Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/88e2b8d9-0b59-382b-9881-658f8eded16b.roa
File:                     88e2b8d9-0b59-382b-9881-658f8eded16b.roa (raw, json)
Hash identifier:          WsYl6MONZgU69LCvko6lS3kWgB6SNqll7C2vkEcKY1I=
Subject key identifier:   31:31:7A:55:B7:3E:C2:CF:18:13:96:EE:A5:3F:5E:0A:20:29:8A:80
Certificate issuer:       /CN=7e2fdf07-a7cd-43db-86a0-386dddefb544
Certificate serial:       010D0C9F43285841EEFD484543582E86C3B9A900
Authority key identifier: 4E:36:07:5A:5E:C0:8D:A5:79:75:92:46:29:00:87:29:2A:46:86:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/88e2b8d9-0b59-382b-9881-658f8eded16b.roa
Signing time:             Fri 19 May 2023 13:11:03 +0000
ROA not before:           Fri 19 May 2023 13:11:03 +0000
ROA not after:            Thu 17 Aug 2023 13:11:03 +0000
asID:                     399970
IP address blocks:        149.112.153.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ee:fd:48:45:43:58:2e:86:c3:b9:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2fdf07-a7cd-43db-86a0-386dddefb544
        Validity
            Not Before: May 19 13:11:03 2023 GMT
            Not After : Aug 17 13:11:03 2023 GMT
        Subject: CN=9705fcb7-a161-4392-ab13-5a4f1c34218a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c4:0d:1c:dc:57:d2:27:27:95:79:29:ef:02:
                    4c:2e:b9:52:d0:1d:a2:a5:0f:dd:20:a6:20:ac:60:
                    a5:0e:e6:39:fa:58:68:fc:9b:a9:6a:ce:08:6c:40:
                    88:0c:f4:4b:24:76:f7:e2:52:d6:aa:d2:85:01:7f:
                    6d:2e:83:43:36:20:9f:99:3d:68:28:d0:4d:27:13:
                    fc:d7:c6:2f:10:31:da:03:d7:30:a6:45:85:31:20:
                    4c:1b:a0:f2:0d:19:f0:07:25:97:3a:45:a8:02:09:
                    a0:65:00:36:2a:21:20:fb:10:00:7f:32:7e:29:77:
                    44:2f:25:f1:21:db:f0:8a:80:e0:aa:76:b9:de:92:
                    b1:bc:c1:9d:42:e8:59:89:7d:d8:c6:a1:b5:42:eb:
                    02:ef:1a:35:8a:8b:ad:af:ea:dc:4b:1f:3f:bd:84:
                    44:73:a1:a8:3f:24:08:80:f6:33:11:ee:bb:ac:da:
                    ce:87:01:09:f6:40:86:fa:59:00:e7:83:be:d3:ec:
                    22:f5:ab:c4:f6:50:04:2d:8c:e0:84:34:f8:ac:01:
                    2f:ac:65:d2:71:1c:7a:8c:98:ec:fc:33:5e:eb:33:
                    6c:b0:ad:fc:bf:56:63:be:51:db:bd:4b:b3:65:6c:
                    86:84:77:df:47:21:7a:9e:71:2f:05:53:ee:64:e8:
                    2a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:31:7A:55:B7:3E:C2:CF:18:13:96:EE:A5:3F:5E:0A:20:29:8A:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/88e2b8d9-0b59-382b-9881-658f8eded16b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/7e2fdf07-a7cd-43db-86a0-386dddefb544.crl

            X509v3 Authority Key Identifier:
