Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7f745c8-dffc-4a13-83e5-bacb40d1409f/931c3f8d-97b7-3305-acd7-086abc479529.roa
File:                     931c3f8d-97b7-3305-acd7-086abc479529.roa (raw, json)
Hash identifier:          wHK/cxVOYbY93SUJVJNygP2OE/979jIBY83nDBuHzkY=
Subject key identifier:   E8:51:30:DE:89:81:D0:F9:DE:3E:B6:FC:35:15:71:23:22:E0:23:19
Certificate issuer:       /CN=e7f745c8-dffc-4a13-83e5-bacb40d1409f
Certificate serial:       010D0C9F432858435FAFC9FE58A339AAF58957B0
Authority key identifier: 34:2C:99:63:77:2D:B2:0E:4B:14:04:C6:A6:F6:C1:D0:04:C2:90:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7f745c8-dffc-4a13-83e5-bacb40d1409f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7f745c8-dffc-4a13-83e5-bacb40d1409f/931c3f8d-97b7-3305-acd7-086abc479529.roa
Signing time:             Thu 28 Sep 2023 14:48:11 +0000
ROA not before:           Thu 28 Sep 2023 14:48:11 +0000
ROA not after:            Wed 27 Dec 2023 15:48:11 +0000
asID:                     399972
IP address blocks:        149.112.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5f:af:c9:fe:58:a3:39:aa:f5:89:57:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f745c8-dffc-4a13-83e5-bacb40d1409f
        Validity
            Not Before: Sep 28 14:48:11 2023 GMT
            Not After : Dec 27 15:48:11 2023 GMT
        Subject: CN=520be45c-bfc7-4834-bcf1-06e5791d4e9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5e:ee:3c:ee:c9:90:72:fd:aa:3a:d8:3b:36:
                    d8:35:c5:d2:48:91:57:20:3e:8c:21:2b:4d:e4:ce:
                    93:0d:fd:4f:9b:2b:ad:b1:95:d0:7d:30:6c:96:4e:
                    ef:79:db:a1:8b:47:b6:e9:1f:33:d6:18:f5:4a:ec:
                    05:65:6e:cd:1c:16:f1:43:a5:71:b9:e9:62:c3:b2:
                    92:e6:01:52:d4:82:a5:da:7d:8c:cf:65:b1:b2:1f:
                    43:7f:cf:7a:4d:72:26:19:2e:c5:de:5f:59:fd:9c:
                    d9:2b:c1:b4:4a:fe:62:87:e3:de:80:5c:fc:ca:ea:
                    19:15:6c:43:ba:7c:d2:64:89:f0:9d:7b:17:8f:db:
                    d9:b2:27:6c:6d:6c:60:cd:1f:c7:40:99:70:d9:45:
                    d3:0c:e2:d4:c8:29:2c:b6:ae:f5:7e:fb:ea:09:2a:
                    04:38:74:a1:93:d3:aa:d4:36:77:db:db:45:20:48:
                    e2:10:6b:09:c0:16:4c:5b:f4:ae:29:80:74:78:34:
                    53:2c:96:98:e0:2a:18:2a:45:e2:2d:13:f0:20:65:
                    c6:6c:68:a7:5d:57:fa:70:c9:e3:b5:82:0d:38:f3:
                    e3:87:36:fb:b9:dd:1e:c8:60:06:e5:82:dc:63:c0:
                    ba:cf:28:09:f0:82:37:9c:9c:53:d7:76:02:da:36:
                    39:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:51:30:DE:89:81:D0:F9:DE:3E:B6:FC:35:15:71:23:22:E0:23:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7f745c8-dffc-4a13-83e5-bacb40d1409f/931c3f8d-97b7-3305-acd7-086abc479529.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7f745c8-dffc-4a13-83e5-bacb40d1409f/e7f745c8-dffc-4a13-83e5-bacb40d1409f.crl

