Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/b83116d5-3530-3a0f-b68a-262998d03c1a.roa
File:                     b83116d5-3530-3a0f-b68a-262998d03c1a.roa (raw, json)
Hash identifier:          5zzGTGHsAGINA5r6PI7JTgdVq5S/vud2bf2pkI4XWhQ=
Subject key identifier:   60:CD:81:CF:05:6E:2B:64:D9:73:35:6C:65:29:40:87:65:01:65:9E
Certificate issuer:       /CN=c85557f0-25ce-414b-9504-736b20840d26
Certificate serial:       010D0C9F4328583DF6C91D11F21BC87866D58F80
Authority key identifier: A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/b83116d5-3530-3a0f-b68a-262998d03c1a.roa
Signing time:             Thu 19 May 2022 14:55:59 +0000
ROA not before:           Thu 19 May 2022 14:55:59 +0000
ROA not after:            Wed 21 Aug 2024 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f6:c9:1d:11:f2:1b:c8:78:66:d5:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85557f0-25ce-414b-9504-736b20840d26
        Validity
            Not Before: May 19 14:55:59 2022 GMT
            Not After : Aug 21 04:00:00 2024 GMT
        Subject: CN=201e9292-5223-4a7b-915b-62c02f0d7d6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:86:f9:6a:22:55:1f:10:60:f1:7a:ef:f8:d4:
                    f7:58:4f:7f:f8:c7:cd:33:4d:71:3c:78:24:58:30:
                    37:50:7c:8c:82:48:e6:fe:f6:64:fb:5d:53:ff:8c:
                    fd:27:04:13:38:3d:b7:e0:85:0d:75:9f:31:01:b1:
                    63:e8:69:98:3d:d2:7d:cf:0e:47:7b:c5:cb:ce:29:
                    bc:ce:9e:e4:b2:a2:2b:d1:7f:0c:29:0d:46:9c:6a:
                    ef:b8:cd:dd:1d:01:9b:68:b9:44:4a:7a:95:8d:79:
                    41:01:45:f1:71:97:f8:7e:73:3a:3f:f6:b5:49:03:
                    f4:d3:2e:0c:d7:8a:ea:87:8d:e4:4d:59:96:2e:f9:
                    14:83:08:73:15:ad:16:31:73:5f:9a:e6:58:4b:92:
                    be:d6:f7:b1:bd:cc:cc:14:b6:40:2e:60:80:ec:ce:
                    cc:be:78:4e:70:45:6c:d5:63:dc:8a:8f:e2:dd:fb:
                    4b:b8:f0:f2:55:21:dd:59:df:18:40:fd:ee:bc:67:
                    9f:fc:f2:a5:02:37:36:66:be:f3:29:4a:8f:22:03:
                    3f:88:9d:9d:c2:d6:1b:be:2e:3e:55:c8:fd:19:2b:
                    02:c4:06:c7:5c:7c:ff:bf:b9:a1:aa:54:ef:1c:26:
                    6e:9e:ce:4b:99:e5:7c:37:76:b7:25:3d:9e:a0:81:
                    d4:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CD:81:CF:05:6E:2B:64:D9:73:35:6C:65:29:40:87:65:01:65:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/b83116d5-3530-3a0f-b68a-262998d03c1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/c85557f0-25ce-414b-9504-736b20840d26.crl

            X509v3 Authority Key Identifier:
                keyid:A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ce:d9:2c:66:2e:16:0e:e8:58:d5:3c:d2:7a:1a:94:6a:dd:
         47:4a:34:3f:e6:c3:96:f7:2e:2c:a0:9a:e8:44:86:fc:d7:ae:
         c4:d9:c2:5b:fa:07:d1:97:f4:4c:47:c7:d4:9a:04:36:a0:48:
         e3:73:84:0e:02:b8:e3:b7:0a:09:98:66:e5:9f:23:da:64:72:
         ac:fa:24:a1:8d:60:79:1f:3c:74:72:fe:6c:20:e5:80:a7:51:
         9a:01:6f:24:b3:56:f2:a6:d2:b6:87:a5:cc:77:4d:e6:93:54:
         66:ea:e2:9c:1e:7f:78:4b:cb:0a:91:a1:e1:6a:f7:da:5a:1a:
         54:63:19:a0:fd:e0:f0:e8:50:69:91:76:cb:46:f9:6d:89:f4:
         38:e1:bc:d7:ab:c2:02:3c:ab:8e:96:3d:04:2a:24:14:da:16:
         3d:49:91:b8:af:8e:fa:b1:80:97:56:43:ed:b9:97:48:22:35:
         ac:57:b0:67:ec:15:72:34:4e:b1:e8:fb:8d:ba:ef:33:dd:54:
         ab:3c:e1:32:40:6f:3a:92:a4:ec:08:4d:56:4e:f0:30:fa:ac:
         66:22:44:a4:fd:3c:6f:d9:87:c8:74:33:06:91:1a:b8:8f:79:
         84:92:72:3e:79:4b:69:0e:f0:33:9c:45:c7:df:52:d5:6e:82:
         df:52:47:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----