Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/da60d662-4546-31d6-994c-13f12af3eb6e.roa
File:                     da60d662-4546-31d6-994c-13f12af3eb6e.roa (raw, json)
Hash identifier:          mmlTtYwXGHw6u+gtMJdzhI1l0eLYHOKqBKcEDaAM/bg=
Subject key identifier:   04:B4:24:D7:DF:FC:85:AC:95:1C:EF:1A:04:DF:CA:C4:B6:3B:01:4D
Certificate issuer:       /CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
Certificate serial:       010D0C9F43285840146A9BB528B9E35113FDCA80
Authority key identifier: B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/da60d662-4546-31d6-994c-13f12af3eb6e.roa
Signing time:             Mon 13 Dec 2021 15:18:00 +0000
ROA not before:           Mon 13 Dec 2021 15:18:00 +0000
ROA not after:            Wed 31 Jan 2024 05:00:00 +0000
asID:                     400810
IP address blocks:        98.142.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:14:6a:9b:b5:28:b9:e3:51:13:fd:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0
        Validity
            Not Before: Dec 13 15:18:00 2021 GMT
            Not After : Jan 31 05:00:00 2024 GMT
        Subject: CN=d835fe8e-7990-4dc0-bbb2-ed6381eb921a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:12:1c:91:b5:4c:a0:1e:66:95:b1:9a:76:6f:
                    c5:14:57:8c:2e:7c:8b:1f:b3:53:d7:91:5e:f8:00:
                    60:4f:c6:0a:50:9f:a5:f3:36:08:c8:f0:86:25:67:
                    68:ec:65:50:91:81:11:f0:fe:cc:5d:6d:7a:ba:9d:
                    94:d5:70:f4:9c:b2:8b:bb:eb:d0:62:17:16:2f:9c:
                    8f:f8:06:54:00:76:a6:b1:f7:34:42:bb:71:51:5c:
                    1b:7d:75:0a:32:2b:a3:cc:2d:84:0f:f8:40:3e:cd:
                    6a:b6:c8:67:c0:92:43:dc:6c:6d:ea:19:9c:d5:87:
                    7a:8e:b9:5e:bd:68:28:55:2b:bc:24:58:94:1d:e3:
                    1c:53:91:b5:fe:4f:e3:9a:e6:fb:fd:be:d3:11:d5:
                    93:dc:21:7a:cb:ab:c7:c9:72:78:40:d3:85:54:3f:
                    da:b8:60:dd:bb:80:d1:28:bf:89:83:0f:bb:7d:69:
                    97:25:ba:7a:92:ef:3b:08:3c:a8:01:07:ed:70:c4:
                    54:fc:0b:84:d3:12:e4:8e:35:5c:77:12:7b:00:a6:
                    c8:67:ae:cf:27:e8:e9:ec:f8:61:0f:9a:f2:9c:05:
                    bb:4c:d2:03:c5:02:59:36:bb:27:a0:9d:3c:01:01:
                    e0:6b:74:35:14:ff:d2:b8:76:c1:2f:2c:1a:91:26:
                    0e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B4:24:D7:DF:FC:85:AC:95:1C:EF:1A:04:DF:CA:C4:B6:3B:01:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/da60d662-4546-31d6-994c-13f12af3eb6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.crl

            X509v3 Authority Key Identifier:
                keyid:B6:26:59:5E:EB:71:2F:55:93:A4:9F:51:3B:C8:7C:6F:74:74:3D:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ff6f6dbd-5a1f-48b1-ac7a-7b7c036c70f0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.142.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:af:f0:ff:4b:99:c6:98:52:92:3b:f4:18:e4:b7:c8:5d:63:
         73:3b:73:11:24:20:96:6b:4c:f8:12:0c:02:48:11:6f:61:19:
         e7:32:a5:6a:07:9b:d2:8f:f8:af:43:ab:a9:f8:8d:ac:fe:74:
         e7:9b:1b:86:7d:49:d3:f7:a2:38:e5:03:bf:b5:44:ea:11:c5:
         49:75:64:ff:d6:37:3a:76:21:60:39:fe:ed:f1:0b:a2:58:4c:
         dc:1e:87:43:a9:9a:f8:d4:c0:7d:26:ac:e5:ac:b0:e2:5a:9d:
         ca:17:0e:a6:ed:da:9a:09:4e:a7:2f:03:00:32:87:d6:47:9a:
         04:36:41:31:27:c1:6f:64:f3:60:54:9f:b4:1b:05:e6:45:37:
         21:df:77:6c:07:8a:34:22:ba:2d:e7:8c:4f:e1:a6:26:0a:98:
         77:78:60:b0:d5:cf:65:65:b5:f8:a4:fb:28:cd:7e:75:52:9e:
         a1:a8:78:76:11:ed:65:b4:46:b3:5c:ff:f2:20:be:9f:61:77:
         a2:b9:65:f7:e1:fa:25:d0:d4:13:b5:d4:b2:bf:89:1b:45:88:
         af:bb:dd:b3:13:2e:59:b2:b1:e0:8c:9c:88:22:ae:b5:29:4e:
         94:ef:dc:5e:7a:ea:e4:73:01:2d:6f:58:30:53:fd:d9:c2:01:
         13:5e:60:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----