Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b/dda40816-d233-30c1-b3a6-a26de3a98af5.roa
File:                     dda40816-d233-30c1-b3a6-a26de3a98af5.roa (raw, json)
Hash identifier:          7Gvg6wMIpP7pQwxBG2uu3/Z1sp3gRogSpHSM8SrHcPY=
Subject key identifier:   5E:56:BE:F9:14:89:7C:9B:4C:9C:D4:6E:4D:A0:97:9F:10:CC:2D:1A
Certificate issuer:       /CN=7c3e0065-2137-4495-8836-4a1420c6d42b
Certificate serial:       010D0C9F4328583DA3FE374523335EBD0BE62E00
Authority key identifier: C8:94:35:86:89:93:3B:62:E9:CF:E4:EC:AF:DD:23:A3:F7:FD:11:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b/dda40816-d233-30c1-b3a6-a26de3a98af5.roa
Signing time:             Wed 20 Apr 2022 15:18:32 +0000
ROA not before:           Wed 20 Apr 2022 15:18:32 +0000
ROA not after:            Tue 23 Jul 2024 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:a3:fe:37:45:23:33:5e:bd:0b:e6:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3e0065-2137-4495-8836-4a1420c6d42b
        Validity
            Not Before: Apr 20 15:18:32 2022 GMT
            Not After : Jul 23 04:00:00 2024 GMT
        Subject: CN=348ad176-1276-4ab5-b400-a7110da49159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ce:04:28:cb:92:22:fe:a9:cc:03:ab:a9:63:
                    0b:41:0b:35:02:0a:9b:7b:20:50:aa:43:16:d2:9c:
                    7c:47:68:62:08:b3:3a:0a:ec:ea:2b:59:a0:fd:4a:
                    18:b6:b4:97:e1:ba:4b:da:80:53:c3:a2:e1:ed:26:
                    5d:32:b5:0d:ef:6e:46:d6:cd:58:c6:db:67:5a:e0:
                    e0:93:71:19:db:8d:8d:71:6f:78:f6:05:d9:16:ea:
                    c3:b2:3a:d5:4c:a3:24:36:48:27:72:67:c8:98:e4:
                    20:b6:78:1b:6a:de:da:ca:bc:1c:4d:8f:88:5e:24:
                    9c:44:5d:85:94:4e:47:d7:6e:1b:cb:d0:c4:67:72:
                    f7:d0:f8:44:b5:fa:4a:42:1b:c7:1c:ca:7f:c8:11:
                    c1:e3:32:2a:4f:c4:1e:41:3a:57:c5:1f:dd:6e:19:
                    1e:73:60:6f:08:99:30:9c:1d:e6:36:7f:66:22:22:
                    26:96:82:ab:a6:76:6c:c7:a7:f2:28:1e:b0:db:7a:
                    e5:f7:12:93:36:94:aa:b0:77:2b:9f:6c:df:73:a1:
                    16:50:0a:56:4f:f2:5d:4c:e6:ae:6e:5b:ea:01:ad:
                    bf:a8:93:68:10:3d:8b:75:f4:3c:41:39:72:ce:9e:
                    cb:b2:10:0e:8e:9a:57:d7:77:b9:fd:da:2b:c9:b2:
                    8c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:56:BE:F9:14:89:7C:9B:4C:9C:D4:6E:4D:A0:97:9F:10:CC:2D:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b/dda40816-d233-30c1-b3a6-a26de3a98af5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b/7c3e0065-2137-4495-8836-4a1420c6d42b.crl

            X509v3 Authority Key Identifier:
