Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/dd87f1f7-5bcd-3858-b1f4-f6ddc105fc8c.roa
File:                     dd87f1f7-5bcd-3858-b1f4-f6ddc105fc8c.roa (raw, json)
Hash identifier:          JoJ6E7X1pVtfl/1MBC5NaGv5mXCZ6mQXJGYkXI4Aees=
Subject key identifier:   AE:65:24:65:7F:D3:72:A4:71:E1:D2:DF:B7:3B:E5:69:C0:5B:C5:D2
Certificate issuer:       /CN=7bcff135-f392-4225-9188-da7adfa6bf6c
Certificate serial:       010D0C9F432858422144DD03D9EC35872CDAB500
Authority key identifier: C2:38:3E:1C:BD:57:8D:70:6D:04:B5:23:29:F9:A5:45:B4:5F:62:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/dd87f1f7-5bcd-3858-b1f4-f6ddc105fc8c.roa
Signing time:             Tue 06 Jun 2023 13:25:41 +0000
ROA not before:           Tue 06 Jun 2023 13:25:41 +0000
ROA not after:            Mon 04 Sep 2023 13:25:41 +0000
asID:                     399970
IP address blocks:        149.112.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:21:44:dd:03:d9:ec:35:87:2c:da:b5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bcff135-f392-4225-9188-da7adfa6bf6c
        Validity
            Not Before: Jun  6 13:25:41 2023 GMT
            Not After : Sep  4 13:25:41 2023 GMT
        Subject: CN=92b001c3-91d7-4852-8e10-8eaae43c9d69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cd:4c:87:0b:4b:f8:b8:74:d6:6b:a5:56:a9:
                    45:32:fc:8f:20:62:83:0d:60:2f:74:af:83:4b:a6:
                    71:08:55:85:5f:61:09:5a:b5:4c:3e:c5:e7:14:7f:
                    d6:d4:8a:c2:90:db:ed:fb:1f:7a:73:16:07:3e:57:
                    57:e7:d6:ce:7f:02:e9:d1:c7:80:07:80:e1:4c:8e:
                    bd:e6:a0:29:09:48:36:f7:76:bd:b4:ba:f5:8d:30:
                    f0:d3:53:68:2b:09:27:32:47:f4:75:67:af:75:23:
                    ad:d7:75:3f:8f:08:ac:4b:a6:cb:af:92:74:41:49:
                    ba:8f:ff:30:94:6c:34:ad:82:b0:be:36:c9:92:55:
                    47:46:61:18:3b:0e:8d:62:ab:61:7b:cb:ed:21:61:
                    74:b6:07:fe:94:9e:a3:44:80:7f:c4:bf:c3:d6:0b:
                    34:b1:bb:4e:18:bd:f3:a6:97:07:5c:f7:02:5c:42:
                    52:5b:62:69:3e:52:cd:5a:38:06:60:16:6a:3a:b6:
                    96:8f:04:e3:15:c6:20:17:98:49:ba:89:11:a4:9f:
                    88:ca:97:37:fe:ee:27:0b:3a:97:03:96:42:9d:0b:
                    6d:ab:a9:69:4e:eb:04:b6:5f:67:65:ec:9f:c8:9b:
                    c9:95:59:aa:38:0b:94:6f:a1:4b:5d:6a:18:08:69:
                    fa:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:65:24:65:7F:D3:72:A4:71:E1:D2:DF:B7:3B:E5:69:C0:5B:C5:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/dd87f1f7-5bcd-3858-b1f4-f6ddc105fc8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c/7bcff135-f392-4225-9188-da7adfa6bf6c.crl

            X509v3 Authority Key Identifier:
                keyid:C2:38:3E:1C:BD:57:8D:70:6D:04:B5:23:29:F9:A5:45:B4:5F:62:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7bcff135-f392-4225-9188-da7adfa6bf6c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:98:cb:ff:b0:2a:71:8e:36:06:32:61:08:bc:bf:d4:77:97:
         3d:e3:3d:a9:ff:b6:ba:ab:82:ce:b5:f1:e7:78:bd:26:85:66:
         b6:fc:57:a2:e6:da:1f:89:c1:33:d1:8b:64:b8:90:f8:72:08:
         6c:86:ef:97:9e:3c:2e:37:20:88:07:f0:47:89:2b:fd:4e:8b:
         1b:0c:8a:f3:40:d4:e2:1d:d6:de:09:b6:32:40:7e:46:84:1e:
         20:bc:84:59:07:f8:10:30:be:ba:4f:eb:d8:24:90:aa:a0:07:
         29:e6:48:ee:71:28:9c:b0:ee:13:e0:c1:e8:fd:11:3a:69:3d:
         07:da:77:ee:ef:51:49:01:75:07:98:2c:02:f5:b5:f8:fe:bc:
         28:2f:c9:ae:16:79:80:25:4d:cb:72:04:11:1c:9b:fb:bc:2c:
         84:6a:01:8a:a4:38:9a:80:9b:f4:70:92:73:65:77:70:40:10:
         c3:27:bf:49:26:b5:88:d6:a9:c2:a3:f9:26:d5:d3:a3:ad:f7:
         98:dd:dd:f0:36:de:43:41:c3:ad:3c:87:c1:0b:ba:66:64:80:
         e9:1a:72:3a:89:f6:35:aa:f2:73:ed:dc:dc:fe:6d:c1:be:68:
         5e:c2:2d:c8:6f:c5:6b:aa:e0:93:e2:e7:e5:a3:bb:5d:ae:82:
         d6:fd:9a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----