Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bdb562e-00fd-451c-8651-ce9fa405022a/a4fe197b-8585-391b-b57c-7f7e2ceb2d0e.roa
File:                     a4fe197b-8585-391b-b57c-7f7e2ceb2d0e.roa (raw, json)
Hash identifier:          GfoPWCFV2YpqazLMiSmIUUsqnU1oC6ftmJikXyVvnuY=
Subject key identifier:   4E:D6:B9:9B:70:CB:9C:8A:5C:E8:C1:07:7B:39:75:F8:E4:56:9A:02
Certificate issuer:       /CN=5bdb562e-00fd-451c-8651-ce9fa405022a
Certificate serial:       010D0C9F43285840D5B9A8C1D70319723B5227C0
Authority key identifier: DF:E5:4C:EC:CA:92:E5:0A:34:60:21:76:FD:44:02:5E:F2:31:1C:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bdb562e-00fd-451c-8651-ce9fa405022a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bdb562e-00fd-451c-8651-ce9fa405022a/a4fe197b-8585-391b-b57c-7f7e2ceb2d0e.roa
Signing time:             Fri 03 Feb 2023 18:52:45 +0000
ROA not before:           Fri 03 Feb 2023 18:52:45 +0000
ROA not after:            Thu 08 May 2025 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:40:d5:b9:a8:c1:d7:03:19:72:3b:52:27:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bdb562e-00fd-451c-8651-ce9fa405022a
        Validity
            Not Before: Feb  3 18:52:45 2023 GMT
            Not After : May  8 04:00:00 2025 GMT
        Subject: CN=1f13440e-d5c3-4e44-bac6-23d75b51ec7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:88:04:3b:e4:76:88:78:e1:13:b3:4f:6b:94:
                    40:84:41:4f:11:82:92:ff:54:5a:e2:7e:df:df:0a:
                    c8:36:ac:e8:47:b0:63:a7:ab:56:65:e0:97:68:5c:
                    ad:69:96:aa:d8:7c:d2:c2:08:02:51:79:da:96:c2:
                    53:4a:6c:f5:2d:b8:1b:08:32:b6:70:5f:7d:9d:a8:
                    82:58:1b:37:0d:87:ae:b8:48:46:80:02:1b:7c:24:
                    9d:01:cd:41:9a:be:06:30:5b:ed:21:f8:d2:bd:8b:
                    37:a9:3d:ce:78:bb:6b:01:4c:06:8d:82:a7:65:30:
                    23:94:c3:ae:96:04:48:df:a4:dd:3f:47:45:51:2d:
                    1d:6b:95:1f:72:fb:77:fc:59:de:dc:f6:ef:31:3a:
                    52:5f:49:33:bc:2e:5e:a3:b9:a6:8a:97:8c:fe:76:
                    72:9e:ab:5f:ff:83:39:81:31:79:6c:67:3e:be:b2:
                    69:ce:23:c2:f8:33:29:e5:f8:d1:48:aa:2e:d3:3f:
                    15:bc:86:9f:54:77:fc:b8:de:ff:ac:6e:f8:6b:0b:
                    81:d5:e7:57:58:c8:84:6b:ae:cf:3a:82:62:b8:72:
                    81:2a:14:7a:80:d6:17:9a:65:a2:d2:50:a8:15:ec:
                    b1:e1:98:34:48:8d:a7:7b:b9:dd:1a:3f:69:15:25:
                    b0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D6:B9:9B:70:CB:9C:8A:5C:E8:C1:07:7B:39:75:F8:E4:56:9A:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bdb562e-00fd-451c-8651-ce9fa405022a/a4fe197b-8585-391b-b57c-7f7e2ceb2d0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bdb562e-00fd-451c-8651-ce9fa405022a/5bdb562e-00fd-451c-8651-ce9fa405022a.crl

            X509v3 Authority Key Identifier:
                keyid:DF:E5:4C:EC:CA:92:E5:0A:34:60:21:76:FD:44:02:5E:F2:31:1C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5bdb562e-00fd-451c-8651-ce9fa405022a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:68:32:a1:67:6d:ad:cb:7c:8d:04:6d:5c:a5:27:16:da:53:
         3c:ae:1d:8b:4f:50:a6:52:fc:ff:73:00:f8:55:6b:0a:3a:0f:
         ca:7c:f9:f3:1a:e4:20:c8:62:a3:d4:24:4d:cd:90:46:2b:4d:
         8d:1c:47:56:50:83:e4:29:eb:df:35:98:24:43:3b:3f:02:56:
         bd:14:f8:37:2e:35:8c:2d:49:b1:97:47:f0:eb:d2:a1:01:8d:
         11:0b:34:08:18:8d:2a:bb:ca:35:54:f0:bf:d9:de:1c:1c:ca:
         66:52:3a:a0:f5:60:96:e6:46:27:c9:7b:9b:99:1f:57:37:7d:
         f2:a8:65:3f:6d:cc:40:87:54:1e:ea:32:9f:61:57:29:96:69:
         5b:54:e2:5e:99:3c:72:fd:c3:07:33:0e:df:71:06:aa:7f:4b:
         53:af:55:55:e6:04:b5:ec:e9:e8:7d:8c:2f:f3:0e:7e:52:9e:
         f5:f7:47:6d:d3:d9:ae:32:d7:b8:df:3f:cc:70:32:71:91:dd:
         c6:15:10:18:66:6a:a3:09:2e:41:5b:75:30:49:d9:88:1d:ee:
         f9:03:1d:11:78:41:e0:ce:ba:dc:de:2f:37:a9:ba:60:1b:53:
         37:6b:a1:b7:b7:ae:ba:6d:6d:c1:69:36:19:85:2a:99:fe:04:
         b9:59:63:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----