Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1571dc64-c0ef-411a-ae77-6dd04e18b8bf/3efdc68e-5534-3b30-8a1f-2c9c80e87a36.roa
File:                     3efdc68e-5534-3b30-8a1f-2c9c80e87a36.roa (raw, json)
Hash identifier:          LqlUhoQa/qUZ5Gn5UKOD0h8wV1qwX+ne7E0rSHHx3qI=
Subject key identifier:   27:31:7E:EB:63:B9:A3:1C:AF:41:10:03:87:52:74:18:78:2F:B5:33
Certificate issuer:       /CN=1571dc64-c0ef-411a-ae77-6dd04e18b8bf
Certificate serial:       010D0C9F432858419389B7F5CD1449232129AE80
Authority key identifier: EB:97:B9:3A:85:73:71:34:7C:C6:9F:B6:86:84:32:B5:90:EC:48:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1571dc64-c0ef-411a-ae77-6dd04e18b8bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1571dc64-c0ef-411a-ae77-6dd04e18b8bf/3efdc68e-5534-3b30-8a1f-2c9c80e87a36.roa
Signing time:             Sun 16 Apr 2023 18:56:11 +0000
ROA not before:           Sun 16 Apr 2023 18:56:11 +0000
ROA not after:            Sat 19 Jul 2025 04:00:00 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:41:93:89:b7:f5:cd:14:49:23:21:29:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1571dc64-c0ef-411a-ae77-6dd04e18b8bf
        Validity
            Not Before: Apr 16 18:56:11 2023 GMT
            Not After : Jul 19 04:00:00 2025 GMT
        Subject: CN=1a873708-61c0-4696-942d-d579b414e0c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f6:00:14:b7:af:22:3a:19:9f:2d:e8:37:de:
                    0e:c7:68:3b:c2:1a:17:cc:97:b0:2e:e5:6d:43:e9:
                    08:81:42:0b:15:28:f2:23:6a:71:78:4c:c3:d6:0c:
                    ed:5b:9a:a7:b4:c8:85:65:56:4f:de:4a:fa:75:9b:
                    7c:4f:35:b1:df:38:e6:f5:39:0c:02:72:a8:61:06:
                    67:b5:51:90:91:f2:7f:28:ac:68:87:20:c0:c4:08:
                    e3:84:fd:6c:e6:07:02:d5:a9:d8:27:78:f8:bb:cc:
                    1d:2c:36:e9:14:22:a2:15:54:77:d6:6e:25:f3:fe:
                    f4:bb:76:00:36:8c:e3:30:f1:e8:b1:dc:27:1f:68:
                    14:5a:52:59:ba:bd:47:a1:57:35:89:0c:a5:78:f3:
                    d4:9e:30:a0:7c:0d:b8:75:af:16:dc:2c:70:7a:c5:
                    95:c8:b4:7a:2e:d0:a6:03:b0:6b:07:64:35:c1:29:
                    7b:cc:89:aa:31:05:ae:6d:b2:e7:07:63:30:58:2f:
                    48:62:6c:ff:50:56:02:e3:b6:52:0c:b3:3a:35:af:
                    ee:32:b0:57:b4:63:e9:e9:eb:20:67:1f:5d:ef:11:
                    6f:a2:df:c9:52:78:df:34:9d:c9:5d:af:43:10:1f:
                    5b:1d:29:40:ca:ee:77:3a:04:48:e3:2d:2c:9e:42:
                    6a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:31:7E:EB:63:B9:A3:1C:AF:41:10:03:87:52:74:18:78:2F:B5:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1571dc64-c0ef-411a-ae77-6dd04e18b8bf/3efdc68e-5534-3b30-8a1f-2c9c80e87a36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1571dc64-c0ef-411a-ae77-6dd04e18b8bf/1571dc64-c0ef-411a-ae77-6dd04e18b8bf.crl

            X509v3 Authority Key Identifier:
                keyid:EB:97:B9:3A:85:73:71:34:7C:C6:9F:B6:86:84:32:B5:90:EC:48:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1571dc64-c0ef-411a-ae77-6dd04e18b8bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:55:d9:22:3f:92:f4:40:f3:fb:be:17:e3:16:41:33:11:63:
         74:8e:c0:6d:3c:2b:e1:84:15:2b:02:2d:03:86:e6:84:3c:b8:
         42:9e:67:af:35:51:bf:12:82:9d:1a:bf:d1:0c:66:47:ae:f6:
         c6:35:c9:6b:c2:c7:cf:89:57:e8:64:07:e5:a8:4a:71:22:c4:
         60:d7:9e:81:c5:8d:60:69:60:41:02:28:74:9c:ef:f3:66:11:
         2e:8d:47:1f:67:9a:5d:0f:94:ed:0a:68:35:4b:dd:77:4b:97:
         98:6b:08:47:a4:f1:66:4b:df:e9:79:ee:f5:6f:bc:3a:cc:bc:
         e5:25:43:f8:73:f3:5d:39:37:d9:d5:1c:56:77:40:5b:44:ba:
         9e:28:4e:29:07:58:43:78:50:5c:16:1f:99:59:81:80:b0:30:
         3f:f5:aa:d3:88:89:1b:3b:e0:8e:13:0b:a4:9b:3a:df:1c:f8:
         8c:83:ac:16:13:78:96:88:7e:70:0d:25:a4:11:6e:13:46:fe:
         ea:83:b8:7f:0b:13:01:92:2d:2e:74:b7:22:86:b1:49:65:e0:
         c4:78:a4:81:ba:a8:3a:0c:0c:f7:8b:3e:44:e7:c9:fc:03:c4:
         6b:a8:39:38:7c:d0:80:36:53:d9:9b:61:b5:fb:67:e1:f7:63:
         30:00:35:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----