Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/7a767102-bda3-345a-a467-e4f146fa02c6.roa
File:                     7a767102-bda3-345a-a467-e4f146fa02c6.roa (raw, json)
Hash identifier:          RPA6dF5gnoejXGCRHB7rDz+8dddE9AOcB0D1tKUge5k=
Subject key identifier:   43:4B:49:78:BF:43:91:93:67:F2:A9:8C:C6:8A:D9:8C:66:5B:5F:A0
Certificate issuer:       /CN=7e2fdf07-a7cd-43db-86a0-386dddefb544
Certificate serial:       010D0C9F43285841EC868EFBBDB098D767CC52D0
Authority key identifier: 4E:36:07:5A:5E:C0:8D:A5:79:75:92:46:29:00:87:29:2A:46:86:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/7a767102-bda3-345a-a467-e4f146fa02c6.roa
Signing time:             Thu 18 May 2023 16:00:13 +0000
ROA not before:           Thu 18 May 2023 16:00:13 +0000
ROA not after:            Wed 16 Aug 2023 16:00:13 +0000
asID:                     399970
IP address blocks:        149.112.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ec:86:8e:fb:bd:b0:98:d7:67:cc:52:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2fdf07-a7cd-43db-86a0-386dddefb544
        Validity
            Not Before: May 18 16:00:13 2023 GMT
            Not After : Aug 16 16:00:13 2023 GMT
        Subject: CN=5841753c-cb8c-45a7-a6a0-65877d28ddd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:15:7b:ad:b1:83:eb:02:f2:c7:9d:c5:98:86:
                    1b:d9:aa:e5:b6:13:d2:30:50:ad:e3:24:b3:f7:d3:
                    ca:3a:bd:e3:e2:f9:92:f4:05:76:f5:4c:44:ed:4a:
                    a2:bb:05:21:54:b2:5b:d7:7a:c6:1b:0c:1a:5f:b3:
                    18:7a:e9:d6:1b:d0:8e:b0:cd:a8:79:fe:b4:94:3d:
                    c3:ec:02:be:64:02:18:b7:61:1e:e1:35:ee:48:08:
                    6a:5e:47:69:04:e7:41:bd:3c:22:c8:44:f5:c6:61:
                    e2:a5:39:de:23:79:fe:f9:d0:b8:00:ce:a9:fc:a0:
                    0d:30:39:5b:b8:03:b3:a8:63:d8:5c:cf:63:b8:4a:
                    11:6c:0c:a9:9e:26:d2:2e:e8:a3:79:86:b7:74:38:
                    cd:b0:d1:b9:89:56:9c:e4:24:26:80:7f:69:7f:ef:
                    f7:00:16:48:68:4b:54:5e:9d:7e:0b:ec:5f:1c:43:
                    24:d4:a5:5a:59:1b:78:a0:dd:04:8e:96:90:c6:e5:
                    69:44:f4:13:1b:1c:61:0d:d5:a9:fc:67:b8:67:ad:
                    7f:cf:3f:b8:53:db:f7:74:71:e8:1b:cb:d0:f8:59:
                    7f:4d:32:33:09:92:8e:26:23:74:97:9e:47:85:cc:
                    5a:3d:cd:3b:8c:3a:4d:6d:12:de:6d:03:55:02:65:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:4B:49:78:BF:43:91:93:67:F2:A9:8C:C6:8A:D9:8C:66:5B:5F:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/7a767102-bda3-345a-a467-e4f146fa02c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/7e2fdf07-a7cd-43db-86a0-386dddefb544.crl

            X509v3 Authority Key Identifier:
                keyid:4E:36:07:5A:5E:C0:8D:A5:79:75:92:46:29:00:87:29:2A:46:86:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:37:2e:b2:ca:ac:9e:4d:45:a1:e8:33:14:17:fc:c9:c5:8a:
         f4:82:12:f7:b1:43:d0:02:a4:eb:14:4f:09:e6:0d:24:c0:c0:
         4a:26:e9:00:af:9a:65:c3:2b:dd:68:42:e6:f6:3e:7a:99:6f:
         75:d6:f5:d6:a9:0f:43:bb:2a:4d:ad:5f:e5:a5:43:26:ed:25:
         1d:b8:65:2b:27:9a:95:ce:bc:50:d4:be:34:bd:52:63:4f:d1:
         95:40:a3:c8:4f:54:f3:2b:da:e5:96:a1:30:99:e9:30:4c:e2:
         73:0b:b2:aa:1b:64:0c:ab:55:01:d3:33:07:87:07:5f:0f:3e:
         a4:26:f9:ac:d7:fd:48:09:7d:8d:57:cd:96:82:65:c1:84:b9:
         4e:89:2a:ee:fc:b8:0f:1c:b3:26:04:88:ce:39:90:9c:9e:7e:
         a1:e3:8f:72:75:2a:84:77:11:4d:68:bb:3a:5b:fe:cc:f4:fb:
         21:e0:f3:ae:bd:f9:77:1a:90:7d:1a:80:e9:59:90:c4:bf:c7:
         53:b0:93:17:c5:a8:be:93:7f:9b:04:f2:57:7a:5b:53:d2:ca:
         40:f3:c4:bc:77:0a:5f:5f:29:1f:f9:93:f2:d7:43:54:1b:9b:
         e4:5c:c3:a6:64:83:75:4c:c6:68:9a:84:23:0b:42:19:09:a3:
         29:f1:42:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----