Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7f745c8-dffc-4a13-83e5-bacb40d1409f/b73ac744-cbf7-349c-83e9-54bcdd4567db.roa
File:                     b73ac744-cbf7-349c-83e9-54bcdd4567db.roa (raw, json)
Hash identifier:          vkwZ8tKZcP1yhhsYW8yDWGuPpyTkvQkcWZDCjIrLpac=
Subject key identifier:   35:3F:1B:E8:1A:51:31:0B:61:D8:79:E1:35:33:61:2D:90:B0:9C:90
Certificate issuer:       /CN=e7f745c8-dffc-4a13-83e5-bacb40d1409f
Certificate serial:       010D0C9F432858435FAE1FB62422D1FF298030CE
Authority key identifier: 34:2C:99:63:77:2D:B2:0E:4B:14:04:C6:A6:F6:C1:D0:04:C2:90:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7f745c8-dffc-4a13-83e5-bacb40d1409f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7f745c8-dffc-4a13-83e5-bacb40d1409f/b73ac744-cbf7-349c-83e9-54bcdd4567db.roa
Signing time:             Thu 28 Sep 2023 14:44:50 +0000
ROA not before:           Thu 28 Sep 2023 14:44:50 +0000
ROA not after:            Wed 27 Dec 2023 15:44:50 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5f:ae:1f:b6:24:22:d1:ff:29:80:30:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f745c8-dffc-4a13-83e5-bacb40d1409f
        Validity
            Not Before: Sep 28 14:44:50 2023 GMT
            Not After : Dec 27 15:44:50 2023 GMT
        Subject: CN=779d7bca-0fa8-4e30-81c5-dc02cb394666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fe:d1:05:ea:00:08:58:ba:7b:3d:1f:9a:77:
                    0a:7f:e2:5b:79:9c:11:07:96:2d:e7:35:d3:ff:0f:
                    42:40:6b:e9:29:d8:19:64:0a:ab:21:bd:db:24:7b:
                    b1:53:d7:86:e8:83:eb:42:6f:54:3c:52:de:24:b7:
                    c6:23:24:56:87:35:1a:84:c0:67:ab:d0:3e:23:39:
                    5d:94:ef:64:58:5b:24:26:96:fa:33:ef:5e:b7:d2:
                    f0:b2:ef:11:f4:0a:a1:2c:84:9e:12:ff:bd:ea:79:
                    cb:3b:0b:26:c6:1f:64:fb:62:5f:93:e5:97:33:08:
                    54:fb:ca:e3:08:5e:ac:ac:eb:3e:92:f5:7f:93:fd:
                    03:43:74:45:11:06:6a:ce:3d:13:b4:93:d6:23:4f:
                    b1:c1:18:e1:20:eb:55:9b:06:5b:be:30:60:11:56:
                    e5:4c:67:00:45:87:4a:55:a9:96:c2:4b:8d:37:8c:
                    1d:c6:4f:ad:6e:89:0d:68:7e:d0:03:74:72:6f:c0:
                    7b:82:86:83:c5:05:69:55:b4:e2:ae:f6:9e:14:29:
                    d6:dd:85:71:73:89:63:2e:89:0b:5c:12:eb:81:9f:
                    e6:ce:6c:b5:a1:ab:c6:40:cf:07:3a:2e:42:2e:26:
                    2d:fa:14:e4:b1:66:cd:d1:79:e8:b8:27:47:75:51:
                    cf:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:3F:1B:E8:1A:51:31:0B:61:D8:79:E1:35:33:61:2D:90:B0:9C:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7f745c8-dffc-4a13-83e5-bacb40d1409f/b73ac744-cbf7-349c-83e9-54bcdd4567db.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7f745c8-dffc-4a13-83e5-bacb40d1409f/e7f745c8-dffc-4a13-83e5-bacb40d1409f.crl

            X509v3 Authority Key Identifier:
                keyid:34:2C:99:63:77:2D:B2:0E:4B:14:04:C6:A6:F6:C1:D0:04:C2:90:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7f745c8-dffc-4a13-83e5-bacb40d1409f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:24:fa:47:7a:cf:74:20:5e:9a:56:9b:22:88:46:c9:da:85:
         d6:7a:c0:36:bf:62:ec:e5:23:24:04:61:78:4d:f2:a4:94:3e:
         20:16:a0:8d:c7:24:38:0e:b3:7a:2b:72:86:76:27:9b:88:e3:
         95:08:d5:69:f3:0c:0f:53:df:e0:b6:f3:07:8d:ee:f9:c1:08:
         fb:80:fb:ad:55:20:0e:5b:76:c1:a9:e5:ad:18:b8:f4:e4:4e:
         a4:3e:6f:68:e5:fc:29:38:5e:0e:56:c9:1f:ef:ab:2f:46:87:
         65:5e:84:c3:97:c2:17:7b:f3:68:cd:e1:19:ef:21:f6:94:9a:
         4a:d8:f0:2f:c2:2b:d1:0d:c1:7d:7d:b2:2a:05:0a:f5:cd:be:
         af:9f:d5:bb:89:c2:2f:c7:b4:5e:53:ba:66:4e:83:f6:2f:74:
         4b:75:35:31:03:76:b7:c7:59:47:71:a7:90:ff:60:89:26:b9:
         9a:d7:c8:49:d6:c0:7a:1b:98:ad:b8:98:95:ec:a5:0d:3b:c1:
         f6:f6:60:58:6c:7b:47:7d:56:85:d4:1e:db:03:fd:81:23:97:
         54:9a:1c:39:b8:db:86:9f:79:5b:dc:d6:08:a5:09:5b:0b:03:
         7e:16:c9:2e:cb:e8:e5:27:49:35:ba:e6:c3:ca:be:b8:24:94:
         ca:5d:f7:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----