Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/65f9bbff-d5b3-3279-9baa-d5ff5393760b.roa
File:                     65f9bbff-d5b3-3279-9baa-d5ff5393760b.roa (raw, json)
Hash identifier:          e7me/XmvCOl5qQvSUBY1Q4vdypNlj5nXuaT3whtBgw0=
Subject key identifier:   05:E5:B5:C8:A8:0E:74:B3:79:07:89:B1:91:3D:D7:27:0B:2E:1E:7E
Certificate issuer:       /CN=7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e
Certificate serial:       010D0C9F4328583E6CA3DBEBFD2420A9DF42E400
Authority key identifier: A9:9B:7D:23:00:FE:03:6E:23:9A:5A:4C:08:96:8A:C6:A8:56:E9:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/65f9bbff-d5b3-3279-9baa-d5ff5393760b.roa
Signing time:             Fri 01 Jul 2022 18:10:46 +0000
ROA not before:           Fri 01 Jul 2022 18:10:46 +0000
ROA not after:            Thu 03 Oct 2024 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:6c:a3:db:eb:fd:24:20:a9:df:42:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e
        Validity
            Not Before: Jul  1 18:10:46 2022 GMT
            Not After : Oct  3 04:00:00 2024 GMT
        Subject: CN=df8cf00a-7818-4ffd-9857-e57e8c07c39b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:12:3d:d4:81:13:15:4a:70:ff:db:e6:e2:e6:
                    59:48:49:30:5d:c3:ed:54:f0:53:f4:e1:cc:25:a3:
                    89:91:02:44:2e:f2:f8:e0:1d:2b:2a:0b:1d:4b:77:
                    7c:2f:8c:70:db:47:49:88:65:a6:69:23:57:95:f9:
                    97:c4:9e:ca:87:50:f9:96:4e:b7:b1:f0:ad:50:ce:
                    0d:53:6f:89:e1:f7:9a:a6:be:33:e4:3c:d8:57:76:
                    09:9c:59:f6:d5:2c:a4:16:7d:14:e5:25:78:47:4e:
                    9c:f6:e9:7e:df:75:76:16:16:1e:13:7a:e7:07:f8:
                    fe:81:78:37:20:7c:22:18:8a:a2:c1:4d:c0:0a:b9:
                    8b:8a:35:b5:42:86:48:27:a6:3c:60:99:7e:48:bf:
                    c8:ed:65:25:44:e4:da:6d:60:8f:89:cd:b4:b6:8b:
                    6d:6a:52:8b:13:b1:51:84:b5:93:66:5f:da:14:04:
                    e9:e6:cc:31:b4:47:ef:89:22:7f:57:1d:78:3f:e5:
                    f6:cc:82:ac:0b:3e:fd:29:62:bd:f4:45:21:9c:1f:
                    62:a9:22:a0:b8:6a:7a:cf:f3:37:57:2f:70:6f:83:
                    15:44:9c:71:cb:bb:02:20:7f:6b:ca:ab:62:96:5e:
                    49:cf:0b:5b:b7:63:73:80:0b:94:ae:5d:0f:61:b1:
                    53:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E5:B5:C8:A8:0E:74:B3:79:07:89:B1:91:3D:D7:27:0B:2E:1E:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/65f9bbff-d5b3-3279-9baa-d5ff5393760b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.crl

            X509v3 Authority Key Identifier:
                keyid:A9:9B:7D:23:00:FE:03:6E:23:9A:5A:4C:08:96:8A:C6:A8:56:E9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7f11acc9-4e5b-4ede-9ce2-b84b2ebc711e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:e1:dd:92:d4:3a:2f:64:71:12:52:4e:80:20:9e:2a:e2:6c:
         72:86:96:a2:43:4d:7b:96:76:9c:30:6b:46:d3:44:7e:84:32:
         30:be:03:8b:b6:fd:bc:af:29:47:81:bc:30:4d:18:48:08:e9:
         4a:03:51:a6:b9:57:e2:40:99:7a:77:f4:33:b5:b5:ff:47:37:
         5c:af:a3:1e:35:1f:a5:c0:7b:ae:65:3f:a0:e4:5e:d2:55:4a:
         c4:2c:76:d0:f2:c6:0e:42:9b:f4:5b:c9:37:09:6e:3c:fb:e9:
         be:2c:1c:fc:51:64:04:9e:30:cc:eb:82:1e:e8:74:08:e5:d4:
         3d:fb:26:57:a4:be:69:bc:fa:76:42:f5:9a:59:9f:ab:94:4e:
         cc:44:8c:78:bd:99:9d:f8:de:53:a9:20:fc:00:ac:e3:a1:09:
         9f:1c:b2:e0:63:1b:7a:5c:98:31:f1:c1:f0:e9:6b:ac:16:df:
         db:c8:18:79:79:17:f5:a5:5e:01:ec:7e:e8:ef:f9:fe:1e:e0:
         d1:0b:1d:ca:9c:59:bf:56:35:27:ce:5c:b1:09:95:4c:6e:f5:
         36:95:29:87:83:0f:b5:fc:cf:60:87:d2:65:a7:5f:54:e7:9e:
         5e:58:4e:35:76:dd:f8:de:eb:b4:8d:4f:e3:19:0e:8c:47:06:
         f8:f3:05:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----