                keyid:C8:94:35:86:89:93:3B:62:E9:CF:E4:EC:AF:DD:23:A3:F7:FD:11:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7c3e0065-2137-4495-8836-4a1420c6d42b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:2a:4b:eb:04:ff:a7:93:14:5f:57:cb:d5:a4:d7:78:e3:a0:
         77:fe:22:e7:76:c1:c0:bf:d4:13:87:ad:60:e6:19:be:63:e1:
         f4:f5:47:6c:78:19:79:91:d5:32:2e:82:74:84:6b:03:41:c8:
         67:a8:b3:fb:e3:af:18:1f:96:69:a7:6d:68:19:21:d8:d6:fa:
         86:2c:77:ae:2d:2e:f5:d8:94:e5:94:9e:35:23:9c:41:03:b1:
         b8:44:bf:6e:72:2c:ae:20:ea:91:d0:cf:e4:aa:51:9b:53:6d:
         8e:c8:13:a9:03:e6:c0:12:3e:09:cd:b0:aa:ca:0e:31:f0:a2:
         d5:a9:b0:17:a1:2c:e2:18:03:46:12:35:b2:34:6d:48:d2:aa:
         3c:84:aa:bc:c9:c4:7d:4a:47:6d:87:65:fd:27:65:3b:f8:d6:
         08:1a:04:6e:82:58:43:db:28:41:03:4c:3c:d0:b5:69:a4:6c:
         3a:85:5c:50:fb:d6:bc:f9:43:40:fd:de:e8:f4:98:b5:15:b1:
         11:9b:29:82:f6:14:44:9b:f1:91:e0:ba:10:77:47:0e:91:d6:
         22:c8:9e:af:d8:6e:e3:15:6b:b2:a8:f7:ec:66:17:44:5b:19:
         45:47:13:48:15:1e:72:38:fb:32:6d:bc:fe:77:4e:52:1c:87:
         14:52:27:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD2j/jdFIzNevQvmLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2MzZTAwNjUtMjEzNy00NDk1LTg4MzYtNGExNDIwYzZk
NDJiMB4XDTIyMDQyMDE1MTgzMloXDTI0MDcyMzA0MDAwMFowLzEtMCsGA1UEAxMk
MzQ4YWQxNzYtMTI3Ni00YWI1LWI0MDAtYTcxMTBkYTQ5MTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo84EKMuSIv6pzAOrqWMLQQs1AgqbeyBQqkMW
0px8R2hiCLM6CuzqK1mg/UoYtrSX4bpL2oBTw6Lh7SZdMrUN725G1s1YxttnWuDg
k3EZ242NcW949gXZFurDsjrVTKMkNkgncmfImOQgtngbat7ayrwcTY+IXiScRF2F
lE5H124by9DEZ3L30PhEtfpKQhvHHMp/yBHB4zIqT8QeQTpXxR/dbhkec2BvCJkw
nB3mNn9mIiImloKrpnZsx6fyKB6w23rl9xKTNpSqsHcrn2zfc6EWUApWT/JdTOau
blvqAa2/qJNoED2LdfQ8QTlyzp7LshAOjppX13e5/dorybKMQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF5WvvkUiXybTJzUbk2gl58QzC0aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YzNl
MDA2NS0yMTM3LTQ0OTUtODgzNi00YTE0MjBjNmQ0MmIvZGRhNDA4MTYtZDIzMy0z
MGMxLWIzYTYtYTI2ZGUzYTk4YWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2MzZTAwNjUtMjEzNy00NDk1LTg4
MzYtNGExNDIwYzZkNDJiLzdjM2UwMDY1LTIxMzctNDQ5NS04ODM2LTRhMTQyMGM2
ZDQyYi5jcmwwHwYDVR0jBBgwFoAUyJQ1homTO2Lpz+Tsr90jo/f9EeIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83YzNlMDA2NS0yMTM3LTQ0OTUtODgzNi00YTE0
MjBjNmQ0MmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBlXCYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB4qS+sE/6eTFF9Xy9Wk13jjoHf+Iud2wcC/1BOHrWDmGb5j4fT1R2x4
GXmR1TIugnSEawNByGeos/vjrxgflmmnbWgZIdjW+oYsd64tLvXYlOWUnjUjnEED
sbhEv25yLK4g6pHQz+SqUZtTbY7IE6kD5sASPgnNsKrKDjHwotWpsBehLOIYA0YS
NbI0bUjSqjyEqrzJxH1KR22HZf0nZTv41ggaBG6CWEPbKEEDTDzQtWmkbDqFXFD7
1rz5Q0D93uj0mLUVsRGbKYL2FESb8ZHguhB3Rw6R1iLInq/YbuMVa7Ko9+xmF0Rb
GUVHE0gVHnI4+zJtvP53TlIchxRSJ9k=
-----END CERTIFICATE-----