Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/6980715a-bf48-34cf-b668-bfcc2ed2af0a.roa
File:                     6980715a-bf48-34cf-b668-bfcc2ed2af0a.roa (raw, json)
Hash identifier:          UQuNbSos+TmMUFftNeSqDvfL54gp8BzM4xPrLDN0MU0=
Subject key identifier:   2E:99:19:ED:F5:35:8D:66:6C:E2:BB:C3:D8:84:3F:5A:42:2A:91:36
Certificate issuer:       /CN=c85557f0-25ce-414b-9504-736b20840d26
Certificate serial:       010D0C9F4328583DF78D520FF0C6CE926E6479E8
Authority key identifier: A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/6980715a-bf48-34cf-b668-bfcc2ed2af0a.roa
Signing time:             Thu 19 May 2022 14:55:59 +0000
ROA not before:           Thu 19 May 2022 14:55:59 +0000
ROA not after:            Thu 25 May 2023 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f7:8d:52:0f:f0:c6:ce:92:6e:64:79:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85557f0-25ce-414b-9504-736b20840d26
        Validity
            Not Before: May 19 14:55:59 2022 GMT
            Not After : May 25 04:00:00 2023 GMT
        Subject: CN=93dc5404-3154-431b-a1a4-67f811c167db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:14:1b:90:bd:db:5a:0b:60:6b:91:67:5b:a6:
                    2c:5f:80:e5:fd:ba:4a:d4:8e:ff:d7:08:60:bb:bd:
                    d5:a1:05:1e:fb:b9:d6:36:da:2c:ab:6d:11:bf:45:
                    1d:4b:50:65:92:2c:79:07:d9:38:87:b7:64:45:e2:
                    1a:93:52:22:e2:21:75:bb:c4:9e:94:2b:de:55:06:
                    4d:7d:95:41:0f:0d:4e:62:5d:e0:82:77:91:e3:e5:
                    c0:91:cd:21:d9:f7:30:ae:b1:af:fd:42:15:e5:ab:
                    83:41:04:78:94:79:b3:84:78:31:a4:c5:a4:31:25:
                    5c:04:84:a5:9b:31:b5:50:9f:3a:24:e0:9f:29:0a:
                    22:01:3d:85:eb:06:c3:57:db:76:08:08:80:8f:cd:
                    22:f9:a6:44:4f:c7:b6:10:9c:31:de:0d:2a:e4:2a:
                    d7:a6:3e:3a:b1:5c:ee:4c:fd:66:16:35:d3:70:7c:
                    2c:10:16:bb:5d:6c:9c:dd:64:13:a5:bf:14:19:c9:
                    71:0e:86:f9:dd:a6:4a:db:d9:e3:38:ba:cf:2d:3c:
                    16:d9:80:67:16:ba:00:98:16:5e:75:18:21:d7:e7:
                    6a:65:52:cd:84:51:a7:c6:be:52:fa:18:b9:cd:65:
                    dc:af:71:81:2f:21:c2:ec:bb:a0:a1:80:d7:2e:36:
                    43:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:99:19:ED:F5:35:8D:66:6C:E2:BB:C3:D8:84:3F:5A:42:2A:91:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/6980715a-bf48-34cf-b668-bfcc2ed2af0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/c85557f0-25ce-414b-9504-736b20840d26.crl

            X509v3 Authority Key Identifier:
