Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3a31d61-5b31-4d27-a685-bcfb1d776d97/1eaa1049-8e1f-31ee-bd2e-ce58c14561e9.roa
File:                     1eaa1049-8e1f-31ee-bd2e-ce58c14561e9.roa (raw, json)
Hash identifier:          7vrpri729uPCUMxQpJvqfICpUp2YuJCf79PfDZ7sFgs=
Subject key identifier:   A0:D5:B3:8B:7C:99:7C:86:BF:BC:FD:EE:7D:B4:16:E4:EF:DC:84:D6
Certificate issuer:       /CN=a3a31d61-5b31-4d27-a685-bcfb1d776d97
Certificate serial:       010D0C9F4328583F54951E6B852EDA6084A28B40
Authority key identifier: 50:75:22:00:90:2E:93:C1:38:32:F1:44:DC:4E:64:6B:5B:17:AF:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3a31d61-5b31-4d27-a685-bcfb1d776d97.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3a31d61-5b31-4d27-a685-bcfb1d776d97/1eaa1049-8e1f-31ee-bd2e-ce58c14561e9.roa
Signing time:             Thu 22 Sep 2022 13:50:24 +0000
ROA not before:           Thu 22 Sep 2022 13:50:24 +0000
ROA not after:            Wed 25 Dec 2024 05:00:00 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:54:95:1e:6b:85:2e:da:60:84:a2:8b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3a31d61-5b31-4d27-a685-bcfb1d776d97
        Validity
            Not Before: Sep 22 13:50:24 2022 GMT
            Not After : Dec 25 05:00:00 2024 GMT
        Subject: CN=306ce024-21fe-4dae-93c0-38ff20b025b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:df:74:69:8e:84:ff:2f:03:9a:b1:9d:7f:9c:
                    0b:28:7a:84:b2:33:bb:f1:6b:cd:9e:e5:8d:da:8b:
                    87:65:14:34:0a:0e:b4:04:ee:86:e4:45:64:3a:5c:
                    c8:01:8f:df:6f:2a:b2:ff:81:7b:5e:88:00:97:d1:
                    bb:50:d3:4d:6d:1e:c7:28:5b:7d:01:45:20:37:28:
                    ad:5a:9a:42:46:a6:0a:38:36:87:d3:8c:a2:8b:03:
                    42:fe:d3:a6:cf:1a:7b:18:5a:b1:41:fe:95:d4:18:
                    79:e4:82:5c:d5:78:7c:8b:bd:8f:b7:01:36:9c:dc:
                    63:68:f3:3c:95:d6:39:6c:77:cc:14:af:c1:3b:74:
                    1e:d5:b9:da:70:29:5a:a2:29:e9:ec:25:37:61:ff:
                    9d:54:db:7e:bf:69:81:2c:f7:b4:74:8a:5c:04:9a:
                    5e:c9:4c:19:88:03:d3:de:f4:8d:d8:90:4e:e2:c7:
                    da:60:97:84:3d:f4:85:23:13:c6:0e:a7:20:b2:5b:
                    59:da:f6:9d:4f:50:05:38:7e:3e:aa:95:23:0d:94:
                    fb:d0:2a:68:0e:3e:f0:64:d5:be:57:f4:ee:06:04:
                    b6:96:fb:c6:8e:4b:6f:09:8d:24:dc:0a:ab:5e:58:
                    1c:fe:51:5f:66:e9:a1:00:fd:cf:ac:0a:9c:a1:44:
                    bd:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D5:B3:8B:7C:99:7C:86:BF:BC:FD:EE:7D:B4:16:E4:EF:DC:84:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3a31d61-5b31-4d27-a685-bcfb1d776d97/1eaa1049-8e1f-31ee-bd2e-ce58c14561e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3a31d61-5b31-4d27-a685-bcfb1d776d97/a3a31d61-5b31-4d27-a685-bcfb1d776d97.crl

