Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/caee1942-701d-3f3a-907a-46d2bfec1b3d.roa
File:                     caee1942-701d-3f3a-907a-46d2bfec1b3d.roa (raw, json)
Hash identifier:          tf16KjyOCJoFJtz5vRTfTAtg4Jify1HUy4EB+v/TFVE=
Subject key identifier:   BE:29:B4:6A:5C:FE:EA:32:47:E6:6D:1C:18:7F:B3:2D:7D:19:6C:E2
Certificate issuer:       /CN=c2b3ef98-2711-4f31-8824-1bf41e5c5c17
Certificate serial:       010D0C9F43285841BF9CC6E372E2C66DCABD9FC0
Authority key identifier: 0F:16:CB:94:5C:C3:DB:6C:BD:60:65:B5:5D:E7:2F:ED:2D:A0:97:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/caee1942-701d-3f3a-907a-46d2bfec1b3d.roa
Signing time:             Mon 01 May 2023 18:14:44 +0000
ROA not before:           Mon 01 May 2023 18:14:44 +0000
ROA not after:            Sat 02 Aug 2025 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:bf:9c:c6:e3:72:e2:c6:6d:ca:bd:9f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b3ef98-2711-4f31-8824-1bf41e5c5c17
        Validity
            Not Before: May  1 18:14:44 2023 GMT
            Not After : Aug  2 04:00:00 2025 GMT
        Subject: CN=fe64a78d-3361-4bf5-97d0-d22dddfb5a1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4a:d1:48:5c:63:da:7c:67:5e:a0:81:ca:54:
                    36:d9:1e:88:94:3c:79:de:55:14:b4:3c:57:d6:35:
                    8e:70:d1:a7:da:3e:f1:a7:f6:45:74:91:b3:48:78:
                    64:1d:ab:cf:61:94:aa:09:7a:94:5d:b4:86:24:7e:
                    f6:39:59:c2:4e:07:c8:d7:d1:ad:15:56:93:41:9f:
                    34:dd:0f:32:ff:6c:01:5a:83:4b:32:e6:8c:41:c2:
                    24:2a:f9:32:14:2e:f7:33:1c:6d:2a:e8:c3:ce:9b:
                    88:62:82:24:05:4c:96:bc:82:33:cd:cb:d5:60:08:
                    9e:d7:87:5a:64:6a:ba:6a:22:4c:e7:ab:8b:d2:2a:
                    7e:ac:e2:c0:56:54:2a:ce:12:9e:98:50:4d:5c:da:
                    11:fc:3e:b2:9f:8e:2c:3d:4f:0a:6f:40:29:d7:75:
                    be:cf:e6:46:d5:2c:4d:b3:f7:26:69:9e:1e:43:e3:
                    02:96:e5:26:a1:5e:3c:80:11:13:a4:7a:a9:16:64:
                    a4:e6:d7:fe:67:3a:e0:8e:67:d1:d3:fa:42:77:9e:
                    86:0e:11:73:d2:1e:72:b6:5f:4a:ee:41:8b:2b:df:
                    1f:5d:80:0e:8c:2c:d4:28:87:a2:90:22:3a:45:bb:
                    de:d5:f4:9c:de:e6:1c:60:7c:c4:bc:2c:5c:46:6d:
                    3f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:29:B4:6A:5C:FE:EA:32:47:E6:6D:1C:18:7F:B3:2D:7D:19:6C:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/caee1942-701d-3f3a-907a-46d2bfec1b3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.crl

            X509v3 Authority Key Identifier:
                keyid:0F:16:CB:94:5C:C3:DB:6C:BD:60:65:B5:5D:E7:2F:ED:2D:A0:97:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:3b:77:3c:ae:7c:77:88:4e:d2:65:1b:1a:ca:5f:0d:9d:9b:
         e2:24:4a:f7:79:32:6f:9c:65:74:35:82:84:28:ef:9c:5e:4b:
         44:0f:02:ee:fc:85:a3:ea:91:55:5f:3b:81:ba:d2:e7:8f:6c:
         29:37:dd:4a:45:5d:00:dd:25:d1:9a:cf:af:13:18:5e:6a:89:
         b5:e9:0e:e0:ae:71:85:cd:fa:81:1f:e5:b5:12:10:14:92:20:
         9d:71:df:b9:c9:b3:22:f1:c4:7a:20:64:f2:d3:2d:70:79:94:
         d5:0a:85:d6:23:5f:65:9e:f1:13:31:e7:dd:f6:3f:0f:3f:14:
         cf:1e:ba:6f:f5:0c:92:4d:9b:b8:80:ce:aa:13:3c:06:37:67:
         a8:86:53:69:89:d1:a2:a5:97:b1:12:40:a1:f6:dc:f4:e5:59:
         6d:78:67:2e:6e:d8:fc:25:74:e4:68:62:16:3a:76:05:81:0d:
         e2:d6:81:8b:7b:e5:de:8f:72:fa:87:f3:a6:e8:a0:87:7b:d4:
         16:22:38:4f:3c:32:83:05:58:dc:1e:56:df:c2:4d:f7:21:1d:
         27:12:0d:04:07:30:d8:04:c8:9a:fe:4b:b0:3b:4f:24:22:50:
         cc:f3:03:3f:5a:7e:a9:86:4c:c6:d4:c3:fe:d0:fd:bb:57:d7:
         39:f1:7f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----