:38:a3:a5:1b:41:3f:7d:1c:a7:
                    a5:51:ba:4b:84:f4:b1:9d:82:2a:b4:75:72:61:c0:
                    30:57:3a:27:52:17:67:a6:44:85:88:a6:ba:39:da:
                    7c:1e:5a:67:00:2c:0a:9a:5e:73:16:b5:9a:f1:42:
                    6f:48:6e:6c:6a:4b:1b:bb:90:7c:14:a1:44:50:29:
                    e8:58:e9:a8:3a:6a:77:00:21:88:81:d8:77:35:ba:
                    07:c6:04:a8:d9:57:3f:da:26:e7:12:28:71:6f:2d:
                    b2:96:4d:cf:2c:9a:c1:ed:36:b7:ff:01:9c:a0:27:
                    ae:9d:90:d7:43:d3:f2:c0:2d:da:86:b5:9a:64:03:
                    a2:86:2c:5e:26:88:73:59:f6:e8:ef:01:77:de:b9:
                    5b:3a:3b:53:e6:21:76:9a:7b:58:46:e0:fe:49:5d:
                    bd:3e:ea:88:f6:e0:05:29:0b:54:7d:66:18:07:a5:
                    15:60:e8:49:a1:6b:eb:33:09:70:b3:53:bd:1b:9d:
                    57:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:E3:72:E5:04:95:89:05:13:6D:91:34:57:5C:72:B9:12:51:DA:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/c86dd299-3641-321b-b3c8-1048e3b83f08.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.130.0.0/15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:11:5a:7e:07:f4:2d:98:bf:95:e4:7c:ea:3c:c2:2b:61:0e:
         d0:22:c8:f8:ce:25:67:5c:9f:0d:04:80:58:37:b2:00:f3:99:
         a9:28:a7:1d:59:94:21:ee:cb:05:e5:7f:cb:22:71:2b:7f:f0:
         95:5d:fd:eb:8f:ea:17:1c:ea:d1:9a:c2:7d:c3:5c:65:2f:af:
         62:52:45:29:be:e5:be:c5:5a:9b:21:ea:06:91:16:40:b6:bf:
         f0:5f:19:4f:c2:11:d8:36:96:d5:4d:c3:c2:1d:c3:b3:4e:52:
         18:97:ef:dc:43:c4:84:69:98:c5:8d:38:e0:a5:28:f5:0b:fd:
         7f:1a:62:e8:69:6c:f7:3b:e9:19:f7:18:57:0f:80:27:76:c9:
         b3:9a:43:6a:e1:ec:e1:88:dc:04:00:f6:33:d8:15:6f:9c:cb:
         96:d3:4a:8c:5e:65:c9:a0:e5:34:41:9b:0b:9d:ad:6b:11:2b:
         d6:df:99:90:3c:02:a9:3c:89:28:9e:59:37:4d:7b:d3:61:62:
         10:05:1d:7e:1e:44:f6:d2:4b:45:3f:f7:b1:7a:19:52:a1:76:
         84:11:1d:67:11:93:b3:83:64:97:a7:b2:38:1b:be:94:5e:13:
         33:5f:b2:ab:fe:4f:4f:e4:75:36:81:a3:9c:07:c8:b5:85:8e:
         c7:1b:5d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----