Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/43d47628-7cb9-3cc2-ac21-724470ed1b48.roa
File:                     43d47628-7cb9-3cc2-ac21-724470ed1b48.roa (raw, json)
Hash identifier:          VCuMw+P1B0nPmwo26d5Fr7GvxL03wAwYkEA1wyCqTOM=
Subject key identifier:   60:9D:DF:95:0E:B4:B3:8B:32:AA:A8:1D:C7:76:91:AD:56:F0:1A:07
Certificate issuer:       /CN=de865b2a-8f4f-483a-937a-3947af6e6924
Certificate serial:       010D0C9F4328584437007C600F418C23FCE1C300
Authority key identifier: D5:8A:FC:33:7A:DB:C0:F3:D6:54:00:8E:A1:6B:0A:08:D9:7D:D1:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/43d47628-7cb9-3cc2-ac21-724470ed1b48.roa
Signing time:             Thu 14 Dec 2023 17:49:35 +0000
ROA not before:           Thu 14 Dec 2023 17:49:35 +0000
ROA not after:            Wed 13 Mar 2024 16:49:35 +0000
asID:                     399970
IP address blocks:        149.112.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:37:00:7c:60:0f:41:8c:23:fc:e1:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de865b2a-8f4f-483a-937a-3947af6e6924
        Validity
            Not Before: Dec 14 17:49:35 2023 GMT
            Not After : Mar 13 16:49:35 2024 GMT
        Subject: CN=eeea32d2-7998-47b9-8a6f-15083028f943
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:06:93:2a:13:41:41:dd:c3:49:42:3b:20:3d:
                    a0:8a:9e:9b:c6:c3:ed:61:02:1f:07:c2:4a:b3:47:
                    69:ba:ca:f0:1c:5e:db:44:be:4a:29:9d:8b:77:b2:
                    e9:93:58:dc:f7:63:e7:b7:ac:62:28:f6:ef:aa:64:
                    d7:fc:7b:33:60:6c:d1:dd:71:2f:88:20:05:d0:f7:
                    c5:02:90:c0:3d:fe:69:2f:17:5a:99:d2:7e:7f:a8:
                    91:01:6e:3b:ec:4c:a6:05:7a:31:d4:74:12:19:b2:
                    4c:8f:1a:c3:7f:dd:92:53:1a:71:bf:2c:25:54:b9:
                    2d:78:1b:ca:f4:92:2d:e0:93:80:10:7c:cc:cf:f7:
                    12:04:2c:da:7b:90:e8:f5:06:c0:db:e4:7a:2d:5a:
                    6e:2b:a9:42:6a:63:f5:21:af:d6:13:3d:ea:31:e9:
                    24:2e:d0:82:ae:af:2c:2a:3d:d8:30:94:26:23:5b:
                    df:e1:d0:b2:c9:4d:b3:42:b1:d0:a3:e4:5d:28:48:
                    41:3f:e7:3e:23:ac:ab:c0:86:79:92:f6:ff:6f:ec:
                    f5:c3:8c:ad:14:b9:83:f0:d7:e0:4d:42:3a:4a:52:
                    97:86:db:b9:48:7a:18:df:6c:1f:01:e3:40:7b:25:
                    34:b9:f2:85:c2:6c:0e:96:9a:27:c9:b4:43:39:36:
                    32:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:9D:DF:95:0E:B4:B3:8B:32:AA:A8:1D:C7:76:91:AD:56:F0:1A:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/43d47628-7cb9-3cc2-ac21-724470ed1b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924/de865b2a-8f4f-483a-937a-3947af6e6924.crl

            X509v3 Authority Key Identifier:
                keyid:D5:8A:FC:33:7A:DB:C0:F3:D6:54:00:8E:A1:6B:0A:08:D9:7D:D1:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/de865b2a-8f4f-483a-937a-3947af6e6924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:e2:6a:12:51:6a:84:34:fd:89:59:c5:da:84:52:a0:21:cc:
         05:5e:c4:21:8d:5b:21:65:a8:b4:03:52:5a:f9:aa:e5:11:83:
         99:c3:ec:f6:07:aa:82:8e:92:bf:4c:47:b7:27:cf:f8:c6:18:
         bd:68:a2:3c:ad:63:3e:21:78:46:b2:30:2e:7b:dd:b5:ce:c3:
         88:1d:20:4b:cc:95:c1:6d:1b:81:e7:4f:6a:82:1d:56:52:e3:
         eb:a6:77:2c:58:3c:91:b2:bb:63:c8:4c:07:55:7b:62:2e:eb:
         78:a2:6f:ec:47:51:2e:c7:34:8a:26:dd:67:76:fe:19:c8:71:
         af:cf:3c:65:cd:22:db:86:f1:d8:b5:7d:30:ba:32:4d:61:65:
         7a:36:34:a5:95:7a:2e:13:93:e7:8b:b7:a3:62:b1:bb:1c:c4:
         86:3a:97:8c:1a:3b:90:58:44:3b:3e:dd:06:b6:05:18:9a:5a:
         c9:ad:5f:88:a7:67:9c:1b:ff:43:fe:64:b2:4d:b8:d8:72:89:
         e5:51:1d:39:42:40:93:fd:52:4d:54:35:1f:dc:50:6a:3d:d2:
         28:04:28:ef:de:15:88:01:6e:b6:f0:92:0f:2d:5c:5d:b0:53:
         7b:ee:cf:a1:cb:4d:18:31:83:c7:af:4d:6e:f5:ed:84:c2:b5:
         b6:fa:98:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----