                keyid:A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:9d:cb:57:4d:d0:80:c0:c5:4f:37:f7:8b:30:16:c3:47:91:
         d4:86:4c:88:a3:5d:3c:b7:10:e2:e0:d9:84:ad:0d:d5:02:5f:
         07:14:15:36:b3:12:dc:22:5c:3e:6e:68:59:66:4f:e2:bb:ed:
         8a:20:a6:fa:ed:a3:19:a3:31:c9:6f:d1:c0:6d:b0:5c:e9:90:
         77:8a:71:8c:82:6c:3b:00:ab:ea:1d:4b:39:ed:20:bd:82:a7:
         48:81:d8:2a:a6:c3:fb:0a:a6:0e:72:2a:82:17:66:ba:44:bd:
         27:a9:c4:91:71:7a:32:1d:6a:10:e9:f3:9d:5b:ba:b3:34:56:
         73:28:af:4d:d0:f8:76:83:b2:4b:07:0e:da:6e:24:3c:c6:97:
         51:38:6e:fa:63:fe:19:c8:3a:02:e4:a5:c2:8c:4c:10:9f:31:
         c7:7e:df:20:c8:8e:a2:7d:e6:2e:19:97:a7:f0:20:89:7a:cd:
         b1:c0:15:5e:f7:ec:3b:8e:86:15:e1:b2:e1:90:d7:2d:4f:75:
         6b:fa:87:53:78:38:d9:63:64:b3:72:fc:c1:88:27:1c:f4:82:
         57:a1:a9:a7:51:fc:93:6b:df:f7:7c:c2:08:9a:0c:72:bd:d3:
         2c:15:ac:96:3e:56:59:59:91:cc:da:be:9b:70:62:a5:dd:0b:
         70:18:43:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWD33jVIP8MbOkm5keegwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzg1NTU3ZjAtMjVjZS00MTRiLTk1MDQtNzM2YjIwODQw
ZDI2MB4XDTIyMDUxOTE0NTU1OVoXDTIzMDUyNTA0MDAwMFowLzEtMCsGA1UEAxMk
OTNkYzU0MDQtMzE1NC00MzFiLWExYTQtNjdmODExYzE2N2RiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBQbkL3bWgtga5FnW6YsX4Dl/bpK1I7/1whg
u73VoQUe+7nWNtosq20Rv0UdS1Blkix5B9k4h7dkReIak1Ii4iF1u8SelCveVQZN
fZVBDw1OYl3ggneR4+XAkc0h2fcwrrGv/UIV5auDQQR4lHmzhHgxpMWkMSVcBISl
mzG1UJ86JOCfKQoiAT2F6wbDV9t2CAiAj80i+aZET8e2EJwx3g0q5CrXpj46sVzu
TP1mFjXTcHwsEBa7XWyc3WQTpb8UGclxDob53aZK29njOLrPLTwW2YBnFroAmBZe
dRgh1+dqZVLNhFGnxr5S+hi5zWXcr3GBLyHC7LugoYDXLjZDOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC6ZGe31NY1mbOK7w9iEP1pCKpE2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jODU1
NTdmMC0yNWNlLTQxNGItOTUwNC03MzZiMjA4NDBkMjYvNjk4MDcxNWEtYmY0OC0z
NGNmLWI2NjgtYmZjYzJlZDJhZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzg1NTU3ZjAtMjVjZS00MTRiLTk1
MDQtNzM2YjIwODQwZDI2L2M4NTU1N2YwLTI1Y2UtNDE0Yi05NTA0LTczNmIyMDg0
MGQyNi5jcmwwHwYDVR0jBBgwFoAUpnqJpIbOFE0R/l7hZmA+8VhvD8swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jODU1NTdmMC0yNWNlLTQxNGItOTUwNC03MzZi
MjA4NDBkMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGKdy1dN0IDAxU8394swFsNHkdSGTIijXTy3EOLg2YStDdUCXwcUFTaz
EtwiXD5uaFlmT+K77YogpvrtoxmjMclv0cBtsFzpkHeKcYyCbDsAq+odSzntIL2C
p0iB2Cqmw/sKpg5yKoIXZrpEvSepxJFxejIdahDp851burM0VnMor03Q+HaDsksH
DtpuJDzGl1E4bvpj/hnIOgLkpcKMTBCfMcd+3yDIjqJ95i4Zl6fwIIl6zbHAFV73
7DuOhhXhsuGQ1y1PdWv6h1N4ONljZLNy/MGIJxz0glehqadR/JNr3/d8wgiaDHK9
0ywVrJY+VllZkczavptwYqXdC3AYQ/0=
-----END CERTIFICATE-----