Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/a8da6480-5d31-3cae-ae1f-821b52c38aaa.roa
File:                     a8da6480-5d31-3cae-ae1f-821b52c38aaa.roa (raw, json)
Hash identifier:          Fdwkyeuu3sJ2ZUlwvNQLIen8v+iD+nWJQJ0GGkRtTL8=
Subject key identifier:   8D:D6:1E:15:9C:C9:E6:34:84:15:E2:0B:4E:83:A6:0C:CE:45:0C:73
Certificate issuer:       /CN=c85557f0-25ce-414b-9504-736b20840d26
Certificate serial:       010D0C9F4328583DF79C0167753895B3972A2DF0
Authority key identifier: A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/a8da6480-5d31-3cae-ae1f-821b52c38aaa.roa
Signing time:             Thu 19 May 2022 14:55:59 +0000
ROA not before:           Thu 19 May 2022 14:55:59 +0000
ROA not after:            Thu 25 May 2023 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f7:9c:01:67:75:38:95:b3:97:2a:2d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85557f0-25ce-414b-9504-736b20840d26
        Validity
            Not Before: May 19 14:55:59 2022 GMT
            Not After : May 25 04:00:00 2023 GMT
        Subject: CN=d74f57c3-7fe5-4cb0-844d-b6b39686e2ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:00:41:6f:a5:d2:95:75:d4:78:6f:a3:23:09:
                    dc:9c:fb:b3:eb:c3:50:58:c2:b3:28:f8:85:32:fe:
                    c9:ab:26:41:85:eb:2e:44:d9:5d:e3:91:20:9d:70:
                    44:f7:3f:c5:bc:49:40:b2:7e:f6:a3:b3:fd:3d:ae:
                    84:d0:57:52:df:99:49:63:04:13:3e:23:d0:65:cf:
                    b5:a2:d4:a7:97:66:12:ca:d4:e5:f7:92:8d:58:53:
                    2c:b4:ed:82:f2:36:ff:94:0f:5d:85:67:43:ac:25:
                    0e:71:20:3e:77:7c:9e:46:ac:14:a7:e9:d2:5b:0c:
                    46:f2:d2:d9:fd:d7:a2:ba:c1:fe:7d:15:e5:83:24:
                    36:a5:29:10:4c:61:a2:6c:97:8c:31:34:c7:76:39:
                    b2:c2:62:ac:c6:ce:70:40:65:cf:06:28:b2:92:e4:
                    e5:4b:d2:05:0d:a3:e7:98:90:87:4f:46:50:aa:87:
                    07:a9:16:a7:d3:a0:49:8f:1c:62:ef:88:bb:3b:d6:
                    7c:f8:8e:80:c7:2a:69:a5:0e:00:cd:c1:88:64:34:
                    fd:55:df:50:06:9b:39:f0:c7:d6:ed:37:ff:56:81:
                    43:c8:ce:48:56:8e:32:f5:27:ad:75:84:57:ba:05:
                    8b:42:ca:ea:f3:2f:43:c0:8a:0c:87:26:82:6f:7d:
                    f9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:D6:1E:15:9C:C9:E6:34:84:15:E2:0B:4E:83:A6:0C:CE:45:0C:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/a8da6480-5d31-3cae-ae1f-821b52c38aaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/c85557f0-25ce-414b-9504-736b20840d26.crl

            X509v3 Authority Key Identifier:
                keyid:A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.155.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:7e:a6:af:a1:6b:66:23:bd:b1:2f:69:4f:e5:65:ad:bd:32:
         2b:16:f1:26:18:21:5e:e5:25:92:48:2a:75:4e:61:63:78:c2:
         f2:8b:fd:26:0e:bc:b1:b1:2c:ee:4b:f3:b0:a8:ac:76:fb:64:
         f7:7d:5b:bf:e4:ad:07:4b:fc:df:fd:3c:88:36:17:0e:f2:7e:
         ed:0b:82:4f:f8:e0:68:6b:83:ad:63:95:51:b7:ff:5b:95:b4:
         a4:1a:68:fd:d4:ff:6a:e1:26:78:25:74:b6:ba:9b:3f:fb:98:
         66:30:fb:6e:d8:19:6f:5a:be:b9:0c:79:19:5e:ad:df:05:30:
         6e:6e:bb:d2:38:3a:4e:52:f2:ee:b8:f6:79:69:fd:d3:d4:0e:
         af:88:66:88:1d:d1:37:b6:42:24:a6:e3:dd:c3:88:33:54:20:
         f7:8a:47:4d:5f:88:4f:26:47:86:98:c8:d2:c0:43:25:02:0a:
         38:90:e6:dd:f9:72:d2:27:e5:4f:90:21:11:5c:fb:30:52:98:
         07:08:60:b7:a2:93:39:17:6a:27:40:dc:eb:08:27:e8:51:b8:
         8d:33:e8:ea:f1:26:2e:75:96:fa:c6:14:f4:85:d3:46:46:4e:
         4b:24:15:10:dc:66:1d:06:34:fd:61:79:be:77:d5:a8:68:f0:
         41:7d:43:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----