Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/6d9bee0c-edde-3287-be87-fb605b653147.roa
File:                     6d9bee0c-edde-3287-be87-fb605b653147.roa (raw, json)
Hash identifier:          aKml5ENG0qpNde/GAdUwHKERpEFevA4c+hku7ALm27I=
Subject key identifier:   B4:DB:9D:13:18:A0:F7:39:69:06:B9:C6:10:33:A4:A2:22:34:6F:DB
Certificate issuer:       /CN=c85557f0-25ce-414b-9504-736b20840d26
Certificate serial:       010D0C9F4328583DF89BAA0A8E0393B630389F00
Authority key identifier: A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/6d9bee0c-edde-3287-be87-fb605b653147.roa
Signing time:             Thu 19 May 2022 14:55:59 +0000
ROA not before:           Thu 19 May 2022 14:55:59 +0000
ROA not after:            Thu 25 May 2023 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f8:9b:aa:0a:8e:03:93:b6:30:38:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85557f0-25ce-414b-9504-736b20840d26
        Validity
            Not Before: May 19 14:55:59 2022 GMT
            Not After : May 25 04:00:00 2023 GMT
        Subject: CN=c0ea152a-7acb-480f-b138-a9484c2399aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:44:c1:b8:b9:f4:a3:ab:18:4c:73:88:03:67:
                    96:5c:21:af:53:17:39:95:92:8c:c9:2e:d6:89:08:
                    3e:03:d0:5a:5d:85:19:b8:c6:4e:59:0b:8a:6b:e0:
                    4a:33:22:c2:62:45:14:88:62:91:5c:12:e8:8e:a6:
                    de:41:a4:34:fe:c2:1c:66:2d:bf:54:a5:6e:ac:af:
                    39:75:8a:aa:08:cc:09:4d:1c:28:57:2e:7f:dc:4b:
                    72:5e:78:ce:6b:11:49:7e:fd:94:96:59:25:34:99:
                    a8:ed:e7:14:e4:68:52:85:c5:1f:05:13:49:f4:52:
                    91:3f:d3:10:cb:f7:7f:02:1a:45:33:6d:c1:9c:d6:
                    e6:a0:41:cf:bd:54:15:ac:d8:ca:62:d5:ff:e4:9e:
                    f5:e3:35:16:9b:f9:1f:6b:20:a1:0c:87:f1:17:1a:
                    cc:a3:95:e5:b0:02:65:89:11:c1:0e:84:87:f6:c8:
                    d1:c7:b7:3f:ba:b8:68:da:14:21:1e:7e:96:a1:7d:
                    f3:7e:dc:a1:83:51:d4:0c:54:2d:d9:80:a5:90:b8:
                    89:d8:45:0e:f5:58:da:df:ca:e1:06:f3:60:2f:ab:
                    ad:c2:c6:a7:b4:9c:1b:6f:e3:87:1f:1f:9c:fb:11:
                    b2:0c:02:b3:78:68:5a:ac:47:3f:4c:fa:45:e4:60:
                    3b:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DB:9D:13:18:A0:F7:39:69:06:B9:C6:10:33:A4:A2:22:34:6F:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/6d9bee0c-edde-3287-be87-fb605b653147.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/c85557f0-25ce-414b-9504-736b20840d26.crl

            X509v3 Authority Key Identifier:
                keyid:A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:80:cb:4b:1c:ab:10:1d:ac:c4:68:ae:7a:aa:f9:1e:ce:61:
         8e:bb:69:9c:6b:b3:16:62:c6:e0:3b:60:6e:4f:3a:c1:a7:39:
         f5:f8:ae:8e:32:e8:78:c2:70:68:92:5e:c2:0e:01:e4:ef:f1:
         3a:37:76:bc:99:0a:de:57:18:c5:9c:aa:46:b5:91:51:ef:ca:
         f8:55:84:b0:93:4b:d5:1f:64:ee:95:62:2b:8c:a9:d4:7b:c8:
         d6:32:2e:4d:cb:cf:af:bd:fa:95:c0:ab:af:38:a0:95:8b:9d:
         3e:e3:8a:a8:65:ed:ce:55:76:99:4f:93:88:65:17:fe:6d:5b:
         3a:bb:f4:62:c4:56:6f:66:11:a8:78:ea:03:a4:ae:fe:ea:c7:
         2d:0f:96:02:a4:7a:af:f2:a4:0a:1c:b7:b9:0e:0a:03:8b:d7:
         9c:02:fc:77:47:63:d1:bf:04:a9:7f:58:57:4e:fd:0c:d8:ed:
         5d:7a:d2:4c:93:bf:c4:3d:f5:69:69:37:bd:98:3c:c5:a7:6d:
         69:89:af:bd:e7:69:39:84:47:1a:0f:17:63:a5:ae:89:94:64:
         14:7f:fe:ab:84:3a:16:b3:f6:44:c5:3f:5c:4d:5a:09:f0:92:
         a7:23:28:ea:2c:c6:86:78:5e:39:c8:d5:a3:5f:51:30:89:70:
         88:e3:ba:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----