Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/0832e634-9519-314d-a48c-f8ffa4940d8f.roa
File:                     0832e634-9519-314d-a48c-f8ffa4940d8f.roa (raw, json)
Hash identifier:          4hmNdElyXczRZGIUJYVtyp1wNWt/i0HumcSE+4DhXHQ=
Subject key identifier:   F3:EA:41:61:49:73:8A:D2:F5:F5:2E:64:D1:1D:1E:D4:71:12:A1:D9
Certificate issuer:       /CN=c85557f0-25ce-414b-9504-736b20840d26
Certificate serial:       010D0C9F4328583DF4385C78A05B68472F0EF480
Authority key identifier: A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/0832e634-9519-314d-a48c-f8ffa4940d8f.roa
Signing time:             Thu 19 May 2022 14:55:59 +0000
ROA not before:           Thu 19 May 2022 14:55:59 +0000
ROA not after:            Wed 21 Aug 2024 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f4:38:5c:78:a0:5b:68:47:2f:0e:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85557f0-25ce-414b-9504-736b20840d26
        Validity
            Not Before: May 19 14:55:59 2022 GMT
            Not After : Aug 21 04:00:00 2024 GMT
        Subject: CN=0a446818-e886-4048-9031-74b7c03e681b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b5:13:4e:dc:d9:58:ef:4c:98:5e:ca:33:f9:
                    68:53:4a:5f:64:cb:d5:82:b8:54:8c:46:46:bc:fb:
                    27:e6:76:a9:9a:d4:8e:24:1a:10:4e:cd:f9:a0:ac:
                    c5:27:0a:49:97:7d:05:77:fc:26:0a:e3:18:86:1e:
                    5e:1e:a4:df:62:21:86:7f:95:fd:ea:1f:c8:df:6e:
                    ef:d9:15:f2:9c:bb:7d:54:f0:c1:0b:03:4b:d7:2d:
                    da:cd:07:4d:af:9d:35:c3:8a:73:4e:16:9a:28:6b:
                    de:48:e4:ff:fe:a0:f6:06:22:d5:cc:2a:1a:77:08:
                    55:b2:90:11:72:3c:2d:99:7e:ba:ef:15:45:9e:64:
                    44:62:a3:f5:e1:5a:1b:ca:5c:73:13:3b:60:96:be:
                    8d:d0:f8:e7:95:45:cc:8f:0e:17:ec:e8:1c:ef:fd:
                    a2:49:34:f4:88:4a:e1:e0:41:9e:49:f7:78:66:50:
                    ea:aa:5c:4d:cd:eb:dc:dc:85:79:c3:7d:ad:a9:45:
                    7e:44:b9:55:9f:2e:8c:c3:b5:39:80:ae:c2:64:0e:
                    fe:db:ca:38:5a:30:ab:17:11:6f:66:9b:74:c6:f6:
                    5a:33:69:a8:97:07:6d:8f:d5:e8:1c:dd:70:71:96:
                    26:28:6b:c5:fc:b1:8c:42:cb:fb:69:96:e8:ed:8a:
                    54:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:EA:41:61:49:73:8A:D2:F5:F5:2E:64:D1:1D:1E:D4:71:12:A1:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/0832e634-9519-314d-a48c-f8ffa4940d8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/c85557f0-25ce-414b-9504-736b20840d26.crl

            X509v3 Authority Key Identifier:
                keyid:A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:28:e0:b0:25:a8:24:34:37:d6:4a:5c:36:6c:e5:eb:52:5e:
         40:7b:6d:cd:9d:8f:e7:e4:50:1d:c3:f5:4a:73:fb:af:6c:4a:
         bd:17:70:35:53:3e:19:65:5a:a4:1b:e8:a4:cb:cf:96:4e:af:
         8d:0c:04:a3:0b:02:ba:c8:83:05:e9:9d:41:d7:89:35:9b:bd:
         73:47:c2:11:75:e6:19:79:dd:01:5c:e4:52:ed:22:7b:55:fb:
         a0:2b:aa:46:61:06:f7:79:68:f7:dd:a4:99:f8:dd:55:88:c4:
         30:04:6d:e0:9f:38:3f:0b:c6:cd:97:ba:d2:89:7f:1b:93:82:
         77:17:57:5b:26:22:e2:45:bd:c4:d4:93:2c:c2:bf:06:78:1c:
         71:44:aa:b0:83:07:e3:7f:9f:91:5b:06:5c:38:14:d5:88:9f:
         4e:f5:08:21:5c:50:ae:f7:99:2d:de:0d:fb:ce:85:31:4c:55:
         70:32:bc:73:15:22:c0:8b:ce:0d:c2:a3:06:18:9f:e5:63:17:
         ed:7c:fc:aa:11:b2:c0:18:7a:9f:57:67:20:19:ca:3b:c2:ea:
         38:36:52:f6:b4:c2:83:e0:a5:5e:7e:6b:82:b2:c0:82:d8:64:
         d8:45:eb:8d:de:b9:7f:01:7f:f8:bc:72:7e:8f:b9:8f:3b:99:
         05:a9:a6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----