Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef72bf16-e288-3a30-aa4a-1fc7c8f2bb46.roa
File:                     ef72bf16-e288-3a30-aa4a-1fc7c8f2bb46.roa (raw, json)
Hash identifier:          MtPyKnWSoYudwyp9F5I07YBkPpwLC+6UNBrRaeqKnw0=
Subject key identifier:   66:97:54:9D:1F:2D:56:B4:69:58:B8:B9:62:B0:78:7C:20:9F:9A:0C
Certificate issuer:       /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial:       010D0C9F4328583DECCD03416AE3AEEF0B3C9600
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef72bf16-e288-3a30-aa4a-1fc7c8f2bb46.roa
Signing time:             Sun 15 May 2022 12:00:00 +0000
ROA not before:           Sun 15 May 2022 12:00:00 +0000
ROA not after:            Mon 20 Jun 2022 04:00:00 +0000
asID:                     14618
IP address blocks:        98.131.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:ec:cd:03:41:6a:e3:ae:ef:0b:3c:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
        Validity
            Not Before: May 15 12:00:00 2022 GMT
            Not After : Jun 20 04:00:00 2022 GMT
        Subject: CN=5ff698b3-c3cf-4922-ac67-c391972a0316
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:df:85:ce:ec:3a:48:94:fd:75:8c:bf:81:
                    f8:57:06:0e:d0:5f:f2:60:35:b2:88:08:69:24:06:
                    22:a3:bf:3b:f1:d1:8f:bb:55:2c:52:21:b3:60:f8:
                    47:75:68:d2:33:a3:8c:31:b2:08:af:36:85:e8:67:
                    c0:5e:de:bc:80:77:fe:82:1b:01:70:83:27:d2:41:
                    44:5c:3b:23:ac:4d:a2:1d:5e:ce:7d:5f:14:fa:7a:
                    c5:1c:b6:e6:31:18:24:88:7a:f1:58:af:ad:29:67:
                    db:08:f1:85:59:54:a8:17:b7:5f:82:e2:37:89:d2:
                    4c:4b:53:9d:85:4c:c2:ac:31:f8:dc:64:19:a0:e9:
                    89:a3:14:2a:2c:d0:1b:6c:4f:c1:77:ef:61:b9:e9:
                    0f:b0:21:14:af:6e:af:93:b2:e8:01:e4:de:c4:82:
                    f2:24:b3:13:43:0d:ec:3c:c8:5c:8c:b5:f4:00:8f:
                    ea:2f:ac:99:52:76:9e:1f:7c:09:e4:41:17:aa:4b:
                    51:97:86:0b:3a:bf:db:18:76:81:91:5e:c4:66:09:
                    b2:8d:f4:ac:2c:99:88:b7:6c:54:a6:e3:a1:ee:28:
                    f1:e6:d0:88:c8:d3:ab:36:d4:da:35:4c:0d:73:2b:
                    22:e0:44:5e:a0:2d:5e:dc:7e:cc:f1:33:ae:0b:a4:
                    fc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:97:54:9D:1F:2D:56:B4:69:58:B8:B9:62:B0:78:7C:20:9F:9A:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/ef72bf16-e288-3a30-aa4a-1fc7c8f2bb46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.131.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:23:26:b6:63:c0:cc:29:f1:44:d1:dd:29:1c:df:dd:b1:14:
         71:c9:e5:12:67:64:11:19:b3:bd:d0:89:67:26:cd:b2:10:54:
         6e:71:96:cb:6c:9a:be:ad:9a:80:fa:ef:39:80:85:fb:09:52:
         02:ac:78:91:2f:c9:25:1e:90:b4:96:a8:b1:76:ca:45:6e:a9:
         d4:3a:41:b8:9a:5b:f8:fe:fb:0b:f3:6d:a7:a4:0c:dc:60:54:
         12:dc:52:26:ad:b0:22:ed:05:18:24:19:ba:19:ef:d9:bd:5d:
         f9:56:98:10:e6:e4:dc:1c:ac:ea:66:d6:c2:16:fa:78:94:c9:
         8b:7b:94:9f:65:46:df:a4:82:1d:e7:ad:07:8f:c2:c7:cb:88:
         cc:76:3f:69:f5:bd:0e:89:6e:0c:e0:02:c0:19:c1:31:cc:a4:
         73:2f:86:2b:cd:62:c4:96:61:11:bb:7c:75:65:2b:e6:78:30:
         87:82:5a:10:49:12:8d:08:f9:32:7e:12:7b:67:ac:46:ec:75:
         1e:b4:13:b3:83:e0:db:67:47:33:c4:6e:c3:f9:15:19:2c:64:
         85:8e:87:2d:c8:62:f3:cf:46:4b:8a:40:8a:78:e2:91:22:a4:
         71:a8:4e:de:b4:09:e1:47:73:77:4c:9e:94:38:c8:51:3b:24:
         59:48:d0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----