Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/57467857-2c1a-38ef-96da-ae64c12beee0.roa
File:                     57467857-2c1a-38ef-96da-ae64c12beee0.roa (raw, json)
Hash identifier:          AVAcVzuQLho0FYL/aw5+Ka8SFmopW0WWRl18VyJ1St8=
Subject key identifier:   A1:88:06:84:D2:EB:BE:88:62:02:76:0B:12:3D:3A:39:74:54:78:0B
Certificate issuer:       /CN=c85557f0-25ce-414b-9504-736b20840d26
Certificate serial:       010D0C9F4328583DF7552B3886D49C24D418B280
Authority key identifier: A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/57467857-2c1a-38ef-96da-ae64c12beee0.roa
Signing time:             Thu 19 May 2022 14:55:59 +0000
ROA not before:           Thu 19 May 2022 14:55:59 +0000
ROA not after:            Wed 21 Aug 2024 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f7:55:2b:38:86:d4:9c:24:d4:18:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85557f0-25ce-414b-9504-736b20840d26
        Validity
            Not Before: May 19 14:55:59 2022 GMT
            Not After : Aug 21 04:00:00 2024 GMT
        Subject: CN=4189cd1a-a35a-4a76-8450-f050843c1e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0d:fa:10:e3:33:cf:cd:83:11:c2:61:64:f3:
                    0d:bc:92:f4:d2:b2:6e:f7:f9:d9:9b:6a:ce:79:13:
                    e3:6b:82:08:43:c1:69:e5:37:07:d0:a4:6b:ab:38:
                    3e:cb:8f:45:a8:c7:f6:80:83:5d:40:18:cf:aa:95:
                    a6:6d:b1:32:48:2b:a0:4d:c2:a1:36:27:92:2b:c0:
                    98:1d:a8:20:e8:f1:3c:c7:f5:5a:d1:40:82:44:45:
                    df:b1:97:6e:bd:a8:dc:9d:e6:7b:46:dd:47:07:20:
                    da:a6:f9:2a:ab:c3:fc:38:f9:6f:78:39:a9:dd:62:
                    bc:21:87:d7:66:a6:d4:36:24:f1:3a:f0:70:14:d2:
                    82:f5:31:37:38:35:08:cb:fd:6f:cd:72:f6:94:70:
                    ad:62:52:9f:92:be:ef:7c:a2:1c:07:f0:39:d5:44:
                    1b:dc:e6:20:a1:0b:8a:7c:6f:a5:d4:27:6c:2d:ba:
                    e1:79:14:4e:cb:69:5f:1f:2c:2a:f8:22:ea:b2:a8:
                    82:ce:54:18:be:43:26:83:c9:20:f7:31:3c:20:16:
                    0f:aa:ea:1b:9b:05:46:c4:7f:52:22:e9:22:05:ce:
                    50:ed:18:fc:f5:b2:cb:0a:6c:ad:eb:25:a5:1d:d2:
                    fd:d7:af:3d:12:97:5b:41:ff:fa:bb:63:4d:a7:29:
                    6d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:88:06:84:D2:EB:BE:88:62:02:76:0B:12:3D:3A:39:74:54:78:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/57467857-2c1a-38ef-96da-ae64c12beee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/c85557f0-25ce-414b-9504-736b20840d26.crl

            X509v3 Authority Key Identifier:
                keyid:A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:a3:37:77:62:ec:f9:4a:63:88:71:6f:be:44:4b:71:f0:f2:
         58:f8:72:17:8f:c4:0a:e6:da:77:a0:22:a5:e2:46:c3:09:07:
         70:43:3a:c8:88:cb:78:9f:27:04:67:bb:a7:7c:e2:9b:7e:0e:
         3e:eb:82:ef:38:75:94:9c:b6:f8:6a:3d:b0:e8:d7:2d:c5:ad:
         15:98:40:c6:9c:29:6e:33:8f:3c:a3:1d:86:c3:bb:f9:48:e1:
         fd:31:79:e2:40:50:de:f4:82:6b:e5:8c:b9:ad:28:50:f6:90:
         de:18:dc:7d:f4:af:a4:3c:97:77:38:89:c0:b9:ab:ec:05:52:
         e1:83:3d:22:f3:4c:67:63:96:83:b3:28:ca:a6:4f:c7:2a:55:
         c0:21:dd:f2:55:d0:4a:2c:d7:f0:a3:d8:f7:93:9c:67:98:88:
         85:29:95:26:94:45:ca:bc:4f:8a:d8:36:5d:1a:db:83:8d:ae:
         8d:98:00:4f:09:2c:52:4f:7a:8a:4c:c9:36:95:0b:b1:ed:28:
         00:04:b8:b9:48:54:18:ab:26:97:c4:19:d4:1b:f9:2a:ec:00:
         13:fe:5d:85:56:c3:a5:8e:f4:15:f8:54:d0:bc:59:90:bc:ea:
         74:91:ed:ea:c9:25:30:50:98:a4:04:3c:6c:46:61:50:1e:32:
         6a:05:a3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----