Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/8df9c8bd-7b9b-3eef-8ac5-54c62d4670fc.roa
File:                     8df9c8bd-7b9b-3eef-8ac5-54c62d4670fc.roa (raw, json)
Hash identifier:          2pCV0ljcq+J9zW7bXJVm1Y8N7q03S6+kOmRe4OISqaA=
Subject key identifier:   9D:6F:4F:56:51:39:88:0B:91:38:CA:74:2F:71:E0:2F:2B:5D:D4:5A
Certificate issuer:       /CN=c85557f0-25ce-414b-9504-736b20840d26
Certificate serial:       010D0C9F4328583DF7B893F9F1902521B8A6C100
Authority key identifier: A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/8df9c8bd-7b9b-3eef-8ac5-54c62d4670fc.roa
Signing time:             Thu 19 May 2022 14:55:59 +0000
ROA not before:           Thu 19 May 2022 14:55:59 +0000
ROA not after:            Thu 25 May 2023 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f7:b8:93:f9:f1:90:25:21:b8:a6:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85557f0-25ce-414b-9504-736b20840d26
        Validity
            Not Before: May 19 14:55:59 2022 GMT
            Not After : May 25 04:00:00 2023 GMT
        Subject: CN=417df4fb-e0fa-4973-89d5-7700d327087f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2a:df:36:a4:60:47:14:e9:f8:61:01:fb:89:
                    d1:7c:84:46:a7:3e:cc:d0:ce:c3:0a:9f:6d:0d:de:
                    90:9d:93:df:e1:e8:04:39:e3:db:6f:d7:a2:5f:22:
                    51:eb:5f:b4:30:a5:0b:fa:cf:6e:ce:7b:51:fe:d3:
                    c2:0d:55:6e:2e:2d:3b:17:93:f2:75:55:d7:93:6e:
                    00:c4:0c:87:30:16:0b:57:2a:6c:82:31:0f:e2:53:
                    32:74:6f:fb:bc:cc:47:7f:b7:a9:da:a4:dc:87:84:
                    b4:81:96:8a:db:81:d8:9f:a1:a2:37:a8:55:f8:63:
                    39:a6:e0:ec:a9:f1:f5:c8:ee:de:2f:5d:b2:cc:19:
                    4c:10:1c:3c:de:c8:40:6e:fb:a5:bc:13:6c:cd:24:
                    e3:72:a8:93:0e:ce:f9:f0:cb:5f:c9:2f:85:e0:29:
                    16:11:ad:ac:95:7f:9d:fe:d4:06:1e:fb:63:a2:98:
                    66:74:22:84:31:73:66:b6:d3:b8:98:2e:50:9e:ef:
                    96:46:00:1d:b1:d2:3b:a8:1e:28:32:6d:ee:27:55:
                    bc:df:23:8b:04:92:1b:b6:10:ee:13:4e:88:3d:23:
                    84:5c:9f:ef:90:24:ea:19:f4:f7:8b:fb:78:05:44:
                    36:4d:f0:a5:cc:22:c8:0f:93:dd:37:7d:dc:df:94:
                    9f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6F:4F:56:51:39:88:0B:91:38:CA:74:2F:71:E0:2F:2B:5D:D4:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/8df9c8bd-7b9b-3eef-8ac5-54c62d4670fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/c85557f0-25ce-414b-9504-736b20840d26.crl

            X509v3 Authority Key Identifier:
                keyid:A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:de:3c:22:20:58:a8:d5:e1:39:16:e1:47:9c:e1:af:f8:93:
         34:3c:0a:0d:a8:ff:2d:21:f1:47:4d:bb:6c:0e:6f:60:5d:6f:
         02:38:b8:e2:aa:ab:45:e5:16:b7:df:63:25:61:21:9d:a0:aa:
         37:2e:6e:8f:ed:91:83:50:66:77:9b:3c:31:c9:7f:14:87:4e:
         49:ca:2a:01:c1:de:44:0a:59:4b:fe:6b:cf:f3:64:2a:6d:ca:
         4a:db:e9:ac:6a:0e:36:e2:23:83:f2:6a:bd:4c:56:76:60:f6:
         51:6b:d5:2b:f1:e2:7a:1a:08:14:f5:5e:cf:e0:a7:d6:68:e4:
         6e:c3:fd:51:23:a0:1e:20:9b:8f:0e:ce:d6:70:05:97:a4:32:
         8e:37:96:31:61:4b:e1:1b:c2:53:22:f7:c0:68:42:a1:f0:03:
         13:a9:dc:ba:32:59:64:53:a1:a6:1d:23:96:19:08:d0:aa:71:
         ef:5d:b7:1c:47:5e:fa:6c:17:2e:de:45:12:e8:69:e0:d3:9a:
         20:9d:02:f7:e0:c0:b5:6b:0a:0f:b4:9c:07:7f:f5:e0:cd:e1:
         e9:85:89:78:c1:b4:87:25:59:a4:99:0f:c1:a3:e2:b4:f2:3b:
         70:27:1f:15:14:d1:b1:ad:31:f0:5b:1b:e6:3f:39:1a:cf:dc:
         bd:1d:76:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----