Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7f745c8-dffc-4a13-83e5-bacb40d1409f/e669764c-1b89-3fc4-b47f-8433b0a19528.roa
File:                     e669764c-1b89-3fc4-b47f-8433b0a19528.roa (raw, json)
Hash identifier:          hayXP8sEetYbMMBWGKmr072aiXwFvhuy2TYGaOeOQFA=
Subject key identifier:   4B:30:67:42:A8:01:2C:56:68:F8:E6:D3:7E:99:49:3A:BB:95:3B:C3
Certificate issuer:       /CN=e7f745c8-dffc-4a13-83e5-bacb40d1409f
Certificate serial:       010D0C9F432858435FA8463CE0409EC0FDB7ED00
Authority key identifier: 34:2C:99:63:77:2D:B2:0E:4B:14:04:C6:A6:F6:C1:D0:04:C2:90:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7f745c8-dffc-4a13-83e5-bacb40d1409f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7f745c8-dffc-4a13-83e5-bacb40d1409f/e669764c-1b89-3fc4-b47f-8433b0a19528.roa
Signing time:             Thu 28 Sep 2023 14:33:03 +0000
ROA not before:           Thu 28 Sep 2023 14:33:03 +0000
ROA not after:            Wed 27 Dec 2023 15:33:03 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:5f:a8:46:3c:e0:40:9e:c0:fd:b7:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7f745c8-dffc-4a13-83e5-bacb40d1409f
        Validity
            Not Before: Sep 28 14:33:03 2023 GMT
            Not After : Dec 27 15:33:03 2023 GMT
        Subject: CN=ef8ecf70-a7a1-4e0d-a440-64d05e8c851d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ea:0b:bd:6f:c4:56:e1:3d:56:f2:e4:48:28:
                    35:2e:4f:9c:ee:7d:a4:80:be:2f:58:80:94:9a:ce:
                    61:de:38:25:54:cd:b3:bd:02:a6:b4:60:77:af:dd:
                    1d:74:69:63:a6:9f:e1:a8:f4:9f:cd:4c:b9:4a:86:
                    84:94:dd:82:b4:6c:9a:49:c0:a7:29:fd:bd:dc:ab:
                    23:9f:4b:18:25:eb:4b:4a:bc:74:c7:73:33:05:05:
                    dd:2d:85:02:71:d1:90:82:c1:7c:1a:83:56:60:1a:
                    49:3e:86:b2:ad:8a:62:61:dc:f8:23:19:ff:5f:e0:
                    57:89:3a:32:e2:40:66:3f:e5:97:bd:49:f0:37:3f:
                    9c:bc:c3:f2:8e:04:ba:ed:2e:07:f1:3d:dd:49:1e:
                    b5:e4:13:29:bc:19:b5:da:02:e1:3c:50:9b:88:70:
                    cc:84:f4:c7:b6:9d:53:e3:ce:95:57:f1:f3:05:e6:
                    56:cd:33:5c:c6:aa:42:f8:82:40:71:65:94:53:55:
                    ac:27:da:6d:e5:2f:2f:9f:41:0a:b6:d4:3b:4a:a7:
                    c8:27:ac:56:eb:4b:34:f4:94:b1:fa:66:26:74:6f:
                    ea:fd:7e:87:9f:24:b8:fc:b2:0c:e0:d0:4a:4f:88:
                    b2:d0:6d:a5:c0:14:59:fa:d0:d5:9c:8e:cd:f8:e8:
                    64:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:30:67:42:A8:01:2C:56:68:F8:E6:D3:7E:99:49:3A:BB:95:3B:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7f745c8-dffc-4a13-83e5-bacb40d1409f/e669764c-1b89-3fc4-b47f-8433b0a19528.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7f745c8-dffc-4a13-83e5-bacb40d1409f/e7f745c8-dffc-4a13-83e5-bacb40d1409f.crl

            X509v3 Authority Key Identifier:
                keyid:34:2C:99:63:77:2D:B2:0E:4B:14:04:C6:A6:F6:C1:D0:04:C2:90:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7f745c8-dffc-4a13-83e5-bacb40d1409f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:c2:b7:eb:51:0c:ae:4d:d6:94:36:d2:c5:35:7a:59:8c:6b:
         eb:64:2c:b3:a1:92:9c:8a:ea:92:eb:eb:58:46:1f:48:40:f3:
         43:57:d0:be:94:85:65:94:a7:89:ed:30:35:62:3d:32:5d:2c:
         31:f0:ae:28:24:41:09:28:8f:d3:68:9e:cf:50:19:9f:a7:92:
         27:3b:09:eb:6a:4c:52:36:37:ae:e2:5a:0c:bc:3c:9a:fd:9d:
         4f:bb:19:83:d2:8e:e2:96:8e:eb:a0:52:bf:02:2b:7c:51:72:
         99:47:d2:7e:05:bc:4c:ef:a0:48:13:4a:35:f4:1b:c4:b8:66:
         89:00:3d:bb:ef:ff:90:37:90:8b:81:dc:39:66:46:2f:6b:de:
         fd:2b:ef:23:ab:b6:18:fc:00:a8:26:26:62:1a:a5:42:31:8c:
         3e:c2:a6:45:75:bd:0d:1f:91:b4:c3:f8:12:73:2a:e0:2c:0e:
         04:dc:85:cf:4f:77:2a:13:c3:b2:5b:71:82:8c:fa:77:ab:5e:
         f8:b4:3f:d2:df:d9:e5:24:33:bf:58:a4:74:70:88:0e:f2:b7:
         98:9c:38:d7:04:0c:bf:5c:57:0c:fa:12:50:11:a6:95:1b:fd:
         b7:44:18:f0:2b:75:33:b1:34:62:ba:f1:b2:c9:ed:d4:bb:17:
         81:9a:6d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----