Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/2c5c646b-f44d-3861-8db6-c86eef12d5de.roa
File:                     2c5c646b-f44d-3861-8db6-c86eef12d5de.roa (raw, json)
Hash identifier:          e6aPOffFN38btUvBzNYH9r97grIFCry6px74Knm71IA=
Subject key identifier:   6C:45:9A:8C:B2:18:7D:DF:3D:EB:D8:7D:BB:FF:50:55:18:95:DB:9E
Certificate issuer:       /CN=bb1f3de8-615a-4e8b-b393-bae42ab3e509
Certificate serial:       010D0C9F432858463055C04E5F7F5147AFED68B0
Authority key identifier: 28:0E:FC:03:1C:0C:25:48:4F:D3:1A:14:D4:A9:B6:05:F8:59:C6:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/2c5c646b-f44d-3861-8db6-c86eef12d5de.roa
Signing time:             Wed 12 Jun 2024 18:04:35 +0000
ROA not before:           Wed 12 Jun 2024 18:04:35 +0000
ROA not after:            Tue 10 Sep 2024 18:04:35 +0000
asID:                     399970
IP address blocks:        149.112.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:30:55:c0:4e:5f:7f:51:47:af:ed:68:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb1f3de8-615a-4e8b-b393-bae42ab3e509
        Validity
            Not Before: Jun 12 18:04:35 2024 GMT
            Not After : Sep 10 18:04:35 2024 GMT
        Subject: CN=a90b8311-f042-420c-9a17-2f600fa1e847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:39:ac:73:01:c9:54:54:48:c5:f4:44:02:
                    c3:35:22:5a:3a:57:b5:69:54:8a:ba:f6:ec:39:d2:
                    35:b6:02:fb:70:2d:e2:04:26:d8:52:e0:86:ad:e5:
                    db:3a:7e:fe:92:7f:1c:38:ea:59:f4:db:95:60:14:
                    ea:77:3c:b8:c9:88:65:44:24:96:2f:9f:04:cb:43:
                    f6:eb:7b:ae:9b:ad:91:ae:ab:19:77:9a:62:eb:fd:
                    c4:04:ad:94:71:ea:8d:21:5f:7f:f3:e6:88:78:fc:
                    5a:41:79:57:59:2e:47:c1:e4:fd:7d:4c:26:85:65:
                    42:86:a7:cb:ca:cb:5b:50:d6:e1:81:47:45:19:53:
                    cb:cf:33:73:ae:1a:0d:07:db:c9:9b:32:45:ae:81:
                    03:cf:88:6e:e8:27:de:85:d4:db:e6:be:87:eb:98:
                    e9:78:ab:ab:f1:e9:8a:49:58:b4:33:fb:05:43:2a:
                    71:40:64:df:17:ec:32:78:30:31:64:06:04:2e:62:
                    10:cb:b9:63:ff:cd:3f:ea:68:fe:71:a4:cd:4c:72:
                    60:37:73:a6:9d:0f:2e:fc:0c:ff:68:9f:8b:9c:01:
                    41:59:fa:5b:8b:3d:3b:09:fa:fa:42:86:9d:17:b6:
                    3e:82:d2:aa:e9:f5:da:4d:cd:eb:ec:5f:2a:da:8e:
                    84:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:45:9A:8C:B2:18:7D:DF:3D:EB:D8:7D:BB:FF:50:55:18:95:DB:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/2c5c646b-f44d-3861-8db6-c86eef12d5de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509/bb1f3de8-615a-4e8b-b393-bae42ab3e509.crl

            X509v3 Authority Key Identifier:
                keyid:28:0E:FC:03:1C:0C:25:48:4F:D3:1A:14:D4:A9:B6:05:F8:59:C6:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bb1f3de8-615a-4e8b-b393-bae42ab3e509.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:16:3a:0b:dd:66:74:00:7f:3e:0f:2d:7a:50:2e:a7:d2:a6:
         03:f2:2c:fc:f8:5d:dc:e4:99:46:1b:8f:64:0b:3f:a8:c6:76:
         fc:94:c1:d4:a3:00:a2:78:72:87:0d:53:9e:76:ac:16:e5:3c:
         ce:81:76:de:79:ae:04:b0:1e:66:b3:c5:1c:34:3a:c2:d5:55:
         f4:d6:d1:3c:b8:4f:ad:11:d3:eb:a8:09:92:75:92:2e:33:e3:
         db:79:cb:18:8f:50:1b:76:3d:8d:0b:20:cd:51:7a:d5:ae:41:
         84:2e:55:54:37:20:e4:34:08:43:31:fa:87:7d:19:64:39:2c:
         fe:fe:94:72:db:1a:c2:eb:65:b7:35:31:93:44:a6:99:9b:74:
         92:7e:d6:01:58:02:db:00:f0:f2:94:8c:98:84:d0:3f:9c:ad:
         08:e9:98:7d:94:b0:cb:7f:31:ab:23:42:0b:f6:0a:32:54:d2:
         c2:7e:08:da:b9:4a:b0:5e:52:d2:b7:32:d6:86:bf:e7:fa:79:
         fb:95:a5:6d:b8:92:db:3e:41:a9:3e:61:02:41:0f:02:26:91:
         fd:c7:ec:8d:61:02:bb:4f:97:66:c1:71:b5:a5:22:4f:b8:19:
         9d:75:3e:4c:63:00:04:94:05:15:53:93:4a:8b:cb:e8:9e:04:
         3d:fd:c9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----