Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ffb2b5c-791f-4fbb-883d-0cc94ab7a121/d202cf4c-d6cf-381e-9fbb-642bd0c7b3b3.roa
File:                     d202cf4c-d6cf-381e-9fbb-642bd0c7b3b3.roa (raw, json)
Hash identifier:          BRz9Y6cPhvZ4XnDYufle7c1K2PcXp+AhizxgDEOKNcw=
Subject key identifier:   E5:45:32:90:13:0E:25:D2:6D:B7:3E:F0:40:76:52:E8:F9:B5:AC:57
Certificate issuer:       /CN=1ffb2b5c-791f-4fbb-883d-0cc94ab7a121
Certificate serial:       010D0C9F4328583DAF01C9ADB5327629D3DB1620
Authority key identifier: E1:8B:75:E4:46:D4:AA:12:AD:43:47:F6:B1:5B:94:E3:44:C6:75:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ffb2b5c-791f-4fbb-883d-0cc94ab7a121.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ffb2b5c-791f-4fbb-883d-0cc94ab7a121/d202cf4c-d6cf-381e-9fbb-642bd0c7b3b3.roa
Signing time:             Sun 24 Apr 2022 19:47:30 +0000
ROA not before:           Sun 24 Apr 2022 19:47:30 +0000
ROA not after:            Sat 27 Jul 2024 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.153.0/24 maxlen: 24
                          149.112.154.0/24 maxlen: 24
                          149.112.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:af:01:c9:ad:b5:32:76:29:d3:db:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ffb2b5c-791f-4fbb-883d-0cc94ab7a121
        Validity
            Not Before: Apr 24 19:47:30 2022 GMT
            Not After : Jul 27 04:00:00 2024 GMT
        Subject: CN=ecfcbd04-05e4-4fa9-9680-e3eeb08b983a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:70:f5:8e:06:b8:4a:b3:69:ac:59:43:c7:aa:
                    04:9c:1d:5d:fa:21:eb:2f:06:51:88:9a:4e:d4:d7:
                    fe:31:e0:fc:60:bd:6a:0e:c9:d1:57:ef:5e:3c:74:
                    ad:e3:5f:75:5d:38:c5:a0:f6:29:a0:f5:ff:b6:1a:
                    b5:d6:59:ee:17:0b:40:c6:4d:2f:b2:79:d9:58:45:
                    8c:c7:2c:6b:4a:0a:bd:fa:62:84:3e:c7:64:c1:22:
                    60:0f:f2:a5:0c:14:76:ac:6d:ca:57:1b:c4:4d:0c:
                    a8:03:41:86:e8:6c:75:4c:af:d0:2f:87:cb:1a:c6:
                    cf:37:95:37:36:a8:75:e3:22:ce:20:66:66:03:32:
                    84:5f:78:41:0d:9d:9e:89:47:70:d0:8f:3b:f7:2d:
                    0c:a3:8c:2d:57:a4:6f:be:53:ea:b1:95:c5:be:df:
                    9e:3c:3c:c3:2f:4b:51:82:2f:4f:95:c5:d8:81:ae:
                    1d:18:5b:dd:c5:73:82:13:c6:e8:39:e0:ef:6c:c0:
                    58:a9:b5:09:fc:ec:8e:60:ed:8b:79:4a:47:c6:18:
                    ba:49:a5:53:21:50:c4:0c:da:a6:6d:2d:d8:ed:d9:
                    a3:09:2b:aa:4b:1e:73:fd:e9:3a:00:39:4a:1a:98:
                    6f:5f:7d:64:dc:6c:5a:c6:0a:df:d7:e5:9e:b5:d2:
                    9d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:45:32:90:13:0E:25:D2:6D:B7:3E:F0:40:76:52:E8:F9:B5:AC:57
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ffb2b5c-791f-4fbb-883d-0cc94ab7a121/d202cf4c-d6cf-381e-9fbb-642bd0c7b3b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ffb2b5c-791f-4fbb-883d-0cc94ab7a121/1ffb2b5c-791f-4fbb-883d-0cc94ab7a121.crl

