Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/d556af31-82c3-3a29-945e-019693d53ded.roa
File:                     d556af31-82c3-3a29-945e-019693d53ded.roa (raw, json)
Hash identifier:          CjwR9GKzbmWzV4ZIK/B17DZy1NnSRUIIr3kT6Zju6uQ=
Subject key identifier:   07:84:98:0F:5A:F2:52:21:E2:76:EA:E6:FB:5F:D1:13:BA:E1:2D:7B
Certificate issuer:       /CN=c2b3ef98-2711-4f31-8824-1bf41e5c5c17
Certificate serial:       010D0C9F43285841BF9D3A55B566758005A07240
Authority key identifier: 0F:16:CB:94:5C:C3:DB:6C:BD:60:65:B5:5D:E7:2F:ED:2D:A0:97:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/d556af31-82c3-3a29-945e-019693d53ded.roa
Signing time:             Mon 01 May 2023 18:14:44 +0000
ROA not before:           Mon 01 May 2023 18:14:44 +0000
ROA not after:            Fri 01 Aug 2025 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:bf:9d:3a:55:b5:66:75:80:05:a0:72:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2b3ef98-2711-4f31-8824-1bf41e5c5c17
        Validity
            Not Before: May  1 18:14:44 2023 GMT
            Not After : Aug  1 04:00:00 2025 GMT
        Subject: CN=efaedbc1-2ca6-4982-b278-6346919d04dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9a:36:7f:2e:08:5e:97:e6:51:a9:4b:a0:20:
                    f1:fd:22:c8:5e:4c:46:43:da:24:20:38:e6:68:eb:
                    01:c9:0d:f2:87:e9:e0:dc:dc:c9:b5:65:f7:1a:15:
                    9f:9a:b0:db:8a:9a:6d:3f:3c:00:c6:49:3e:ee:e2:
                    0e:83:e9:ad:a7:3b:d9:26:39:74:87:53:97:6a:fe:
                    29:a0:bd:56:2e:3e:9c:9d:f4:54:10:b9:96:15:b3:
                    99:7f:57:9e:bb:94:19:3f:50:05:21:24:8c:89:b8:
                    01:b6:ed:e4:8e:28:65:df:f8:1e:82:0b:cd:f1:04:
                    67:b2:48:c8:d1:62:c1:db:36:c6:ac:b4:97:de:f3:
                    9d:39:0d:bf:0d:1e:94:55:c2:0b:7c:5e:2b:bd:40:
                    1a:a0:c9:cb:36:27:62:d0:c9:cd:bc:97:25:c5:31:
                    c6:3d:ff:12:51:1b:bb:b2:a9:6e:03:cf:0a:20:4f:
                    8a:f3:08:c4:3c:5c:13:3d:7b:1b:09:07:bd:1d:02:
                    dd:43:7a:79:38:1f:12:39:e0:ee:21:67:99:d9:d4:
                    fb:1a:5a:00:d7:12:9b:28:5c:da:d6:cc:bd:66:a7:
                    7a:3a:0d:55:09:17:26:a3:ff:dc:bc:0f:f4:82:bc:
                    ad:64:06:ad:9b:9b:c2:c5:bb:6a:31:d3:ef:cf:1e:
                    cc:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:84:98:0F:5A:F2:52:21:E2:76:EA:E6:FB:5F:D1:13:BA:E1:2D:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/d556af31-82c3-3a29-945e-019693d53ded.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.crl

            X509v3 Authority Key Identifier:
                keyid:0F:16:CB:94:5C:C3:DB:6C:BD:60:65:B5:5D:E7:2F:ED:2D:A0:97:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c2b3ef98-2711-4f31-8824-1bf41e5c5c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:c1:fa:d1:f1:5e:cd:9f:27:07:f3:03:f5:1e:e5:54:28:48:
         86:7e:aa:38:13:7a:e8:2f:56:82:2f:47:2b:62:76:6b:19:23:
         87:df:a6:68:8a:9f:83:47:57:51:6c:38:2f:3f:b3:d7:28:c9:
         6f:f5:ca:ee:a9:0e:83:4f:da:ec:16:65:f8:70:f1:8f:47:80:
         15:c0:5b:4c:b6:0c:f9:c4:bd:9c:e7:c7:80:58:43:08:a9:22:
         63:b6:e1:19:cf:e8:6e:3f:ef:dc:bd:09:9d:e7:95:79:88:b8:
         41:54:a1:54:40:bd:d2:d7:28:20:39:ef:75:22:3f:4c:ef:a3:
         c2:12:a7:8f:81:4e:0a:c8:92:61:45:28:99:d4:f4:ad:46:38:
         5e:ed:37:2a:74:88:3c:30:a9:01:58:05:d9:51:d9:d8:54:04:
         41:20:d6:ab:ec:4a:4e:f5:1c:9b:3a:db:c5:d2:fe:7b:00:b6:
         cf:cf:40:54:92:d0:01:a3:b5:5b:64:2f:27:7d:4e:e7:ee:92:
         a6:31:e4:5d:c2:1a:91:34:8e:0d:e7:a8:43:3f:5d:a2:eb:5e:
         91:9a:be:48:16:c7:be:ac:95:2d:ab:cb:c9:cb:3e:9d:0e:16:
         8d:96:d1:de:f5:40:38:0a:c3:06:67:17:b7:9b:8d:7a:51:e6:
         c2:a5:ac:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----