Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/75718fe8-bfa6-389b-be38-d63f2555f045.roa
File:                     75718fe8-bfa6-389b-be38-d63f2555f045.roa (raw, json)
Hash identifier:          vGsIvY4Cy9HfsXS/FBYT338e1VBwBqKGiKmjjpujSv4=
Subject key identifier:   8F:2D:6F:06:3D:81:C1:DA:15:6E:37:FA:E3:64:5A:E7:92:16:34:76
Certificate issuer:       /CN=c2b3ef98-2711-4f31-8824-1bf41e5c5c17
Certificate serial:       010D0C9F43285841BD549C4C1191E48BA38CC190
Authority key identifier: 0F:16:CB:94:5C:C3:DB:6C:BD:60:65:B5:5D:E7:2F:ED:2D:A0:97:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/75718fe8-bfa6-389b-be38-d63f2555f045.roa
Signing time:             Mon 01 May 2023 18:14:44 +0000
ROA not before:           Mon 01 May 2023 18:14:44 +0000
ROA not after:            Sun 03 Aug 2025 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:bd:54:9c:4c:11:91:e4:8b:a3:8c:c1:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b3ef98-2711-4f31-8824-1bf41e5c5c17
        Validity
            Not Before: May  1 18:14:44 2023 GMT
            Not After : Aug  3 04:00:00 2025 GMT
        Subject: CN=9b2c8073-e53f-4c1c-b150-d6209fca3e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ea:9c:e0:b3:7c:8e:77:4b:13:71:6a:24:86:
                    31:ab:52:ac:64:67:06:52:97:2d:35:ea:25:07:b7:
                    d9:53:ef:cd:07:82:27:6d:cb:c7:38:66:6b:f9:a4:
                    74:d3:c5:04:18:e6:5a:2d:97:e9:73:b6:be:e1:c2:
                    e7:59:2c:ef:8c:19:e5:15:0f:74:16:2b:ed:fd:72:
                    3f:6f:61:ee:f6:7c:3e:11:cd:6f:f8:7c:97:b4:43:
                    54:7a:2c:e7:54:8f:84:e8:83:6d:b8:1c:16:62:08:
                    60:2c:e4:c0:c3:9c:b8:1d:df:42:9b:17:fd:25:38:
                    dc:f2:34:89:af:12:ab:1f:d7:72:f8:ae:d7:88:30:
                    ee:00:a8:54:26:0a:24:be:c2:0f:82:59:90:65:e0:
                    05:74:c7:2a:c2:a7:dc:6c:ca:21:4b:86:69:d6:90:
                    e5:68:2f:92:d1:35:4e:1d:2f:ce:94:6f:0f:b4:99:
                    b7:96:e9:ff:0f:21:10:0d:b6:6c:54:60:2d:6f:ce:
                    9c:05:f2:4f:8e:41:a1:ff:e8:3b:cb:28:66:2c:71:
                    15:06:47:87:07:b1:f1:7b:00:99:46:ed:bb:5c:87:
                    46:27:65:1c:79:8e:c2:5f:05:76:d0:3d:0e:69:dd:
                    7a:dc:3f:14:03:c3:41:e0:79:5e:02:4c:2c:1f:cc:
                    8b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2D:6F:06:3D:81:C1:DA:15:6E:37:FA:E3:64:5A:E7:92:16:34:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/75718fe8-bfa6-389b-be38-d63f2555f045.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.crl

            X509v3 Authority Key Identifier:
                keyid:0F:16:CB:94:5C:C3:DB:6C:BD:60:65:B5:5D:E7:2F:ED:2D:A0:97:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:89:aa:f5:9e:f6:0c:b3:ec:19:a1:29:b8:92:fa:6e:6c:64:
         b0:24:66:13:89:9d:7e:50:69:49:b1:94:39:ec:37:53:f7:77:
         ab:33:ba:f0:88:86:11:36:83:42:8a:e5:7a:6a:b3:39:c2:dc:
         d7:a8:36:bc:f1:87:83:5a:2e:56:59:26:88:a0:0b:05:5e:e0:
         a1:6b:98:b4:52:de:2c:f8:cc:91:d2:45:98:d1:a7:a6:69:9e:
         17:e7:e1:49:f5:ea:88:88:a6:bd:82:8e:f6:ab:f2:ed:a9:35:
         48:05:83:70:0f:7e:80:79:63:bf:f8:58:bd:f8:e9:65:97:6f:
         23:7b:54:f2:a7:91:ae:9c:d5:af:13:b1:50:74:12:b7:24:05:
         0a:99:6a:54:e3:26:23:29:8b:2e:d7:9e:90:9e:10:7e:d2:6f:
         dc:26:97:32:a7:56:66:ed:e4:8d:36:11:65:57:da:44:c5:3a:
         d4:bf:9a:a2:13:66:4e:b5:ce:8a:ab:bb:36:86:48:2d:e1:d2:
         f7:b5:74:15:e9:20:7c:85:66:84:30:36:a9:c3:ee:b9:de:e2:
         7b:bd:e8:bb:9e:2e:87:b5:ab:7b:ca:34:22:15:49:31:f3:7c:
         73:b8:c5:6a:22:d6:92:6e:b4:18:56:12:0b:bf:6a:ce:a6:c3:
         aa:b0:4f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----