Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/eeaa1c09-9ae4-3ae5-ad42-8ed332138ab5.roa
File:                     eeaa1c09-9ae4-3ae5-ad42-8ed332138ab5.roa (raw, json)
Hash identifier:          WBHKjtVzobsmWv5VbiYaRphAlbUWph9GEDUM8LOTRVE=
Subject key identifier:   C3:D8:31:29:E7:43:48:52:4B:B6:AD:A4:36:3C:B9:85:DC:56:A2:CF
Certificate issuer:       /CN=c85557f0-25ce-414b-9504-736b20840d26
Certificate serial:       010D0C9F4328583DF7693EA8B0021EAB11D25D00
Authority key identifier: A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/eeaa1c09-9ae4-3ae5-ad42-8ed332138ab5.roa
Signing time:             Thu 19 May 2022 14:55:59 +0000
ROA not before:           Thu 19 May 2022 14:55:59 +0000
ROA not after:            Wed 21 Aug 2024 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3d:f7:69:3e:a8:b0:02:1e:ab:11:d2:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85557f0-25ce-414b-9504-736b20840d26
        Validity
            Not Before: May 19 14:55:59 2022 GMT
            Not After : Aug 21 04:00:00 2024 GMT
        Subject: CN=ab36cecd-ae44-4f40-aabe-6cd0ac50d9d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:de:66:79:d9:c6:86:09:35:62:ab:20:ab:27:
                    6d:dd:a9:d9:77:c7:36:e6:a2:38:bb:ec:3b:45:6c:
                    9e:0e:68:ba:a8:ef:d2:49:be:3c:8c:86:42:a8:17:
                    dd:85:40:16:79:d7:c2:60:ee:54:cc:85:e5:ab:dc:
                    c4:26:da:b3:83:3f:76:af:45:22:a4:03:f4:de:17:
                    10:11:d4:f5:4b:d8:cf:17:93:ef:3a:c2:43:4e:d3:
                    2d:7a:a4:d3:5b:72:af:d6:45:0f:2e:e7:73:2a:8e:
                    f3:d0:43:58:56:9a:ea:85:45:e4:40:d9:da:d7:51:
                    ab:bf:1e:69:03:11:36:6a:89:f3:3d:1b:4b:38:03:
                    5c:8b:1d:71:41:e5:23:4f:30:07:82:20:9d:c0:9e:
                    a2:2f:c9:fc:3f:1f:12:23:17:73:93:7a:af:c1:34:
                    17:49:58:ce:b4:31:84:b4:c3:04:4d:aa:ac:fe:0a:
                    36:74:91:ae:80:f0:1f:d0:0e:d4:7d:ee:3c:49:30:
                    79:41:d3:46:dd:54:76:2e:61:f1:17:3f:6c:90:cb:
                    4e:fb:a3:6d:c9:8c:a3:7b:02:2e:7c:15:59:85:72:
                    0e:74:24:56:5b:05:af:b0:6f:3d:7c:11:80:fd:bb:
                    ff:f2:42:b0:74:38:f6:ae:54:61:8c:02:10:d3:d8:
                    3b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:D8:31:29:E7:43:48:52:4B:B6:AD:A4:36:3C:B9:85:DC:56:A2:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/eeaa1c09-9ae4-3ae5-ad42-8ed332138ab5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26/c85557f0-25ce-414b-9504-736b20840d26.crl

            X509v3 Authority Key Identifier:
                keyid:A6:7A:89:A4:86:CE:14:4D:11:FE:5E:E1:66:60:3E:F1:58:6F:0F:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c85557f0-25ce-414b-9504-736b20840d26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:60:61:51:f2:05:f3:71:bc:51:99:6a:3a:cd:38:d9:9f:4c:
         94:48:3a:14:08:84:6a:32:e5:eb:33:9d:e7:b8:04:0b:ea:f2:
         85:9c:0b:fa:54:f8:54:c0:95:c3:45:61:26:c8:fc:86:51:99:
         6a:e9:b2:dc:27:b8:43:43:ec:5b:e9:83:91:d3:44:23:34:bb:
         b0:d8:ce:a5:5a:74:df:0c:3a:0d:a0:fe:b1:a3:f3:79:f2:0d:
         da:39:e9:cc:9e:8e:f1:f4:ec:df:e7:cf:57:8b:8e:b0:24:30:
         92:22:36:fd:30:3a:ce:08:dc:bf:5a:1f:2a:19:06:fc:21:29:
         e5:c1:d6:51:a2:6c:45:e0:74:97:95:4a:81:ec:46:42:23:21:
         70:c2:12:38:14:73:17:e2:af:ec:35:aa:e5:f8:d4:0a:3a:02:
         f5:d7:cc:1f:05:01:01:a8:03:cb:38:a8:ed:2a:2e:db:32:b5:
         a5:48:7f:20:38:88:54:94:75:e5:27:35:62:89:24:57:67:a5:
         46:24:a2:62:88:d6:ec:f4:1d:81:5a:79:16:ca:0d:8d:cb:8a:
         e6:06:1e:43:a1:0f:e3:cf:0d:a8:de:f6:d4:a6:92:9a:37:af:
         29:82:bf:d9:66:76:3a:98:44:dd:ef:5d:84:e7:7d:d2:ca:90:
         20:28:64:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----