Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/50acf341-183e-46d2-ade0-55f9abf90d54/0b7d93ec-ee80-30c2-88c7-d3a052809f4a.roa
File:                     0b7d93ec-ee80-30c2-88c7-d3a052809f4a.roa (raw, json)
Hash identifier:          NMK75UkHfqxeksKkYrOBIEMYfBJ60Zsn3Hbimp+esMI=
Subject key identifier:   A1:AC:0F:7D:6F:8E:35:82:19:9B:40:C9:92:D3:51:8E:74:F7:DB:46
Certificate issuer:       /CN=50acf341-183e-46d2-ade0-55f9abf90d54
Certificate serial:       010D0C9F4328584025A08B05E1845231C056DE20
Authority key identifier: 3B:CD:9B:B7:C7:32:B5:0A:75:73:4D:9D:DA:03:53:B5:32:A9:33:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/50acf341-183e-46d2-ade0-55f9abf90d54.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/50acf341-183e-46d2-ade0-55f9abf90d54/0b7d93ec-ee80-30c2-88c7-d3a052809f4a.roa
Signing time:             Tue 06 Dec 2022 17:15:35 +0000
ROA not before:           Tue 06 Dec 2022 17:15:35 +0000
ROA not after:            Mon 10 Mar 2025 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:25:a0:8b:05:e1:84:52:31:c0:56:de:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50acf341-183e-46d2-ade0-55f9abf90d54
        Validity
            Not Before: Dec  6 17:15:35 2022 GMT
            Not After : Mar 10 04:00:00 2025 GMT
        Subject: CN=273f652d-fef5-4579-9282-ae734d9674ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7a:2a:e5:31:d8:df:76:4a:6a:0e:b4:56:39:
                    fb:7e:7b:e4:81:38:e5:b3:af:06:d9:63:45:b6:8b:
                    a5:aa:fb:3e:50:58:98:8f:76:a2:2f:bd:09:36:53:
                    3c:80:62:4b:b9:98:4f:b2:df:fa:41:1c:8b:78:0c:
                    d6:3f:dc:67:1c:00:e8:b0:33:b3:fe:c4:58:ce:b5:
                    55:57:5b:3d:53:b3:bb:59:fa:ef:5d:b4:65:0b:dd:
                    82:63:f9:c8:16:e1:cc:86:65:a1:56:a1:8b:cf:5f:
                    5b:26:b3:9c:d4:3e:03:58:b3:3f:55:ed:19:be:69:
                    23:83:5b:11:b3:c3:61:fe:c4:85:8d:0f:e9:f5:66:
                    4c:70:09:3a:cd:76:3b:dd:33:0c:df:cd:87:5f:d7:
                    a1:e2:36:be:1c:18:86:be:dc:ec:8e:db:65:d4:08:
                    13:87:88:8a:3c:1c:bf:c8:14:69:eb:ad:13:af:e9:
                    93:b6:66:64:ae:17:d7:f4:c6:c2:5a:cb:2b:96:25:
                    5b:fb:8b:db:18:50:9b:42:bb:97:3f:70:93:42:c6:
                    62:b5:0f:c5:f6:6a:d1:c7:84:eb:1a:34:b7:f1:d0:
                    56:c8:cb:1f:90:0c:55:61:06:8f:80:29:b8:d1:04:
                    65:13:90:1f:7c:9b:06:98:ca:ce:d7:b9:7e:ae:12:
                    33:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:AC:0F:7D:6F:8E:35:82:19:9B:40:C9:92:D3:51:8E:74:F7:DB:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/50acf341-183e-46d2-ade0-55f9abf90d54/0b7d93ec-ee80-30c2-88c7-d3a052809f4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/50acf341-183e-46d2-ade0-55f9abf90d54/50acf341-183e-46d2-ade0-55f9abf90d54.crl

            X509v3 Authority Key Identifier:
                keyid:3B:CD:9B:B7:C7:32:B5:0A:75:73:4D:9D:DA:03:53:B5:32:A9:33:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/50acf341-183e-46d2-ade0-55f9abf90d54.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b9:90:a2:6c:31:65:b4:41:da:96:82:b8:2e:31:4f:46:be:
         56:cc:cd:eb:57:33:6f:a4:8d:11:48:8e:e5:ef:66:70:f9:e6:
         16:06:2a:69:2b:77:68:33:1a:72:1a:ba:8c:32:6d:34:14:93:
         85:85:97:5e:42:42:e2:fc:1a:01:8f:7b:1a:30:1a:32:d8:2e:
         33:bd:27:45:6b:7c:96:cd:4f:c5:4e:6f:b6:a9:8b:dd:e6:e6:
         2b:8b:55:61:39:5d:05:dc:54:91:60:50:c0:5c:cb:9b:32:4d:
         d0:59:1e:17:76:23:06:73:f4:cb:f1:38:5e:55:12:d8:2c:ef:
         f7:05:cc:bd:53:e5:33:97:c0:7c:2c:c8:50:3e:e5:e7:1d:77:
         e2:ba:aa:c8:1d:78:e9:92:5e:8c:2c:ba:38:7b:98:f8:0b:4c:
         68:8e:52:9c:2a:36:21:54:29:95:91:5a:07:6b:56:9c:72:d9:
         a5:68:72:cb:ed:00:91:e6:fb:f2:a4:ce:bc:d5:94:dd:8f:ec:
         9a:8b:c6:ba:9b:bf:1b:90:1f:81:2f:40:55:24:39:3b:b0:27:
         52:b7:af:0e:0d:c9:60:c2:b7:74:00:07:de:ee:98:42:d6:cf:
         93:58:0b:f7:28:9c:c6:75:6b:3e:6c:75:04:0f:c4:9e:24:a7:
         db:9d:c7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----