Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/2d9455a9-b860-3675-970f-338051f9f6e1.roa
File:                     2d9455a9-b860-3675-970f-338051f9f6e1.roa (raw, json)
Hash identifier:          CUJlXBFmOJOVIvWJ6Thh3fancxryUeZ44Ln7rZlo+rA=
Subject key identifier:   D1:3F:DF:30:29:40:90:A3:17:75:C9:6E:B3:5C:FA:20:D0:1C:5B:04
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F4328583E611BEACEEF33567A9279F900
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/2d9455a9-b860-3675-970f-338051f9f6e1.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     60721
IP address blocks:        98.142.248.0/24 maxlen: 24
                          98.142.249.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:61:1b:ea:ce:ef:33:56:7a:92:79:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=2ae09352-8eb1-4aa4-96f2-ac0b4c706b81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:4b:54:9b:23:ff:6d:10:5e:99:3c:b9:d6:
                    5e:06:6e:90:ad:d7:a9:6a:9a:a3:a5:30:8c:c1:54:
                    54:ae:38:33:e6:d9:27:1f:8b:8e:2c:99:ef:19:6b:
                    de:73:1f:1c:40:52:e7:96:b5:1e:85:39:be:91:21:
                    fb:d1:9f:3e:45:ab:d8:6e:8a:58:e7:9e:10:bc:68:
                    0b:73:a5:04:dd:82:15:bd:d7:da:e4:17:cc:9e:c1:
                    ed:bd:66:e2:79:c5:d1:d6:51:21:5e:0a:e6:02:75:
                    74:63:0a:de:83:7d:be:42:02:73:dd:21:c4:46:d0:
                    97:d6:74:7f:b2:dd:b8:da:ca:c7:20:68:fb:c8:d3:
                    92:71:b7:91:94:b4:84:9b:77:f1:4d:33:18:a1:18:
                    28:46:09:8b:a0:30:aa:2c:b2:10:54:98:98:29:b9:
                    91:16:d1:dd:b7:21:7f:ce:b4:56:e7:14:69:f9:65:
                    d3:89:1f:f1:c7:a5:33:43:86:c2:2f:b0:7d:e5:7d:
                    e1:60:d2:02:a6:98:68:76:cc:94:2f:f3:5f:e2:a5:
                    0f:a3:05:4f:cb:88:a6:9d:75:7e:f7:6e:53:9e:82:
                    47:1b:38:77:72:7e:f1:f0:3d:8c:f3:28:37:d0:7e:
                    b3:ea:70:6c:80:54:90:c1:4b:8a:c2:ff:3c:25:83:
                    c4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:3F:DF:30:29:40:90:A3:17:75:C9:6E:B3:5C:FA:20:D0:1C:5B:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/2d9455a9-b860-3675-970f-338051f9f6e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:7d:c0:db:7a:0e:2f:df:c1:59:43:a7:37:e6:66:b4:0d:e5:
         09:8a:18:0a:c3:d4:69:1d:94:fe:46:cf:bb:f8:1c:37:82:65:
         a8:cb:af:36:04:c6:52:dd:e7:21:ba:b5:28:fa:97:52:74:9c:
         e4:96:a0:1c:34:33:94:e4:ac:43:53:43:38:60:0e:95:1e:8f:
         80:e6:52:2d:ce:f4:e7:99:a6:0e:2e:cd:ad:4c:30:98:89:cf:
         49:66:47:09:42:cb:82:86:fd:47:88:60:42:f3:b4:19:50:1a:
         d7:23:df:60:1d:99:7f:f7:f8:28:c2:5b:38:40:37:e4:65:d9:
         05:66:ea:d4:3a:3a:ff:01:51:6f:ae:ad:77:fc:3a:16:b9:0a:
         7f:a3:22:8f:c6:dd:5f:0f:fe:73:cf:9b:fe:c6:48:6c:3f:ab:
         10:ee:8c:37:8b:02:85:c8:d6:c0:16:6d:1a:8d:a4:f7:a2:30:
         c5:29:53:51:37:fc:c9:00:20:4c:05:7c:88:a9:1d:a0:cd:f3:
         99:23:2e:7a:0a:e5:ae:b6:57:80:07:99:f1:ad:b1:bf:4a:8a:
         61:03:cd:ec:a6:2a:61:8c:14:ef:d8:af:f9:ee:7b:b7:1c:3b:
         a8:7b:bc:f3:4e:1c:54:58:c1:46:4e:dd:bf:ca:a4:25:43:89:
         f8:e3:86:44
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD5hG+rO7zNWepJ5+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2ZjZkYmQtNWExZi00OGIxLWFjN2EtN2I3YzAzNmM3
MGYwMB4XDTIxMTIxMzE1MTgwMFoXDTI0MDEzMTA1MDAwMFowLzEtMCsGA1UEAxMk
MmFlMDkzNTItOGViMS00YWE0LTk2ZjItYWMwYjRjNzA2YjgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1BLVJsj/20QXpk8udZeBm6QrdepapqjpTCM
wVRUrjgz5tknH4uOLJnvGWvecx8cQFLnlrUehTm+kSH70Z8+RavYbopY554QvGgL
c6UE3YIVvdfa5BfMnsHtvWbiecXR1lEhXgrmAnV0Ywreg32+QgJz3SHERtCX1nR/
st242srHIGj7yNOScbeRlLSEm3fxTTMYoRgoRgmLoDCqLLIQVJiYKbmRFtHdtyF/
zrRW5xRp+WXTiR/xx6UzQ4bCL7B95X3hYNICpphodsyUL/Nf4qUPowVPy4imnXV+
925TnoJHGzh3cn7x8D2M8yg30H6z6nBsgFSQwUuKwv88JYPEQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNE/3zApQJCjF3XJbrNc+iDQHFsEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZm
NmRiZC01YTFmLTQ4YjEtYWM3YS03YjdjMDM2YzcwZjAvMmQ5NDU1YTktYjg2MC0z
Njc1LTk3MGYtMzM4MDUxZjlmNmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmY2ZjZkYmQtNWExZi00OGIxLWFj
N2EtN2I3YzAzNmM3MGYwL2ZmNmY2ZGJkLTVhMWYtNDhiMS1hYzdhLTdiN2MwMzZj
NzBmMC5jcmwwHwYDVR0jBBgwFoAUtiZZXutxL1WTpJ9RO8h8b3R0PQUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mZjZmNmRiZC01YTFmLTQ4YjEtYWM3YS03Yjdj
MDM2YzcwZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBYo74MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAB9wNt6Di/fwVlDpzfmZrQN5QmKGArD1GkdlP5Gz7v4HDeCZajLrzYE
xlLd5yG6tSj6l1J0nOSWoBw0M5TkrENTQzhgDpUej4DmUi3O9OeZpg4uza1MMJiJ
z0lmRwlCy4KG/UeIYELztBlQGtcj32AdmX/3+CjCWzhAN+Rl2QVm6tQ6Ov8BUW+u
rXf8Oha5Cn+jIo/G3V8P/nPPm/7GSGw/qxDujDeLAoXI1sAWbRqNpPeiMMUpU1E3
/MkAIEwFfIipHaDN85kjLnoK5a62V4AHmfGtsb9KimEDzeymKmGMFO/Yr/nue7cc
O6h7vPNOHFRYwUZO3b/KpCVDifjjhkQ=
-----END CERTIFICATE-----