Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/36d6b189-f05c-382f-9cf3-205f623e75ad.roa
File:                     36d6b189-f05c-382f-9cf3-205f623e75ad.roa (raw, json)
Hash identifier:          9C/o2Lv6IL7CHndr2MzASkKvK7crT6gvFwepu0J6KsY=
Subject key identifier:   24:0C:0B:59:85:F4:55:99:5D:C1:59:93:F5:8A:F5:44:80:B9:21:36
Certificate issuer:       /CN=7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e
Certificate serial:       010D0C9F4328583E6CA47AF457D59F80F3D17100
Authority key identifier: A9:9B:7D:23:00:FE:03:6E:23:9A:5A:4C:08:96:8A:C6:A8:56:E9:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/36d6b189-f05c-382f-9cf3-205f623e75ad.roa
Signing time:             Fri 01 Jul 2022 18:10:46 +0000
ROA not before:           Fri 01 Jul 2022 18:10:46 +0000
ROA not after:            Thu 03 Oct 2024 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6c:a4:7a:f4:57:d5:9f:80:f3:d1:71:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e
        Validity
            Not Before: Jul  1 18:10:46 2022 GMT
            Not After : Oct  3 04:00:00 2024 GMT
        Subject: CN=14c3a78d-af73-4d12-9899-3f6c1f248a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:61:d3:eb:2e:e2:b5:c0:d8:91:3e:43:85:d8:
                    06:3a:41:a2:5b:f9:c1:e8:47:6e:f0:d5:1c:55:d7:
                    02:a6:ce:ff:f8:81:1e:97:06:ee:b9:b3:36:ed:2b:
                    ac:3b:b0:34:c4:be:6f:6b:d6:e5:e3:e4:8f:09:de:
                    01:9a:a7:55:41:f0:10:4e:94:91:81:84:e9:7b:49:
                    bd:f8:8b:f9:cd:bb:e4:98:eb:c9:98:15:59:3c:d6:
                    90:aa:6c:36:ed:7a:f0:21:65:6a:f9:e4:66:5e:02:
                    29:3a:3b:e6:67:f9:27:20:8e:9e:bb:f9:16:7e:96:
                    90:58:bf:8c:bc:a9:28:dc:be:17:f6:a5:e0:84:4a:
                    74:31:d1:4e:ff:a3:3f:f4:e7:a4:36:c3:ef:21:6d:
                    75:97:60:89:e1:3b:91:14:1a:21:93:9d:92:40:43:
                    3d:c5:7c:a6:75:d8:0a:2f:77:51:b9:b4:d6:26:65:
                    90:dd:57:5e:f6:bd:b2:0d:ed:28:9b:ce:b4:24:74:
                    8e:a1:66:7e:fb:bd:7b:fe:17:cd:dc:27:ea:61:b1:
                    9e:57:d1:ae:32:b2:b5:2f:49:42:fb:33:07:e5:41:
                    99:dc:c5:81:a2:1f:06:b8:42:f9:48:85:a2:1a:68:
                    f0:6c:1f:91:82:20:da:86:9a:92:ba:4e:85:2a:e5:
                    6c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:0C:0B:59:85:F4:55:99:5D:C1:59:93:F5:8A:F5:44:80:B9:21:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/36d6b189-f05c-382f-9cf3-205f623e75ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.crl

            X509v3 Authority Key Identifier:
                keyid:A9:9B:7D:23:00:FE:03:6E:23:9A:5A:4C:08:96:8A:C6:A8:56:E9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:f3:c0:58:65:37:20:99:96:52:4a:4f:4b:b1:26:f2:1a:06:
         6b:c4:a2:2a:d6:e0:39:fa:53:e3:ad:f3:a3:a0:cd:c7:3d:14:
         7a:ef:07:a0:c9:f3:45:49:43:da:40:2a:7a:5f:5a:c3:62:3e:
         3b:0b:7c:62:b6:e4:c4:8a:af:4b:e3:89:8b:2b:11:ea:09:68:
         47:4f:72:14:4d:6c:ad:8c:ed:b9:41:62:09:b7:fa:db:79:4f:
         3c:c4:41:90:bd:50:d8:24:6e:a6:6c:f2:75:36:fc:50:48:25:
         2f:54:8b:7d:71:ec:4d:93:57:6c:4a:ef:50:53:4a:67:20:62:
         bd:ef:1a:82:98:0d:3c:b3:0d:b1:a3:b1:0f:3d:69:03:31:23:
         ae:c2:fe:a7:a7:97:71:1a:d5:10:6f:8a:b8:f6:42:69:68:e1:
         c5:d5:27:7c:72:65:07:7f:51:4f:df:e2:b7:d9:25:fd:9c:c5:
         60:d4:44:6d:66:06:81:24:fb:ae:0d:f5:31:9b:df:b7:5e:d2:
         19:d2:05:19:3e:21:29:8e:a9:95:31:80:d9:4f:89:77:55:89:
         8c:27:c4:8f:5c:31:55:cc:f0:f8:1c:09:80:06:18:e9:65:c3:
         71:9c:f9:16:06:90:f4:2b:d9:eb:51:57:be:6e:6d:3a:d5:c7:
         63:d1:94:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----