Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2962f231-d7d7-449b-8a1f-b17a96237c00/bb6b5f83-b90a-3ac0-b1a5-e11fd583c2a9.roa
File:                     bb6b5f83-b90a-3ac0-b1a5-e11fd583c2a9.roa (raw, json)
Hash identifier:          dljlr4q25pCBXAPXwLiy0pGOKdk4cDF6ErimTpUI3pU=
Subject key identifier:   32:B4:28:C6:31:AA:B4:C7:36:FB:ED:6E:FD:E9:26:DE:3C:7E:5B:65
Certificate issuer:       /CN=2962f231-d7d7-449b-8a1f-b17a96237c00
Certificate serial:       010D0C9F432858408D3E31B96FE2B694E9104880
Authority key identifier: 35:43:81:15:92:01:1F:B7:CA:D3:6E:58:3D:70:D9:52:2C:99:A2:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2962f231-d7d7-449b-8a1f-b17a96237c00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2962f231-d7d7-449b-8a1f-b17a96237c00/bb6b5f83-b90a-3ac0-b1a5-e11fd583c2a9.roa
Signing time:             Tue 10 Jan 2023 15:10:13 +0000
ROA not before:           Tue 10 Jan 2023 15:10:13 +0000
ROA not after:            Mon 14 Apr 2025 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:8d:3e:31:b9:6f:e2:b6:94:e9:10:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2962f231-d7d7-449b-8a1f-b17a96237c00
        Validity
            Not Before: Jan 10 15:10:13 2023 GMT
            Not After : Apr 14 04:00:00 2025 GMT
        Subject: CN=60601242-1c87-4ead-88d7-baf6cacd0e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a0:d2:12:7c:fd:ef:c0:90:2f:fb:c9:74:b3:
                    d7:38:96:ef:35:b0:2c:38:e8:98:5b:b9:81:75:d3:
                    49:5c:a5:c6:71:a3:1e:a6:a7:6d:d9:06:fa:42:37:
                    22:2f:62:eb:8e:65:ff:a3:fd:1f:4a:36:f1:15:81:
                    6c:58:6f:8f:e5:93:61:31:42:e2:f6:81:4c:fe:dc:
                    93:6f:3a:64:23:ad:6f:4d:8f:be:67:d6:75:5e:81:
                    87:e4:47:86:60:8d:f0:8b:15:da:bb:fa:ad:a9:67:
                    bd:15:cb:c1:e0:55:ec:a6:8b:79:4f:4c:0f:c5:12:
                    28:a2:41:85:eb:c9:cc:ea:c2:df:b6:10:4d:cd:53:
                    e0:af:74:93:0c:db:8a:4d:0b:72:4c:4d:20:8a:9f:
                    3f:e1:9e:80:85:4e:75:c5:f5:e2:10:c4:f7:c4:bf:
                    41:19:f2:62:22:1a:44:b0:0c:7a:2f:d4:b5:ae:65:
                    e8:2f:17:d1:6f:ef:28:64:86:1a:1b:04:5b:58:77:
                    ef:a6:dc:91:e4:19:53:9b:20:eb:cf:ca:b0:59:2c:
                    79:f0:a4:60:a7:74:f6:6d:ae:5d:79:58:76:44:b9:
                    3f:c1:75:6c:d7:1a:22:4f:d0:92:c2:b8:a8:d5:aa:
                    ad:3c:8a:d4:80:8c:4f:34:d6:64:2f:9d:2a:0b:c3:
                    03:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B4:28:C6:31:AA:B4:C7:36:FB:ED:6E:FD:E9:26:DE:3C:7E:5B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2962f231-d7d7-449b-8a1f-b17a96237c00/bb6b5f83-b90a-3ac0-b1a5-e11fd583c2a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2962f231-d7d7-449b-8a1f-b17a96237c00/2962f231-d7d7-449b-8a1f-b17a96237c00.crl

            X509v3 Authority Key Identifier:
                keyid:35:43:81:15:92:01:1F:B7:CA:D3:6E:58:3D:70:D9:52:2C:99:A2:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2962f231-d7d7-449b-8a1f-b17a96237c00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:d9:83:55:70:8e:4e:0c:cc:73:8f:97:c5:f5:60:64:95:43:
         9a:64:f4:52:b6:37:60:9b:15:f8:6a:1c:e9:1d:01:3c:df:00:
         f7:78:4b:96:21:a2:52:e1:c4:14:37:dd:28:ce:18:f6:16:61:
         65:c7:d1:a3:25:0b:f1:6c:b9:c1:fd:75:25:49:57:2c:f2:64:
         22:d1:b6:87:a3:6e:f6:35:86:47:ec:c9:69:a8:52:75:2c:b7:
         0b:32:bd:00:77:8c:c6:9c:4f:14:f9:e4:bb:ab:c8:71:67:fd:
         c6:04:f9:f0:57:19:03:e1:d9:bf:29:ad:18:19:00:11:d6:22:
         64:01:fa:c6:75:79:75:21:c4:cb:bc:f3:4c:76:75:7d:78:48:
         29:79:dd:f1:ae:31:8c:e6:c9:a2:dc:d6:b2:fc:6d:04:5f:c4:
         5e:e5:b6:3a:56:63:d5:d9:61:ad:0c:ea:39:ce:d8:39:7b:e9:
         13:4f:c9:e0:20:62:de:83:c1:79:44:9e:96:48:8a:4e:b7:58:
         10:ef:a4:25:89:cb:fb:bb:40:a4:5c:19:78:b9:48:7a:12:29:
         0e:37:03:0c:5c:63:e8:00:40:34:43:23:cd:5c:28:9b:a9:12:
         f2:72:3c:ee:ef:2d:73:08:87:a9:22:e0:d0:c1:dc:68:17:ab:
         75:a8:25:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----