Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f60d0f5a-a7a9-4d9b-aecc-31e8e3bf22ee/e23bfc1b-790c-3208-9331-7b9a34514dca.roa
File:                     e23bfc1b-790c-3208-9331-7b9a34514dca.roa (raw, json)
Hash identifier:          +OCGleIsx7QSI0it9tBxtJ7AroW6eU+he14gsVO6KlA=
Subject key identifier:   52:5F:64:38:BF:C3:6D:03:3D:AD:27:C9:7A:66:C8:22:F0:23:B0:F7
Certificate issuer:       /CN=f60d0f5a-a7a9-4d9b-aecc-31e8e3bf22ee
Certificate serial:       010D0C9F43285846F6B26D2BB57AD4C305C672F0
Authority key identifier: 16:EB:94:A0:79:2A:A1:7C:1D:6B:0E:FA:67:4A:BB:41:07:7C:68:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f60d0f5a-a7a9-4d9b-aecc-31e8e3bf22ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f60d0f5a-a7a9-4d9b-aecc-31e8e3bf22ee/e23bfc1b-790c-3208-9331-7b9a34514dca.roa
Signing time:             Thu 22 Aug 2024 19:21:22 +0000
ROA not before:           Thu 22 Aug 2024 19:21:22 +0000
ROA not after:            Wed 20 Nov 2024 20:21:22 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:46:f6:b2:6d:2b:b5:7a:d4:c3:05:c6:72:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f60d0f5a-a7a9-4d9b-aecc-31e8e3bf22ee
        Validity
            Not Before: Aug 22 19:21:22 2024 GMT
            Not After : Nov 20 20:21:22 2024 GMT
        Subject: CN=747f06cf-fa30-4572-a6fa-9fd5c5eea65b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:35:de:f9:1b:29:9d:2a:56:e0:df:ad:34:61:
                    3c:28:3e:7c:30:5f:8f:2a:7f:29:26:e5:25:6f:f7:
                    d5:18:d6:dc:ed:42:ad:09:6e:a8:d2:2b:b9:81:3a:
                    54:bb:40:70:aa:b1:9c:f0:6a:28:78:e4:4c:71:e6:
                    91:6e:5b:51:ba:dd:5b:7c:5c:9c:31:c2:11:ac:9c:
                    05:4f:bc:ae:c0:36:dd:4d:63:f1:7c:ae:e0:36:ad:
                    9f:92:44:51:0a:7a:04:b2:e0:05:a3:58:14:87:8f:
                    8a:a6:2a:2e:4c:92:a9:5f:80:90:4e:9e:73:ce:ea:
                    de:80:55:16:48:49:ab:41:a1:b8:01:06:f4:00:de:
                    4a:65:54:94:f9:39:d4:73:c3:d7:51:53:87:03:00:
                    71:96:4f:50:25:70:f4:0c:f7:53:ff:24:8c:06:61:
                    83:11:22:25:25:73:8a:58:5f:62:f2:50:e4:b6:46:
                    c4:4a:30:e1:00:fb:3b:4b:41:b6:25:e0:11:90:4b:
                    a7:20:86:23:8d:b3:4a:10:80:9e:d3:c5:c0:89:8a:
                    a3:51:93:da:67:ad:bd:d6:4d:bd:ff:17:b2:4b:95:
                    f7:4c:3d:2c:b6:83:dc:eb:db:2a:26:46:8a:02:49:
                    4d:2a:c1:00:10:1f:72:f1:c3:6b:36:14:86:40:75:
                    1a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5F:64:38:BF:C3:6D:03:3D:AD:27:C9:7A:66:C8:22:F0:23:B0:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f60d0f5a-a7a9-4d9b-aecc-31e8e3bf22ee/e23bfc1b-790c-3208-9331-7b9a34514dca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f60d0f5a-a7a9-4d9b-aecc-31e8e3bf22ee/f60d0f5a-a7a9-4d9b-aecc-31e8e3bf22ee.crl

            X509v3 Authority Key Identifier:
                keyid:16:EB:94:A0:79:2A:A1:7C:1D:6B:0E:FA:67:4A:BB:41:07:7C:68:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f60d0f5a-a7a9-4d9b-aecc-31e8e3bf22ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:05:45:0d:19:d7:fc:bb:01:fd:55:5c:8e:6c:c0:eb:22:eb:
         98:a9:bb:47:0e:75:02:7b:bc:6b:34:20:4d:6a:ec:8a:dc:61:
         10:8e:0a:b3:4f:b9:63:d8:ff:26:7c:ec:d1:07:6c:18:1f:7a:
         79:2a:6a:28:70:d1:cc:0d:a1:f6:d0:4c:c2:07:56:1d:01:3f:
         7b:58:cb:04:90:93:96:a8:66:cd:f3:44:72:02:85:2b:f5:1c:
         79:15:db:e8:1b:28:9e:fe:5a:d4:4c:f4:4b:2a:62:a6:d3:90:
         c3:99:03:aa:6d:8c:00:4b:13:3e:95:b7:36:62:c3:de:d8:a0:
         6f:43:b6:8c:84:34:9b:ff:a8:ea:75:c0:89:84:6a:fc:80:00:
         37:90:eb:4a:6e:3e:45:50:5e:5a:3a:57:06:68:d2:38:0a:93:
         df:34:fe:79:68:45:8d:06:53:1a:03:69:19:cf:25:dc:9d:6b:
         2f:f4:1c:8d:98:41:06:a8:b7:26:b1:04:38:41:3f:d0:3d:52:
         75:0b:8a:15:bb:7f:61:a2:f5:46:8a:e0:b1:10:04:33:5d:d8:
         f5:8b:1d:ac:fe:9f:61:73:c4:6d:ea:cd:b7:35:50:4d:f1:b4:
         ff:a4:fa:e6:e8:2b:9f:ac:86:5b:80:66:5d:a4:2a:be:0b:0f:
         ea:c6:88:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----