            X509v3 Authority Key Identifier:
                keyid:E1:8B:75:E4:46:D4:AA:12:AD:43:47:F6:B1:5B:94:E3:44:C6:75:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ffb2b5c-791f-4fbb-883d-0cc94ab7a121.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.153.0-149.112.155.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b7:5b:bf:aa:5f:0a:c1:82:d2:61:94:56:21:8a:a1:fe:49:
         fa:ac:e4:61:38:cb:33:be:94:d1:ee:a2:13:b5:b5:47:e4:57:
         fd:e1:fd:77:6c:58:a8:97:3f:69:ab:64:a2:93:cd:73:f3:b7:
         57:05:6d:aa:3c:d2:11:19:0d:7f:cb:f3:8c:26:1d:60:7b:e2:
         0a:9f:c4:84:fe:78:48:f6:f8:8e:54:e4:ee:83:75:ed:e2:8d:
         be:c5:0c:ca:4c:7f:73:41:ea:be:9d:50:50:1a:c9:ac:b5:0a:
         a2:15:86:70:39:22:51:f8:7d:97:7c:52:ee:33:d1:0d:c1:ba:
         03:4c:4d:07:0a:44:0e:32:67:d2:f0:ee:d4:28:28:69:fb:90:
         5f:5d:0c:15:e5:16:18:65:ab:0f:ce:09:78:d6:79:2b:21:25:
         0f:de:a4:17:c4:3f:e9:59:b1:e5:c3:02:8b:b5:88:7f:cf:83:
         68:e3:2e:5d:db:c7:8f:1b:5d:c3:bc:3d:33:c9:a8:6f:7e:4b:
         79:32:71:ae:ea:f9:1c:8c:ae:33:22:bb:a8:59:e2:db:bb:5b:
         35:63:c2:0a:ae:07:7b:4e:89:6e:d0:9a:ac:68:bf:44:c9:c4:
         4c:66:a2:c3:1d:00:82:4c:7d:06:ca:d0:1e:25:0a:f8:87:b2:
         d4:6c:8d:9c
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWD2vAcmttTJ2KdPbFiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZmYjJiNWMtNzkxZi00ZmJiLTg4M2QtMGNjOTRhYjdh
MTIxMB4XDTIyMDQyNDE5NDczMFoXDTI0MDcyNzA0MDAwMFowLzEtMCsGA1UEAxMk
ZWNmY2JkMDQtMDVlNC00ZmE5LTk2ODAtZTNlZWIwOGI5ODNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnD1jga4SrNprFlDx6oEnB1d+iHrLwZRiJpO
1Nf+MeD8YL1qDsnRV+9ePHSt4191XTjFoPYpoPX/thq11lnuFwtAxk0vsnnZWEWM
xyxrSgq9+mKEPsdkwSJgD/KlDBR2rG3KVxvETQyoA0GG6Gx1TK/QL4fLGsbPN5U3
Nqh14yLOIGZmAzKEX3hBDZ2eiUdw0I879y0Mo4wtV6RvvlPqsZXFvt+ePDzDL0tR
gi9PlcXYga4dGFvdxXOCE8boOeDvbMBYqbUJ/OyOYO2LeUpHxhi6SaVTIVDEDNqm
bS3Y7dmjCSuqSx5z/ek6ADlKGphvX31k3Gxaxgrf1+WetdKdvQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFOVFMpATDiXSbbc+8EB2Uuj5taxXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xZmZi
MmI1Yy03OTFmLTRmYmItODgzZC0wY2M5NGFiN2ExMjEvZDIwMmNmNGMtZDZjZi0z
ODFlLTlmYmItNjQyYmQwYzdiM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWZmYjJiNWMtNzkxZi00ZmJiLTg4
M2QtMGNjOTRhYjdhMTIxLzFmZmIyYjVjLTc5MWYtNGZiYi04ODNkLTBjYzk0YWI3
YTEyMS5jcmwwHwYDVR0jBBgwFoAU4Yt15EbUqhKtQ0f2sVuU40TGdYwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xZmZiMmI1Yy03OTFmLTRmYmItODgzZC0wY2M5
NGFiN2ExMjEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACVcJkD
BAKVcJgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEACLdbv6pfCsGC0mGUViGKof5J+qzkYTjLM76U0e6iE7W1
R+RX/eH9d2xYqJc/aatkopPNc/O3VwVtqjzSERkNf8vzjCYdYHviCp/EhP54SPb4
jlTk7oN17eKNvsUMykx/c0Hqvp1QUBrJrLUKohWGcDkiUfh9l3xS7jPRDcG6A0xN
BwpEDjJn0vDu1CgoafuQX10MFeUWGGWrD84JeNZ5KyElD96kF8Q/6Vmx5cMCi7WI
f8+DaOMuXdvHjxtdw7w9M8mob35LeTJxrur5HIyuMyK7qFni27tbNWPCCq4He06J
btCarGi/RMnETGaiwx0Agkx9BsrQHiUK+Iey1GyNnA==
-----END CERTIFICATE-----