Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1d9b3474-31b3-35ac-919c-774dd537b632.roa
File:                     1d9b3474-31b3-35ac-919c-774dd537b632.roa (raw, json)
Hash identifier:          faUQ/vuItOyTyyP7YcfLyo9PjGo5eawCZ1eCNl7iWI8=
Subject key identifier:   7D:B9:93:E8:75:A9:C0:10:00:5D:CC:28:25:52:4F:C3:64:4D:19:42
Certificate issuer:       /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial:       010D0C9F4328576D51CC73C042CFC173108C2AF8
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1d9b3474-31b3-35ac-919c-774dd537b632.roa
Signing time:             Thu 02 Jul 2020 17:21:28 +0000
ROA not before:           Thu 02 Jul 2020 04:00:00 +0000
ROA not after:            Tue 26 Mar 2030 04:00:00 +0000
asID:                     8075
IP address blocks:        98.64.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:10:8c:2a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
        Validity
            Not Before: Jul  2 04:00:00 2020 GMT
            Not After : Mar 26 04:00:00 2030 GMT
        Subject: CN=4c853e8c-6e0c-4f6f-ab9a-48ab6b6ce80a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:81:da:bc:14:87:12:a3:bd:da:42:d1:e9:82:
                    b2:f1:5b:29:18:cf:f6:3f:c4:7a:01:1d:f0:9d:95:
                    6b:f1:11:39:86:fb:d1:a6:5f:de:06:d5:d4:e3:56:
                    f5:97:88:10:dd:af:a1:3e:1d:b5:0b:e1:9d:8a:17:
                    b2:3c:22:89:7e:dd:0b:6c:0f:f8:c4:25:67:24:e9:
                    ab:ba:62:b5:62:01:e8:f1:33:c3:66:3c:ff:53:da:
                    16:3c:e8:a6:17:ff:d0:5b:12:c7:b8:09:22:9f:31:
                    cb:4d:72:df:a0:4c:11:2b:b8:a2:8c:27:a8:67:ae:
                    21:30:f9:5e:e1:ea:7b:13:37:a2:a2:fb:c7:1e:58:
                    7a:3b:d6:38:43:76:57:c4:ab:b0:20:78:b5:11:3a:
                    67:9e:11:fb:49:c5:fb:26:cd:d9:a6:b8:92:ec:69:
                    66:e2:37:8f:dd:97:ed:41:9b:54:dc:0a:9a:4c:7b:
                    05:a1:29:16:5c:87:ad:a6:14:7f:f4:70:f1:0b:af:
                    3b:bf:d7:77:fb:12:37:9d:c7:5a:7c:d5:c5:9f:9c:
                    91:c9:3b:2e:64:44:8e:c3:fb:23:e5:b7:c2:33:56:
                    3e:5d:78:ca:52:d7:6b:aa:0f:88:02:d7:50:f0:51:
                    42:15:1c:c4:b0:ae:71:10:dc:ae:42:84:fe:ec:1e:
                    49:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B9:93:E8:75:A9:C0:10:00:5D:CC:28:25:52:4F:C3:64:4D:19:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/1d9b3474-31b3-35ac-919c-774dd537b632.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl

            X509v3 Authority Key Identifier:
                keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.64.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:60:39:bd:1a:49:0e:71:6b:42:b5:81:87:f4:a2:bb:fe:cd:
         4b:bd:92:c8:6c:d8:05:cf:07:57:09:62:38:78:c7:e2:a5:32:
         33:5f:72:4b:2b:5c:04:fb:e1:41:b5:5e:80:50:66:63:fa:44:
         a7:6c:04:3c:1e:59:f0:33:da:fc:d6:1d:5a:1f:71:b7:5e:57:
         26:d4:cf:74:38:15:db:d0:df:b7:4e:4c:be:37:cd:07:c4:77:
         7a:61:77:60:02:56:a4:72:6d:35:51:f2:37:51:89:ac:a2:b6:
         75:82:09:7c:b5:92:2a:0c:dd:6f:62:ee:e8:79:42:bd:ac:70:
         d0:c8:78:81:d1:db:5d:24:c7:28:54:6a:cb:d0:f5:e4:ed:43:
         e3:d6:69:96:e4:27:8a:42:9b:f6:ae:3a:cd:cc:9b:65:32:13:
         5c:b8:d1:64:7d:89:d3:9c:3f:3e:1c:94:f2:be:7e:5c:d7:19:
         e1:83:b3:c6:53:01:27:26:bc:ed:81:c3:5e:6d:dc:0f:ad:d8:
         9f:c6:30:65:63:11:52:a5:13:de:5b:90:76:12:69:ad:15:12:
         fa:7b:c1:c7:cf:16:98:d1:38:20:e4:3d:e7:00:3b:ea:c3:25:
         4a:17:d2:4b:df:e9:84:94:d6:01:cb:e5:6f:22:f2:53:37:bf:
         71:70:8a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----