            X509v3 Authority Key Identifier:
                keyid:50:75:22:00:90:2E:93:C1:38:32:F1:44:DC:4E:64:6B:5B:17:AF:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a3a31d61-5b31-4d27-a685-bcfb1d776d97.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:b7:63:bb:53:4e:53:d4:99:05:2c:48:9d:01:ce:f7:cc:10:
         6c:7f:62:17:30:c0:08:43:03:18:de:0e:05:c4:58:d9:ab:07:
         c7:bd:1f:b2:2f:d3:df:8a:74:a0:b4:77:bf:e6:23:5f:57:e4:
         d8:3f:83:18:90:4b:2b:94:32:b2:87:3d:b9:31:07:11:45:70:
         e9:4e:c4:1e:f0:0e:e0:93:93:76:48:db:c2:30:b2:1f:69:8e:
         50:f2:0e:f4:49:af:ae:d0:90:f3:6e:db:de:77:3f:41:b3:d9:
         fb:32:68:b8:db:9d:0a:22:9e:d0:64:04:ba:a0:c9:79:61:73:
         cd:23:38:42:84:34:cb:43:d1:76:20:73:8f:4c:e1:df:19:17:
         8e:8a:ad:17:4a:92:f3:b2:c7:64:8a:60:27:75:61:55:84:64:
         f4:cf:67:cd:68:0b:f4:78:45:1a:e1:2b:3c:eb:db:f0:68:43:
         fb:39:9b:a0:58:5f:17:dd:a1:22:7f:80:83:1c:b7:94:b4:ec:
         d6:de:66:13:2c:1b:cd:d7:1e:5c:7a:6d:6c:25:29:05:c4:59:
         f0:53:c2:16:d7:b4:b7:09:d1:fa:0c:d3:c7:38:09:6b:f9:a1:
         79:fb:74:ec:43:26:87:96:66:2a:a7:88:c7:cd:a3:0a:f4:6e:
         51:47:61:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD9UlR5rhS7aYISii0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTNhMzFkNjEtNWIzMS00ZDI3LWE2ODUtYmNmYjFkNzc2
ZDk3MB4XDTIyMDkyMjEzNTAyNFoXDTI0MTIyNTA1MDAwMFowLzEtMCsGA1UEAxMk
MzA2Y2UwMjQtMjFmZS00ZGFlLTkzYzAtMzhmZjIwYjAyNWIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd90aY6E/y8DmrGdf5wLKHqEsjO78WvNnuWN
2ouHZRQ0Cg60BO6G5EVkOlzIAY/fbyqy/4F7XogAl9G7UNNNbR7HKFt9AUUgNyit
WppCRqYKODaH04yiiwNC/tOmzxp7GFqxQf6V1Bh55IJc1Xh8i72PtwE2nNxjaPM8
ldY5bHfMFK/BO3Qe1bnacClaoinp7CU3Yf+dVNt+v2mBLPe0dIpcBJpeyUwZiAPT
3vSN2JBO4sfaYJeEPfSFIxPGDqcgsltZ2vadT1AFOH4+qpUjDZT70CpoDj7wZNW+
V/TuBgS2lvvGjktvCY0k3AqrXlgc/lFfZumhAP3PrAqcoUS9dQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKDVs4t8mXyGv7z97n20FuTv3ITWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hM2Ez
MWQ2MS01YjMxLTRkMjctYTY4NS1iY2ZiMWQ3NzZkOTcvMWVhYTEwNDktOGUxZi0z
MWVlLWJkMmUtY2U1OGMxNDU2MWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTNhMzFkNjEtNWIzMS00ZDI3LWE2
ODUtYmNmYjFkNzc2ZDk3L2EzYTMxZDYxLTViMzEtNGQyNy1hNjg1LWJjZmIxZDc3
NmQ5Ny5jcmwwHwYDVR0jBBgwFoAUUHUiAJAuk8E4MvFE3E5ka1sXr7gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hM2EzMWQ2MS01YjMxLTRkMjctYTY4NS1iY2Zi
MWQ3NzZkOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACC3Y7tTTlPUmQUsSJ0BzvfMEGx/YhcwwAhDAxjeDgXEWNmrB8e9H7Iv
09+KdKC0d7/mI19X5Ng/gxiQSyuUMrKHPbkxBxFFcOlOxB7wDuCTk3ZI28Iwsh9p
jlDyDvRJr67QkPNu2953P0Gz2fsyaLjbnQointBkBLqgyXlhc80jOEKENMtD0XYg
c49M4d8ZF46KrRdKkvOyx2SKYCd1YVWEZPTPZ81oC/R4RRrhKzzr2/BoQ/s5m6BY
XxfdoSJ/gIMct5S07NbeZhMsG83XHlx6bWwlKQXEWfBTwhbXtLcJ0foM08c4CWv5
oXn7dOxDJoeWZiqniMfNowr0blFHYQw=
-----END CERTIFICATE-----