Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/a98976c6-b2c1-3640-af55-172e3093faaf.roa
File:                     a98976c6-b2c1-3640-af55-172e3093faaf.roa (raw, json)
Hash identifier:          TCB6G+WEN8iqkpDQ+clBkiZc+/aGkWnQxKmra9pvsmA=
Subject key identifier:   D2:44:3F:8F:D0:06:60:11:19:D0:60:A4:CF:03:60:A4:E7:D0:4E:7D
Certificate issuer:       /CN=71d0ad91-658e-4240-8d73-8592460b61a7
Certificate serial:       010D0C9F4328583FB8EB3D4D5BF199E2AB9157E0
Authority key identifier: 2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/a98976c6-b2c1-3640-af55-172e3093faaf.roa
Signing time:             Fri 28 Oct 2022 18:06:42 +0000
ROA not before:           Fri 28 Oct 2022 18:06:42 +0000
ROA not after:            Thu 30 Jan 2025 05:00:00 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b8:eb:3d:4d:5b:f1:99:e2:ab:91:57:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d0ad91-658e-4240-8d73-8592460b61a7
        Validity
            Not Before: Oct 28 18:06:42 2022 GMT
            Not After : Jan 30 05:00:00 2025 GMT
        Subject: CN=be0b9abd-62f3-4fb8-9f92-8b56ddef6e93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5c:bd:f6:26:8b:c0:ff:38:ee:21:57:2f:de:
                    2d:15:3e:78:f0:06:05:6f:55:b2:c4:f8:44:a6:3d:
                    5e:a5:af:52:13:a5:93:89:e1:56:3e:3c:53:22:54:
                    54:7f:87:e0:2b:ba:0e:5a:68:82:97:a3:3f:20:1b:
                    83:3e:1f:08:47:d3:15:84:c2:5f:ba:02:9e:28:16:
                    cc:50:45:44:0f:95:52:81:37:fa:11:a5:25:0e:2e:
                    d2:2b:0e:de:b9:cc:cf:81:95:5f:89:c1:2c:a0:30:
                    e3:92:dd:e8:3b:89:60:fa:17:53:ea:e6:0f:1b:6b:
                    5c:87:5b:e1:13:3b:33:8c:38:7f:e0:fd:b3:8f:49:
                    6d:b5:87:bf:fa:bd:db:d8:22:ef:55:b6:bc:3c:3f:
                    3d:53:75:f2:1c:aa:c1:a0:1b:30:ea:2a:c3:e7:2a:
                    f1:81:bb:a7:ad:53:75:d8:70:b2:1c:18:11:96:fe:
                    ea:9b:59:59:9a:0d:ea:e4:be:b3:33:c2:6b:9c:be:
                    c4:f4:b7:64:8d:f7:0e:32:1e:56:b2:fe:b9:d8:cf:
                    38:d1:6e:22:44:b5:2c:c1:10:7d:8c:7b:68:1d:ca:
                    63:04:7f:52:4b:02:54:ab:f6:36:f3:ad:4f:00:e2:
                    cd:2d:0b:51:d7:26:04:f7:b5:c4:5f:71:5a:ef:77:
                    2f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:44:3F:8F:D0:06:60:11:19:D0:60:A4:CF:03:60:A4:E7:D0:4E:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/a98976c6-b2c1-3640-af55-172e3093faaf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7/71d0ad91-658e-4240-8d73-8592460b61a7.crl

            X509v3 Authority Key Identifier:
                keyid:2D:35:09:BA:87:E8:54:66:DC:79:AD:87:30:78:CF:20:12:0B:BF:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/71d0ad91-658e-4240-8d73-8592460b61a7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:2d:6a:9f:f9:4c:ce:42:1a:18:f4:95:b5:39:17:8b:39:61:
         75:f4:02:44:1d:32:32:45:8d:bd:a7:fa:cc:01:58:78:09:f2:
         55:2f:90:45:27:39:4f:3d:f0:40:6d:a3:5a:ff:87:88:af:ff:
         7a:23:30:86:08:ae:48:b3:7e:31:25:5b:0a:3b:4f:46:83:7c:
         56:88:5e:2c:91:2b:76:1c:10:81:29:30:d3:0b:96:84:4b:96:
         e7:57:d7:62:9c:bf:f0:8a:25:e2:4e:7b:86:55:ae:9a:fd:e7:
         76:4c:62:e0:4d:83:70:9f:00:9b:8e:95:be:09:f0:9b:da:70:
         dd:76:a2:6d:07:e0:3d:81:c4:bd:c1:f2:f6:8f:18:cc:65:59:
         cf:bd:82:63:74:69:de:2d:4b:82:ce:66:06:62:e0:dc:f6:2f:
         d7:72:6d:85:68:b2:c8:57:d2:53:fa:3a:d6:71:a5:af:0b:9f:
         f3:e4:19:24:8c:c3:d0:46:ff:df:7c:9d:c9:64:32:f9:b3:fd:
         af:4e:cd:72:d2:0d:6a:68:c6:4b:c8:a4:f2:87:56:32:74:92:
         82:fb:22:9a:90:7c:b5:1c:a0:d4:ef:70:3e:a7:52:05:14:a3:
         e6:e4:6a:c7:53:84:5c:d5:cc:56:39:b4:03:ec:83:47:22:63:
         84:67:7a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----