            X509v3 Authority Key Identifier:
                keyid:34:2C:99:63:77:2D:B2:0E:4B:14:04:C6:A6:F6:C1:D0:04:C2:90:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7f745c8-dffc-4a13-83e5-bacb40d1409f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:e6:71:d8:a4:33:46:4f:30:d4:2c:6d:d6:13:b0:e5:0b:c0:
         d1:f1:a3:4e:af:4a:14:a0:e7:24:67:eb:f1:6a:11:92:b9:9d:
         22:0b:f0:cb:0d:a6:df:3d:d6:bb:d7:d4:65:28:40:3b:99:89:
         c3:6b:0c:60:e0:5d:6a:4e:43:dd:c4:54:0a:da:c2:4d:59:30:
         f2:22:6e:52:d8:50:09:e2:b3:1f:0f:6d:2d:64:f1:73:6f:84:
         26:6d:92:30:68:0c:1b:c2:cd:fa:71:a4:be:97:f9:e2:99:97:
         18:bf:6a:19:40:87:be:bf:f4:b1:02:2f:e1:81:6a:d9:12:1a:
         d6:e2:d4:fb:ea:ce:5c:29:7f:68:65:79:76:ae:44:8c:a9:40:
         30:69:b6:2b:7e:0c:c4:3a:0f:71:d3:be:8d:9f:e7:ea:03:7c:
         96:18:f0:79:cf:31:5f:d9:9c:3d:5f:85:f1:9c:5f:cc:69:7c:
         4a:b5:ee:14:b8:69:91:4f:6c:99:ac:bf:4b:54:e0:31:cc:25:
         0f:11:fc:e2:c3:06:9f:97:5b:be:fe:5e:5f:7e:65:ca:f6:43:
         d6:1e:87:b4:95:fc:1c:26:16:48:76:0d:37:98:67:52:cc:47:
         6a:9e:39:b7:91:7a:10:62:50:16:7b:ac:d5:ea:38:f2:0f:52:
         d5:5e:ae:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWENfr8n+WKM5qvWJV7AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdmNzQ1YzgtZGZmYy00YTEzLTgzZTUtYmFjYjQwZDE0
MDlmMB4XDTIzMDkyODE0NDgxMVoXDTIzMTIyNzE1NDgxMVowLzEtMCsGA1UEAxMk
NTIwYmU0NWMtYmZjNy00ODM0LWJjZjEtMDZlNTc5MWQ0ZTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV7uPO7JkHL9qjrYOzbYNcXSSJFXID6MIStN
5M6TDf1PmyutsZXQfTBslk7veduhi0e26R8z1hj1SuwFZW7NHBbxQ6Vxueliw7KS
5gFS1IKl2n2Mz2Wxsh9Df896TXImGS7F3l9Z/ZzZK8G0Sv5ih+PegFz8yuoZFWxD
unzSZInwnXsXj9vZsidsbWxgzR/HQJlw2UXTDOLUyCkstq71fvvqCSoEOHShk9Oq
1DZ329tFIEjiEGsJwBZMW/SuKYB0eDRTLJaY4CoYKkXiLRPwIGXGbGinXVf6cMnj
tYINOPPjhzb7ud0eyGAG5YLcY8C6zygJ8II3nJxT13YC2jY5QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOhRMN6JgdD53j62/DUVcSMi4CMZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2Y3
NDVjOC1kZmZjLTRhMTMtODNlNS1iYWNiNDBkMTQwOWYvOTMxYzNmOGQtOTdiNy0z
MzA1LWFjZDctMDg2YWJjNDc5NTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdmNzQ1YzgtZGZmYy00YTEzLTgz
ZTUtYmFjYjQwZDE0MDlmL2U3Zjc0NWM4LWRmZmMtNGExMy04M2U1LWJhY2I0MGQx
NDA5Zi5jcmwwHwYDVR0jBBgwFoAUNCyZY3ctsg5LFATGpvbB0ATCkKcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2Y3NDVjOC1kZmZjLTRhMTMtODNlNS1iYWNi
NDBkMTQwOWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClXCYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGrmcdikM0ZPMNQsbdYTsOULwNHxo06vShSg5yRn6/FqEZK5nSIL8MsN
pt891rvX1GUoQDuZicNrDGDgXWpOQ93EVArawk1ZMPIiblLYUAnisx8PbS1k8XNv
hCZtkjBoDBvCzfpxpL6X+eKZlxi/ahlAh76/9LECL+GBatkSGtbi1Pvqzlwpf2hl
eXauRIypQDBptit+DMQ6D3HTvo2f5+oDfJYY8HnPMV/ZnD1fhfGcX8xpfEq17hS4
aZFPbJmsv0tU4DHMJQ8R/OLDBp+XW77+Xl9+Zcr2Q9Yeh7SV/BwmFkh2DTeYZ1LM
R2qeObeRehBiUBZ7rNXqOPIPUtVersI=
-----END CERTIFICATE-----