Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/b22c1ed3-5228-3fef-aa9e-cbb7ac859e8c.roa
File:                     b22c1ed3-5228-3fef-aa9e-cbb7ac859e8c.roa (raw, json)
Hash identifier:          yeSY3dxsCs9RDvq2x9skJ4AbP3RAS33W4YPduxHxceQ=
Subject key identifier:   C1:89:23:6B:53:5E:32:0F:06:D0:6D:6C:E4:37:6A:F5:6E:D5:AF:7B
Certificate issuer:       /CN=7e2fdf07-a7cd-43db-86a0-386dddefb544
Certificate serial:       010D0C9F43285841EA430E7AE1ECE989CB139C00
Authority key identifier: 4E:36:07:5A:5E:C0:8D:A5:79:75:92:46:29:00:87:29:2A:46:86:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/b22c1ed3-5228-3fef-aa9e-cbb7ac859e8c.roa
Signing time:             Wed 17 May 2023 20:32:35 +0000
ROA not before:           Wed 17 May 2023 20:32:35 +0000
ROA not after:            Tue 15 Aug 2023 20:32:35 +0000
asID:                     64496
IP address blocks:        149.112.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ea:43:0e:7a:e1:ec:e9:89:cb:13:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2fdf07-a7cd-43db-86a0-386dddefb544
        Validity
            Not Before: May 17 20:32:35 2023 GMT
            Not After : Aug 15 20:32:35 2023 GMT
        Subject: CN=85c2bbc0-98c5-4e11-872e-7dc77017dce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f7:80:7b:99:4f:02:79:08:db:26:37:16:83:
                    7c:fa:c1:7a:24:97:d5:47:ee:0d:1d:6b:0d:16:02:
                    18:1f:5e:0f:15:ac:c6:18:0b:28:11:44:ca:c3:86:
                    b6:4d:24:46:2d:e2:5e:15:c5:05:d0:2b:f1:a5:c1:
                    a6:ff:34:ec:9f:02:bd:1a:c0:4c:4e:e8:de:7f:db:
                    e2:24:e8:bb:f8:60:e9:7f:44:3f:fd:1c:60:85:b1:
                    68:a6:e5:c4:c0:07:2d:cd:9c:c9:06:ab:c3:21:c2:
                    e9:ed:c2:74:5f:76:a2:d4:1c:f9:7e:f8:ff:29:19:
                    f3:61:dd:35:2e:c9:b4:4a:bf:90:88:36:2a:62:a8:
                    3a:ae:79:87:b8:cd:d6:ae:aa:2c:8e:3b:50:99:d0:
                    ad:e0:ce:2b:b2:43:ab:c0:22:32:e4:53:e2:6b:d0:
                    c4:2e:28:7a:2f:f3:0e:d4:c8:13:f8:a9:04:d2:22:
                    fd:d1:f2:32:2f:da:d9:9b:9c:34:f6:3f:06:90:c4:
                    81:bf:31:bc:75:7a:12:3b:4f:eb:4a:2c:56:a5:5b:
                    de:47:47:ed:07:53:db:02:53:1b:2f:54:41:e9:f8:
                    77:1e:31:98:db:46:5e:91:bd:5a:9c:93:21:a4:b2:
                    a9:b9:e3:94:8a:6a:d3:48:18:0a:17:4a:0d:4b:f1:
                    89:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:89:23:6B:53:5E:32:0F:06:D0:6D:6C:E4:37:6A:F5:6E:D5:AF:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/b22c1ed3-5228-3fef-aa9e-cbb7ac859e8c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/7e2fdf07-a7cd-43db-86a0-386dddefb544.crl

            X509v3 Authority Key Identifier:
                keyid:4E:36:07:5A:5E:C0:8D:A5:79:75:92:46:29:00:87:29:2A:46:86:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:67:07:13:8c:ad:f7:59:82:2b:be:47:ec:1d:a4:c2:10:c6:
         7a:96:6e:53:2f:02:6f:fa:68:7b:e2:36:26:e1:56:91:04:22:
         df:f2:de:23:37:2b:31:00:6a:8a:0d:ff:f4:86:b9:65:ee:e5:
         7a:13:b8:09:44:18:07:c8:19:9d:d5:aa:72:4b:04:52:93:68:
         e3:ec:6d:81:91:f6:ee:3b:c7:76:f9:9e:22:00:80:b4:e5:a0:
         11:84:47:90:72:6f:4e:04:83:96:26:a5:fc:5d:dd:96:48:b4:
         05:14:55:da:5d:44:25:19:86:1e:93:c3:42:6a:bc:2c:27:7c:
         92:0a:80:de:30:69:05:06:6a:75:4a:d3:20:bc:1e:f0:a5:43:
         ed:c9:ec:d7:00:80:8f:da:23:52:e5:f6:0a:28:3c:c8:89:c5:
         7e:d0:d4:83:9c:fd:7f:10:89:22:24:a6:4c:ba:25:d7:e8:ef:
         ea:83:12:fd:31:c2:03:53:f2:7e:5e:b6:df:38:64:6d:05:bd:
         da:ea:d2:e0:2e:31:9e:06:22:37:dc:e1:38:46:33:8a:e3:e4:
         76:eb:47:32:45:11:41:74:0d:1e:5f:c4:d9:d9:7f:cf:aa:e8:
         2d:96:5f:91:61:2f:7b:5c:0f:2b:52:74:f0:6f:9f:e8:6e:00:
         d9:8c:73:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:14:13 2024 by rpki-client on console-fra.rpki-client.org