Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd76c611-e7f3-4781-8e99-5c951a8e3b8d/a738f181-be9a-3a45-a719-7d6cefbb86ee.roa
File:                     a738f181-be9a-3a45-a719-7d6cefbb86ee.roa (raw, json)
Hash identifier:          UaBWdw2lf1vjiaKJ3wxBsZvcseAeIt2FRN9X0aA1LsU=
Subject key identifier:   1B:1F:34:74:4A:76:86:BB:0B:C8:7F:4A:84:BB:03:B3:88:E3:44:D8
Certificate issuer:       /CN=cd76c611-e7f3-4781-8e99-5c951a8e3b8d
Certificate serial:       010D0C9F432858433059BB0D6DCC564FF68A9800
Authority key identifier: E0:6C:3D:D1:B1:29:3D:DB:91:BB:D1:8A:8D:9B:6E:E3:A2:00:A9:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd76c611-e7f3-4781-8e99-5c951a8e3b8d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd76c611-e7f3-4781-8e99-5c951a8e3b8d/a738f181-be9a-3a45-a719-7d6cefbb86ee.roa
Signing time:             Mon 11 Sep 2023 15:51:48 +0000
ROA not before:           Mon 11 Sep 2023 15:51:48 +0000
ROA not after:            Sun 10 Dec 2023 16:51:48 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:30:59:bb:0d:6d:cc:56:4f:f6:8a:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd76c611-e7f3-4781-8e99-5c951a8e3b8d
        Validity
            Not Before: Sep 11 15:51:48 2023 GMT
            Not After : Dec 10 16:51:48 2023 GMT
        Subject: CN=775341d6-79da-4e78-83d9-3313e377ae60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:15:47:07:9c:bd:66:10:1e:81:44:dc:4c:14:
                    98:1e:e2:e5:fd:37:f4:c9:b6:55:f8:18:7f:0b:76:
                    6d:aa:0c:11:32:e5:dc:d8:a1:eb:a6:e4:b8:6b:22:
                    d6:82:ec:ce:5c:8c:fa:03:3d:f7:b0:be:fd:c9:68:
                    bd:87:93:42:e2:67:f2:a2:58:f4:76:08:a5:1a:0e:
                    0d:92:b2:8d:f4:6b:e9:00:99:13:c6:3e:7d:a5:08:
                    20:dd:0f:0c:b0:31:5a:33:3b:27:0f:1a:61:f5:ac:
                    2c:1f:a4:72:0d:da:28:ad:96:88:3f:cc:d1:fd:47:
                    c9:5a:fe:24:36:54:eb:3d:3b:85:c1:60:33:4f:3c:
                    ef:12:ae:23:f0:be:1f:1b:e3:75:f7:ed:aa:02:96:
                    c8:ad:b8:a5:47:cc:15:52:e6:bc:1d:ad:38:ff:3b:
                    c2:28:42:78:0d:6f:9f:38:a0:4e:75:22:5d:7e:24:
                    b8:40:9a:e7:06:b8:6a:79:52:89:d2:1a:69:c1:3f:
                    3b:4b:22:63:93:c0:47:56:80:15:97:2a:9c:ee:33:
                    43:92:2a:23:a4:73:3b:ae:c1:d1:f3:bb:33:a5:5d:
                    27:09:c5:3f:4d:f4:be:ba:b3:da:3f:cf:77:66:13:
                    43:72:85:64:45:6d:c0:5d:08:ce:1e:1b:e6:56:5e:
                    5f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1F:34:74:4A:76:86:BB:0B:C8:7F:4A:84:BB:03:B3:88:E3:44:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd76c611-e7f3-4781-8e99-5c951a8e3b8d/a738f181-be9a-3a45-a719-7d6cefbb86ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd76c611-e7f3-4781-8e99-5c951a8e3b8d/cd76c611-e7f3-4781-8e99-5c951a8e3b8d.crl

            X509v3 Authority Key Identifier:
                keyid:E0:6C:3D:D1:B1:29:3D:DB:91:BB:D1:8A:8D:9B:6E:E3:A2:00:A9:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cd76c611-e7f3-4781-8e99-5c951a8e3b8d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:65:3f:5a:64:56:2c:43:18:67:2b:ef:8d:9b:6f:3d:e2:5a:
         45:f7:55:f2:22:3e:ca:ca:52:c6:ea:fb:31:9b:f2:bd:52:71:
         01:1c:3c:28:13:58:ed:cf:ef:05:06:e6:a1:03:79:8a:f6:6a:
         2a:51:1b:dd:d9:7e:76:c5:8f:f9:f9:db:a3:9d:2b:14:68:12:
         7b:ec:00:2b:a8:e0:80:1e:5d:73:9a:5e:af:36:90:4e:8f:d5:
         08:b7:ce:b8:18:45:c7:30:c9:2a:3a:0b:71:cb:f1:89:b5:be:
         41:72:87:b9:e4:35:0d:62:79:75:1f:99:a7:86:fc:7d:db:17:
         26:66:a1:d3:3f:c2:7c:aa:fe:37:bd:6a:1a:5f:0a:12:10:d0:
         f0:e7:63:a1:47:e4:5f:7e:78:7e:15:6d:3d:96:39:50:5b:ae:
         61:a8:58:bc:dd:59:75:a8:70:91:07:6e:a8:4d:2c:a8:6c:5f:
         99:ea:25:5c:be:f5:70:0f:91:ad:21:91:84:ad:25:c9:8c:f1:
         aa:96:01:77:85:9f:85:fd:71:b3:56:69:ff:c9:44:f5:f5:60:
         72:e7:de:62:86:40:be:e0:be:81:40:60:a8:ee:5f:dc:2f:18:
         61:2c:86:6f:ce:ba:ff:ea:a3:92:7a:3b:fd:1c:a6:8c:32:57:
         a9:31:43:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 22 11:33:12 2023 by rpki-client on console-ams.rpki-client.org