Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6a62404-1257-4465-a899-4a84d1c41769/94e8ab9b-e48d-35dd-92c7-2b2079e30879.roa
File:                     94e8ab9b-e48d-35dd-92c7-2b2079e30879.roa (raw, json)
Hash identifier:          8BevwsQzH8SKKukHxcZmixdGcuqdAYQwGfR98opMkII=
Subject key identifier:   4E:1F:54:9C:46:99:96:B4:A2:37:45:31:0B:B5:0D:52:D7:AF:80:84
Certificate issuer:       /CN=c6a62404-1257-4465-a899-4a84d1c41769
Certificate serial:       010D0C9F4328583E02DBF466EFA73D3F996EA1A0
Authority key identifier: 58:D3:93:7A:B3:1E:A4:65:6C:C6:6E:E0:0D:01:DC:A9:81:F4:47:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6a62404-1257-4465-a899-4a84d1c41769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6a62404-1257-4465-a899-4a84d1c41769/94e8ab9b-e48d-35dd-92c7-2b2079e30879.roa
Signing time:             Tue 24 May 2022 20:45:10 +0000
ROA not before:           Tue 24 May 2022 20:45:10 +0000
ROA not after:            Thu 25 May 2023 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:02:db:f4:66:ef:a7:3d:3f:99:6e:a1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a62404-1257-4465-a899-4a84d1c41769
        Validity
            Not Before: May 24 20:45:10 2022 GMT
            Not After : May 25 04:00:00 2023 GMT
        Subject: CN=21a66f08-f80e-4f05-bc40-766c5944fa59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:db:0f:ca:cc:0a:d0:4a:6d:f5:43:0a:24:68:
                    eb:f6:16:ab:6c:b8:64:08:2b:4a:df:3d:48:ad:ee:
                    f7:72:ba:e7:53:80:e8:20:98:28:82:d3:86:17:af:
                    f9:09:b9:10:03:f6:41:da:bb:ea:f6:3b:09:15:a6:
                    d9:95:85:69:c6:e6:74:bd:09:78:ce:6c:a1:f3:cf:
                    53:0e:32:c5:43:1c:68:75:e8:17:78:da:d0:79:ce:
                    43:18:dd:4e:af:ae:09:0e:03:16:fd:24:f5:10:e1:
                    64:d1:90:ea:dd:1e:13:42:3a:17:17:65:b3:93:e3:
                    78:69:a5:4d:fe:03:8f:50:f9:1b:46:9f:79:ad:36:
                    97:c3:a1:c4:90:8e:d8:47:f8:c9:0c:7b:cf:31:88:
                    ef:b9:2b:21:4d:99:bc:cc:d8:24:5b:40:3e:12:39:
                    92:5b:f2:d8:06:5e:8b:21:2c:71:48:4b:c0:91:68:
                    26:76:a5:c3:de:97:1a:6b:ed:76:9e:4b:36:5b:12:
                    53:ba:ca:18:26:78:b8:00:bd:8f:bc:e2:6c:2f:e9:
                    36:a0:5a:7e:44:cf:f8:9e:87:fc:26:02:7b:c7:e3:
                    1e:6f:10:3d:57:ef:20:f0:57:3b:d1:64:b6:b7:d0:
                    61:9c:31:dc:0d:ad:92:41:83:48:65:8a:b7:30:ea:
                    16:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1F:54:9C:46:99:96:B4:A2:37:45:31:0B:B5:0D:52:D7:AF:80:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6a62404-1257-4465-a899-4a84d1c41769/94e8ab9b-e48d-35dd-92c7-2b2079e30879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6a62404-1257-4465-a899-4a84d1c41769/c6a62404-1257-4465-a899-4a84d1c41769.crl

            X509v3 Authority Key Identifier:
                keyid:58:D3:93:7A:B3:1E:A4:65:6C:C6:6E:E0:0D:01:DC:A9:81:F4:47:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c6a62404-1257-4465-a899-4a84d1c41769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:64:1d:b5:91:a0:84:df:63:aa:7f:8b:21:b9:2f:14:87:e9:
         fd:11:38:a7:e2:47:2d:7b:a0:14:b9:ec:6d:59:fe:c2:18:50:
         5a:1d:10:ae:ef:1e:01:93:97:3e:d2:91:4a:78:49:16:15:f9:
         63:ac:17:51:32:f7:8e:eb:df:ad:61:c1:2b:e8:63:d7:da:b9:
         68:6a:89:af:a6:26:9d:a6:76:d5:0d:72:b3:2e:aa:3e:a6:5b:
         86:6b:66:9d:33:5a:9b:65:cc:49:cf:d3:bb:f8:11:f5:bb:5f:
         f0:da:aa:22:88:0f:45:ef:48:00:4f:d8:3a:83:ea:07:df:da:
         a8:55:12:9d:cb:6c:36:8b:af:87:25:7c:5d:2e:c5:d6:fe:11:
         89:e2:8e:36:a0:68:e1:85:6f:80:00:31:06:45:11:08:c0:c1:
         8a:78:59:3c:7d:93:27:32:18:c3:75:0a:de:87:a0:0d:d3:98:
         8b:cc:09:c0:55:9b:98:00:ed:cc:34:cf:58:18:15:8c:44:c9:
         85:aa:16:64:a3:ca:54:72:11:6e:58:6e:8e:d8:c9:45:a4:e4:
         11:b8:c5:01:fb:df:30:10:ea:4b:06:66:90:62:52:58:20:5a:
         4a:65:b2:db:12:4f:aa:2a:c7:c1:53:2a:93:f6:20:89:b2:cf:
         27:a1:e5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----