Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/895260a6-420c-462e-82ed-4fe6e0e2da31/848d1780-c831-3b3c-b04c-0b036419c867.roa
File:                     848d1780-c831-3b3c-b04c-0b036419c867.roa (raw, json)
Hash identifier:          umnIskYpPNFH650hCDB4IULAQzyJPLLD7+d4EbLsxtY=
Subject key identifier:   EA:33:70:85:C4:D5:CB:2A:C1:94:BE:9B:52:0E:75:15:86:28:C0:F7
Certificate issuer:       /CN=895260a6-420c-462e-82ed-4fe6e0e2da31
Certificate serial:       010D0C9F43285841DE95E6EDCB16611C40C59F80
Authority key identifier: 53:1E:01:00:AE:32:0F:85:8E:9C:14:A3:12:30:99:8F:25:F4:71:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/895260a6-420c-462e-82ed-4fe6e0e2da31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/895260a6-420c-462e-82ed-4fe6e0e2da31/848d1780-c831-3b3c-b04c-0b036419c867.roa
Signing time:             Sat 13 May 2023 16:09:49 +0000
ROA not before:           Sat 13 May 2023 16:09:49 +0000
ROA not after:            Fri 11 Aug 2023 16:09:49 +0000
asID:                     26340
IP address blocks:        149.112.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:de:95:e6:ed:cb:16:61:1c:40:c5:9f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=895260a6-420c-462e-82ed-4fe6e0e2da31
        Validity
            Not Before: May 13 16:09:49 2023 GMT
            Not After : Aug 11 16:09:49 2023 GMT
        Subject: CN=ea22d1b6-7bee-410d-978a-edc2282cb89a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:92:1b:e1:7a:6e:b6:f8:a1:19:83:a6:92:ff:
                    90:23:a2:93:d1:29:c7:c1:ff:6b:a1:64:76:f9:c0:
                    ce:c6:e9:f1:d5:98:42:db:d7:93:27:d3:b6:08:19:
                    bd:8f:9b:fc:09:84:75:ae:85:e4:3a:08:50:25:f2:
                    11:85:13:96:7e:c0:51:f7:c5:78:93:19:78:3a:ff:
                    c5:79:39:8e:d5:fd:01:57:a1:11:2c:05:7d:49:eb:
                    dd:7b:90:e3:4f:ff:e8:79:97:0f:f5:89:61:d3:e1:
                    ac:14:4b:3d:f1:3b:dc:62:25:98:2d:f1:da:95:51:
                    b5:f8:f6:8b:18:ae:ef:6c:10:89:bc:b9:a2:66:cc:
                    5c:66:20:c0:24:fb:0c:d4:f4:7a:69:a2:98:0f:3c:
                    50:7a:3f:1b:cd:e1:8f:c2:99:93:cb:3c:15:5f:45:
                    64:cd:56:10:b0:be:57:3f:a7:fe:e9:4b:e1:48:e7:
                    5d:ee:5b:92:18:ab:df:2c:25:1f:c4:4a:67:fa:ce:
                    6d:5e:bb:b5:b6:4d:0a:e3:da:4a:98:20:f0:4e:40:
                    2f:c6:0c:b3:4f:5b:0b:c4:b6:79:2c:b5:ee:41:3c:
                    75:23:e6:82:23:4a:f7:94:1b:51:20:a8:46:55:05:
                    10:be:50:bb:a4:2c:89:b1:37:47:12:d7:49:ff:bc:
                    cf:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:33:70:85:C4:D5:CB:2A:C1:94:BE:9B:52:0E:75:15:86:28:C0:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/895260a6-420c-462e-82ed-4fe6e0e2da31/848d1780-c831-3b3c-b04c-0b036419c867.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/895260a6-420c-462e-82ed-4fe6e0e2da31/895260a6-420c-462e-82ed-4fe6e0e2da31.crl

            X509v3 Authority Key Identifier:
                keyid:53:1E:01:00:AE:32:0F:85:8E:9C:14:A3:12:30:99:8F:25:F4:71:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/895260a6-420c-462e-82ed-4fe6e0e2da31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:41:3d:ee:30:f7:21:99:ca:33:2d:b1:48:48:d5:77:21:bb:
         35:f4:10:fa:e1:d0:b1:07:f9:ac:de:e4:5e:42:66:af:56:ca:
         60:e8:7c:6f:df:3c:40:00:10:ef:fd:25:ca:51:4d:44:55:79:
         2b:49:7d:7d:93:02:55:39:64:c8:3b:1c:f1:5a:0f:ad:cd:c1:
         e9:c5:e6:af:d5:25:c8:4d:23:d5:f2:36:94:25:b8:ac:6c:f6:
         a4:49:4f:e7:4b:43:01:93:92:c5:5f:a6:53:f5:59:77:cc:2c:
         10:83:cc:13:c6:c9:4b:6c:fe:70:ad:6a:10:45:ba:d8:a0:b4:
         1b:8d:5a:9f:f0:2a:0b:f6:3c:8a:49:52:2b:19:11:8f:7e:a8:
         b8:5a:9e:27:bb:72:2b:f2:c2:88:da:0d:f4:85:3f:b6:08:b0:
         5a:b7:28:7a:b2:f9:21:42:18:fa:17:04:f7:52:84:d7:60:6a:
         b4:e1:bd:53:75:74:c5:f9:a1:2e:92:1b:32:e8:24:4b:92:c1:
         fb:84:2b:39:be:d2:cd:55:36:51:e5:86:7d:49:7c:db:34:5f:
         53:ba:8d:0c:d0:09:ea:3f:63:6c:c5:50:71:71:5a:e8:5c:70:
         7a:86:e0:e4:b8:ee:77:46:a4:21:a7:b7:0e:47:b1:e0:da:0c:
         ef:ed:39:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----