Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/e496f86e-f657-32ad-92b0-81e806f4efca.roa
File:                     e496f86e-f657-32ad-92b0-81e806f4efca.roa (raw, json)
Hash identifier:          nN7Hh8HcmGcQTgg3IN5G2Wtn79PnokA917qjM3nWR90=
Subject key identifier:   2C:FC:AF:1E:58:73:63:D7:29:0D:8C:11:91:53:B6:4E:DC:1C:CE:97
Certificate issuer:       /CN=7e2fdf07-a7cd-43db-86a0-386dddefb544
Certificate serial:       010D0C9F43285841ECFCA696BAE83411D480D020
Authority key identifier: 4E:36:07:5A:5E:C0:8D:A5:79:75:92:46:29:00:87:29:2A:46:86:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/e496f86e-f657-32ad-92b0-81e806f4efca.roa
Signing time:             Thu 18 May 2023 19:58:09 +0000
ROA not before:           Thu 18 May 2023 19:58:09 +0000
ROA not after:            Wed 16 Aug 2023 19:58:09 +0000
asID:                     399970
IP address blocks:        149.112.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:ec:fc:a6:96:ba:e8:34:11:d4:80:d0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2fdf07-a7cd-43db-86a0-386dddefb544
        Validity
            Not Before: May 18 19:58:09 2023 GMT
            Not After : Aug 16 19:58:09 2023 GMT
        Subject: CN=b670c502-ed74-4bbd-96c2-2399eaeae1ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5e:b2:f3:bf:5d:79:73:d5:16:dd:99:7f:9b:
                    9d:45:01:b3:fc:8b:3e:06:12:63:64:a7:34:0c:7a:
                    62:bb:37:ba:7d:3b:4e:b5:c1:2a:f4:55:8c:59:8d:
                    7a:95:b9:35:54:e5:c4:37:8d:1b:b4:82:cc:c9:6e:
                    61:4f:82:ac:df:73:50:5e:5d:48:8e:fb:13:b7:7a:
                    68:b4:42:a4:9c:ab:66:45:9c:b9:76:ee:14:7e:1f:
                    a2:bb:8f:8a:54:be:b2:7e:f5:ff:34:fb:d9:87:ac:
                    c1:89:75:09:3d:26:64:ca:03:d9:15:54:62:c9:e4:
                    ea:08:59:c8:10:1c:dc:39:e2:5a:7a:3a:a9:d6:cd:
                    b8:26:9b:2d:32:78:99:07:f2:b5:ec:02:c2:c8:54:
                    5c:c2:ec:1e:e2:5d:4e:1a:11:97:f4:cc:a6:f7:df:
                    5a:3d:7f:a4:61:1d:c3:38:9e:38:43:38:bc:05:2e:
                    23:59:90:bd:11:31:9e:ab:f6:25:73:95:41:3c:cf:
                    4c:3f:2f:06:84:97:b4:4d:ab:d5:d0:8e:a1:ea:a9:
                    c3:2e:d9:74:38:8f:ca:45:a5:a4:af:c2:8f:d3:58:
                    20:c7:d1:65:05:46:ea:69:9a:ae:3a:07:25:2f:fc:
                    6b:f1:5d:ea:88:8a:9e:b8:b2:49:d1:fc:f0:46:61:
                    8a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:FC:AF:1E:58:73:63:D7:29:0D:8C:11:91:53:B6:4E:DC:1C:CE:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/e496f86e-f657-32ad-92b0-81e806f4efca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544/7e2fdf07-a7cd-43db-86a0-386dddefb544.crl

            X509v3 Authority Key Identifier:
                keyid:4E:36:07:5A:5E:C0:8D:A5:79:75:92:46:29:00:87:29:2A:46:86:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/7e2fdf07-a7cd-43db-86a0-386dddefb544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:54:2b:03:f2:b7:b5:9e:44:6e:d9:e6:2f:fb:d3:3b:04:e4:
         b7:e4:2c:7e:70:bf:f9:0d:a4:9f:b8:16:32:d8:b2:c3:7d:e0:
         b8:40:4a:bb:ff:53:a9:86:3c:41:bd:04:d6:49:20:bf:b5:00:
         79:75:98:e9:c6:53:71:76:d0:6e:9c:18:d4:25:56:4e:31:74:
         5a:1d:81:8c:5e:08:8f:2b:15:b9:bd:b9:fa:73:00:4c:3d:d1:
         52:c1:33:29:a1:aa:5a:e8:45:08:7e:0f:32:5c:f4:ce:d4:e4:
         e0:23:48:7e:d9:a8:c5:32:e5:7d:9d:b8:45:a0:71:2e:ac:34:
         80:61:ac:9d:00:30:ae:38:23:5c:08:93:2e:cb:9c:ce:25:8b:
         55:71:d4:83:22:01:6b:1e:b7:b8:20:58:0e:53:b9:4d:6e:00:
         86:07:f4:d5:03:23:0b:fb:db:d6:60:df:64:1b:12:bb:72:74:
         96:8c:71:ed:f7:ff:a4:a9:80:81:62:a2:b7:c9:7e:e3:81:35:
         ed:51:54:53:67:db:33:f7:f3:73:c0:a3:79:2b:ec:8c:f3:ba:
         41:62:e1:cb:b0:37:93:79:11:29:97:8d:11:55:23:a5:c7:6b:
         15:d1:77:a2:e7:84:b2:77:55:08:b8:95:7a:bb:a4:f6:46:98:
         3a:24:53:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----