Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa
File:                     38342da4-e45f-3645-a61f-9ff395a6995d.roa (raw, json)
Hash identifier:          iQNhfLeTIxPPd12IK6XL55M3arK4EbhT76cM1eBgB/g=
Subject key identifier:   CE:05:1B:B1:D4:15:4F:ED:53:B2:B9:8B:E7:D1:59:F4:5F:E7:E9:0E
Certificate issuer:       /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial:       010D0C9F43285847ED24BE1AD9612B8CCA826F80
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa
Signing time:             Tue 19 Nov 2024 02:00:27 +0000
ROA not before:           Tue 19 Nov 2024 02:00:27 +0000
ROA not after:            Mon 17 Feb 2025 02:00:27 +0000
asID:                     7018
IP address blocks:        149.143.156.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:ed:24:be:1a:d9:61:2b:8c:ca:82:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
        Validity
            Not Before: Nov 19 02:00:27 2024 GMT
            Not After : Feb 17 02:00:27 2025 GMT
        Subject: CN=ff5b5b60-fc0e-4570-bb7d-278b655e7c62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c1:19:dc:d3:6c:97:a9:72:f5:8d:af:06:d1:
                    14:c5:68:26:67:d2:3b:6d:83:28:e9:1f:c6:49:22:
                    c1:72:40:db:84:3e:9d:b8:b7:66:c6:ea:5a:e3:9a:
                    75:ae:60:c0:5b:e4:25:cf:ce:1d:ef:60:b0:5d:b1:
                    ac:0d:de:bc:9e:d7:a5:04:bf:0a:e9:eb:21:a3:e9:
                    d1:c8:81:cb:b4:13:d4:a8:26:c2:b7:66:f6:41:6d:
                    66:dc:38:d1:33:ad:f7:07:9b:1b:b9:91:0d:03:b1:
                    c5:ad:93:17:f6:cb:22:b0:96:f6:aa:ae:dc:d5:7b:
                    42:6b:6f:fd:63:17:79:32:2d:57:f1:0e:5e:36:15:
                    ce:ae:dd:56:79:f7:4d:b2:24:e8:7d:0b:4c:38:a1:
                    f8:df:b5:1b:8b:ed:8c:cc:98:9d:06:2d:70:a0:51:
                    41:6a:e3:c9:b6:05:b4:e0:d9:c2:74:2b:d5:e5:a8:
                    67:ac:73:e6:b4:26:ee:cd:e2:d9:45:b2:4f:72:11:
                    3f:30:6f:80:51:0d:53:91:c0:cf:a0:2a:d5:69:4c:
                    e7:6d:08:54:5d:ef:e0:05:cd:21:e0:22:5b:2a:79:
                    21:fb:9a:f8:c7:c3:ef:2f:21:be:d9:7f:9a:d1:15:
                    f1:49:ae:b6:66:cf:77:d7:2a:45:af:2e:6e:cd:64:
                    ba:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:05:1B:B1:D4:15:4F:ED:53:B2:B9:8B:E7:D1:59:F4:5F:E7:E9:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/38342da4-e45f-3645-a61f-9ff395a6995d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl

            X509v3 Authority Key Identifier:
                keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.143.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:c4:da:ea:95:0d:5d:6f:dd:38:89:84:f0:ce:fb:d7:4d:3d:
         aa:15:fd:39:ae:b8:da:78:28:5b:f8:55:10:c2:50:5d:d5:a9:
         e1:e4:65:12:f9:5b:38:64:d8:de:05:c3:0c:df:bb:83:c9:be:
         25:df:3e:b2:9c:06:69:4f:0f:1f:4d:77:b3:08:81:ca:f8:09:
         fc:b3:c7:40:b6:09:8c:94:90:25:7e:64:ff:d3:b0:c4:ec:ea:
         e0:a4:40:2b:6b:85:3d:68:1f:88:c1:65:38:77:66:a6:66:7c:
         c1:76:1c:aa:58:37:20:83:c9:97:90:cf:5e:17:db:44:9b:64:
         9f:3a:98:73:70:ef:64:1c:d3:2a:49:c7:f6:29:4d:c5:d6:7a:
         2d:1f:e2:14:9c:35:87:b1:78:41:78:28:44:56:c3:26:80:e5:
         72:c9:e4:b9:b2:e6:ef:df:1f:ca:18:b2:b0:21:f4:59:42:b8:
         5e:12:ec:44:d3:cb:13:0c:e3:02:a8:b8:09:58:c6:99:89:61:
         cd:8f:7c:b8:87:69:0b:67:e7:8d:15:5d:6a:ac:47:34:51:03:
         20:6d:e8:d2:14:cd:21:b3:8e:b4:44:fd:70:96:27:21:58:d2:
         6f:4f:de:bf:37:4a:af:23:f3:8e:02:0b:52:6d:a3:97:82:1c:
         1b:3c:cc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----