                keyid:4E:36:07:5A:5E:C0:8D:A5:79:75:92:46:29:00:87:29:2A:46:86:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:59:89:2f:16:82:e5:7b:44:3a:36:b5:71:86:ee:09:21:27:
         44:9b:fd:9e:f0:1f:ed:14:fc:6a:f3:6b:b9:0c:67:3a:d2:43:
         1e:79:2a:bf:7e:74:61:53:ff:64:ac:4d:e0:6f:e8:25:64:fc:
         1b:17:79:dc:c5:0e:a6:b0:0e:af:09:58:3e:57:61:e4:65:05:
         75:89:55:7b:75:67:06:58:ae:06:f2:f4:f3:96:c7:20:c7:6c:
         0f:cb:61:4c:b0:ac:40:1c:5f:24:c5:fd:34:10:0f:a6:ec:05:
         a2:1d:37:8a:9c:e0:8f:a7:21:45:41:89:06:d9:c2:92:54:8d:
         c8:65:ca:17:8c:64:91:d0:2d:5e:60:f4:63:ee:89:ef:d4:42:
         8f:f4:f2:7a:9e:df:54:1e:9b:6b:4c:08:40:48:9f:bc:1e:3d:
         bb:8c:5e:6d:32:31:89:d0:6b:1d:f3:bc:68:2c:55:77:3b:4d:
         d6:bf:ed:53:b4:2c:1d:c6:dc:2f:a2:02:fa:36:88:a4:7b:fc:
         d9:a9:7f:04:9c:a3:4d:dd:d6:9c:e5:fb:be:99:95:5f:a2:9c:
         08:04:15:c4:6e:ae:ce:d8:15:43:31:2e:7e:17:28:2c:b3:78:
         81:55:bc:b6:26:aa:4e:d9:dc:ff:f1:84:cc:65:66:43:3e:e5:
         b3:91:87:81
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEHu/UhFQ1guhsO5qQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2UyZmRmMDctYTdjZC00M2RiLTg2YTAtMzg2ZGRkZWZi
NTQ0MB4XDTIzMDUxOTEzMTEwM1oXDTIzMDgxNzEzMTEwM1owLzEtMCsGA1UEAxMk
OTcwNWZjYjctYTE2MS00MzkyLWFiMTMtNWE0ZjFjMzQyMThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcQNHNxX0icnlXkp7wJMLrlS0B2ipQ/dIKYg
rGClDuY5+lho/Jupas4IbECIDPRLJHb34lLWqtKFAX9tLoNDNiCfmT1oKNBNJxP8
18YvEDHaA9cwpkWFMSBMG6DyDRnwByWXOkWoAgmgZQA2KiEg+xAAfzJ+KXdELyXx
IdvwioDgqna53pKxvMGdQuhZiX3YxqG1QusC7xo1ioutr+rcSx8/vYREc6GoPyQI
gPYzEe67rNrOhwEJ9kCG+lkA54O+0+wi9avE9lAELYzghDT4rAEvrGXScRx6jJjs
/DNe6zNssK38v1ZjvlHbvUuzZWyGhHffRyF6nnEvBVPuZOgq2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDExelW3PsLPGBOW7qU/XgogKYqAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS83ZTJm
ZGYwNy1hN2NkLTQzZGItODZhMC0zODZkZGRlZmI1NDQvODhlMmI4ZDktMGI1OS0z
ODJiLTk4ODEtNjU4ZjhlZGVkMTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvN2UyZmRmMDctYTdjZC00M2RiLTg2
YTAtMzg2ZGRkZWZiNTQ0LzdlMmZkZjA3LWE3Y2QtNDNkYi04NmEwLTM4NmRkZGVm
YjU0NC5jcmwwHwYDVR0jBBgwFoAUTjYHWl7AjaV5dZJGKQCHKSpGhlIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS83ZTJmZGYwNy1hN2NkLTQzZGItODZhMC0zODZk
ZGRlZmI1NDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlXCZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACZZiS8WguV7RDo2tXGG7gkhJ0Sb/Z7wH+0U/Grza7kMZzrSQx55Kr9+
dGFT/2SsTeBv6CVk/BsXedzFDqawDq8JWD5XYeRlBXWJVXt1ZwZYrgby9POWxyDH
bA/LYUywrEAcXyTF/TQQD6bsBaIdN4qc4I+nIUVBiQbZwpJUjchlyheMZJHQLV5g
9GPuie/UQo/08nqe31Qem2tMCEBIn7wePbuMXm0yMYnQax3zvGgsVXc7Tda/7VO0
LB3G3C+iAvo2iKR7/NmpfwSco03d1pzl+76ZlV+inAgEFcRurs7YFUMxLn4XKCyz
eIFVvLYmqk7Z3P/xhMxlZkM+5bORh4E=
-----END CERTIFICATE-----