Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/7855cf26-b3e6-3159-9018-33dbd2e1201b.roa
File:                     7855cf26-b3e6-3159-9018-33dbd2e1201b.roa (raw, json)
Hash identifier:          xAuOaMX8h6kt8A1qDVRQXgQFTh1fpXhS9zQFIIFFD/0=
Subject key identifier:   C0:D4:C0:AA:98:93:C9:DD:98:BC:BA:A7:A0:7F:A1:15:29:78:56:44
Certificate issuer:       /CN=7e2fdf07-a7cd-43db-86a0-386dddefb544
Certificate serial:       010D0C9F43285841EA1E8CB7732503B188B3F400
Authority key identifier: 4E:36:07:5A:5E:C0:8D:A5:79:75:92:46:29:00:87:29:2A:46:86:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/7855cf26-b3e6-3159-9018-33dbd2e1201b.roa
Signing time:             Wed 17 May 2023 19:19:02 +0000
ROA not before:           Wed 17 May 2023 19:19:02 +0000
ROA not after:            Tue 15 Aug 2023 19:19:02 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ea:1e:8c:b7:73:25:03:b1:88:b3:f4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2fdf07-a7cd-43db-86a0-386dddefb544
        Validity
            Not Before: May 17 19:19:02 2023 GMT
            Not After : Aug 15 19:19:02 2023 GMT
        Subject: CN=259fb045-2cef-46da-a6dd-4c2e52953c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:93:af:ce:c8:88:b1:87:ae:ea:4d:32:3d:66:
                    35:80:6d:65:87:e5:e2:12:34:51:01:4f:cf:75:3a:
                    f6:a8:32:9d:16:76:0c:87:2f:7d:db:fa:3c:3b:3a:
                    15:c0:4b:cc:d9:8b:07:44:5f:83:60:53:cf:2f:c4:
                    cf:c7:d3:a4:72:f9:6c:ad:3c:bd:56:39:c4:f6:f9:
                    bc:cb:26:0c:00:1c:d5:a3:f1:b5:80:91:b9:a6:61:
                    e3:b6:50:23:b4:11:f0:20:26:5b:cc:41:c4:56:5b:
                    54:c4:bc:9e:37:76:08:1b:47:ea:50:04:eb:ab:90:
                    38:cf:a7:80:e4:d7:27:db:3d:56:8c:d2:31:14:f8:
                    2a:7f:31:6b:04:ed:83:cc:fb:64:c8:30:59:2a:7e:
                    17:e7:82:f8:f6:2c:c0:da:48:d2:b0:b9:b1:84:0c:
                    a6:7b:ec:fa:ae:25:1b:30:9e:47:d5:ae:7e:bd:57:
                    be:ef:4a:04:2b:0f:a4:eb:00:62:44:bb:08:93:0b:
                    48:db:07:fe:89:9b:f0:db:00:d9:7b:97:c2:bd:6b:
                    3f:2d:54:c9:34:f1:d2:df:3b:e1:ed:a8:bd:7e:14:
                    9f:eb:2e:49:9b:69:f1:bc:e5:a3:e4:aa:e3:23:c9:
                    be:9e:34:52:07:70:37:c9:06:69:01:fc:a5:37:c4:
                    80:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:D4:C0:AA:98:93:C9:DD:98:BC:BA:A7:A0:7F:A1:15:29:78:56:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/7855cf26-b3e6-3159-9018-33dbd2e1201b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/7e2fdf07-a7cd-43db-86a0-386dddefb544.crl

            X509v3 Authority Key Identifier:
                keyid:4E:36:07:5A:5E:C0:8D:A5:79:75:92:46:29:00:87:29:2A:46:86:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:9e:81:7b:c8:dc:dc:5b:2e:e3:9d:c0:45:51:c1:a7:b2:5b:
         fe:10:94:37:51:6f:f0:d2:13:86:3e:b7:51:31:6b:df:18:bd:
         30:e1:df:f9:d5:92:92:29:f0:0a:25:82:28:12:43:64:f6:fb:
         61:d2:88:c1:d2:50:52:0d:2f:b8:b2:48:9d:70:d2:77:3e:f4:
         ce:e9:2a:1b:20:ca:60:f3:7f:a4:1e:ae:e7:af:41:52:97:7a:
         8a:4d:73:af:71:c2:cd:70:e7:7c:e0:2d:e8:a5:86:c3:8a:50:
         3f:e9:48:09:dd:43:ef:e1:f9:b8:e3:51:fe:dd:4e:33:f3:4c:
         a9:22:4e:58:36:ac:16:5f:df:10:ac:2a:bd:b1:31:b5:94:e5:
         5d:14:a1:4a:ad:ce:74:a0:96:af:5c:f8:2a:c8:93:e9:2f:96:
         64:78:1e:a4:78:33:02:1b:6b:17:1e:ca:cb:50:4c:a5:e0:15:
         24:fa:b3:0e:8b:92:f1:8c:93:18:ab:27:03:58:ee:f9:03:ac:
         a8:3f:07:e0:ac:26:d5:3d:4c:48:4f:cf:90:a2:19:78:7c:69:
         92:60:b1:70:96:96:fd:1b:06:3b:bc:b8:52:03:c3:90:15:c7:
         7a:ea:89:78:73:86:2f:97:94:21:49:89:11:b3:ac:42:63:87:
         31:f8:1b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:50 2023 by rpki-client on console-fra.rpki-client.org