Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd6e0f4c-de10-48b2-9396-d9f5918d96d1/269b8394-a35e-302e-8aa3-3e45df234f69.roa
File:                     269b8394-a35e-302e-8aa3-3e45df234f69.roa (raw, json)
Hash identifier:          V+PTF1art+WyAGK6pLeZWvOaNMUIw/ETnFakYL50ZAU=
Subject key identifier:   E9:AD:A3:D4:AB:65:6D:D9:1E:33:37:DE:A2:BA:C4:26:5B:83:0D:B8
Certificate issuer:       /CN=dd6e0f4c-de10-48b2-9396-d9f5918d96d1
Certificate serial:       010D0C9F4328583CD20EBAA0B7028E5806ABDA78
Authority key identifier: 83:42:BB:6A:97:7E:80:2C:26:EE:D9:CA:15:4D:C6:89:46:74:87:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd6e0f4c-de10-48b2-9396-d9f5918d96d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd6e0f4c-de10-48b2-9396-d9f5918d96d1/269b8394-a35e-302e-8aa3-3e45df234f69.roa
Signing time:             Fri 04 Feb 2022 05:00:00 +0000
ROA not before:           Fri 04 Feb 2022 05:00:00 +0000
ROA not after:            Wed 09 Feb 2022 05:00:00 +0000
asID:                     1239
IP address blocks:        144.142.144.0/20 maxlen: 20
                          144.142.80.0/20 maxlen: 20
                          144.142.112.0/20 maxlen: 20
                          144.142.48.0/20 maxlen: 20
                          144.142.0.0/20 maxlen: 20
                          144.142.16.0/20 maxlen: 20
                          144.142.32.0/20 maxlen: 20
                          144.142.64.0/20 maxlen: 20
                          144.142.96.0/20 maxlen: 20
                          144.142.128.0/20 maxlen: 20
                          144.142.160.0/20 maxlen: 20
                          144.142.176.0/20 maxlen: 20
                          144.142.192.0/20 maxlen: 20
                          144.142.208.0/20 maxlen: 20
                          144.142.224.0/20 maxlen: 20
                          144.142.240.0/20 maxlen: 20
                          163.192.0.0/20 maxlen: 20
                          163.192.16.0/20 maxlen: 20
                          163.192.32.0/20 maxlen: 20
                          163.192.48.0/20 maxlen: 20
                          163.192.64.0/20 maxlen: 20
                          163.192.80.0/20 maxlen: 20
                          163.192.96.0/20 maxlen: 20
                          163.192.112.0/20 maxlen: 20
                          163.192.128.0/20 maxlen: 20
                          163.192.144.0/20 maxlen: 20
                          163.192.160.0/20 maxlen: 20
                          163.192.176.0/20 maxlen: 20
                          163.192.192.0/20 maxlen: 20
                          163.192.208.0/20 maxlen: 20
                          163.192.224.0/20 maxlen: 20
                          163.192.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:d2:0e:ba:a0:b7:02:8e:58:06:ab:da:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6e0f4c-de10-48b2-9396-d9f5918d96d1
        Validity
            Not Before: Feb  4 05:00:00 2022 GMT
            Not After : Feb  9 05:00:00 2022 GMT
        Subject: CN=5eda3129-1a41-4425-81ae-5c545e02c81b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:00:91:74:49:bf:f9:c4:34:b8:ad:67:b3:
                    09:68:05:bf:b3:b9:c8:09:9e:a0:2d:89:9c:01:18:
                    3a:5c:12:28:43:76:87:84:59:e3:6c:ca:64:75:f8:
                    f5:4a:76:f2:ba:74:53:0d:c0:c6:79:dc:3f:ae:0d:
                    ed:5e:5d:8d:ef:46:01:07:a6:c3:80:a2:05:57:97:
                    3b:60:65:8b:4d:fe:13:94:82:8c:98:99:df:99:cb:
                    7c:3e:6e:61:84:d7:17:ab:1f:83:8a:c6:bf:ca:6e:
                    98:d3:b7:b5:60:4e:17:e5:f1:b2:7e:06:8c:c5:c9:
                    11:16:45:22:d0:69:57:57:ed:a6:b7:1e:64:51:8f:
                    6a:49:35:da:fd:69:fb:04:73:0b:d7:8d:34:d0:5d:
                    e4:1d:68:24:11:73:16:ca:dd:4f:6f:b5:dc:ef:97:
                    68:4e:aa:8f:0b:48:cd:ca:49:ea:9b:33:e5:14:b8:
                    44:ef:70:9d:e7:5d:20:be:ed:df:74:c1:97:68:65:
                    cf:d9:90:c1:ad:5c:14:56:2d:70:34:93:80:03:40:
                    54:0b:c9:c9:7f:5a:41:97:01:ce:d4:89:1a:a3:ad:
                    76:29:8c:06:5b:b6:5c:e6:9c:0c:41:2b:57:5a:c6:
                    1d:61:7a:ad:b5:3b:8b:c2:80:98:af:38:c4:2f:32:
                    e6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:AD:A3:D4:AB:65:6D:D9:1E:33:37:DE:A2:BA:C4:26:5B:83:0D:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd6e0f4c-de10-48b2-9396-d9f5918d96d1/269b8394-a35e-302e-8aa3-3e45df234f69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd6e0f4c-de10-48b2-9396-d9f5918d96d1/dd6e0f4c-de10-48b2-9396-d9f5918d96d1.crl

            X509v3 Authority Key Identifier:
                keyid:83:42:BB:6A:97:7E:80:2C:26:EE:D9:CA:15:4D:C6:89:46:74:87:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd6e0f4c-de10-48b2-9396-d9f5918d96d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.142.0.0/16
                  163.192.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:ae:6f:07:92:e7:05:1f:76:e9:e2:65:9d:2b:92:dc:fa:be:
         9d:60:29:8b:8b:9a:44:a3:14:c5:65:5c:4c:58:14:e2:98:8b:
         55:3e:02:78:06:c3:f8:77:1f:56:ea:9a:7c:ae:d7:45:aa:41:
         c0:42:61:aa:85:59:54:ae:26:3b:cc:0a:6e:ee:60:f8:7c:55:
         ae:f5:21:c4:73:b2:05:a1:2c:e4:4e:3a:6f:83:bb:dc:da:13:
         f2:7d:1b:6a:dd:8d:bc:84:eb:30:c0:37:6c:a5:e6:ae:37:5f:
         5a:f0:a4:36:62:01:69:42:b5:cd:59:93:27:8e:e8:3c:ec:a1:
         5c:86:be:0a:5d:66:02:2c:0a:d9:d6:3a:04:0b:55:2f:41:33:
         59:ae:c0:87:5b:8a:16:03:b3:85:22:16:fe:02:49:f9:6e:42:
         c3:aa:8b:5c:4a:71:bc:60:0f:f7:74:b5:24:d4:85:af:22:90:
         83:6f:93:9c:4a:1b:29:f0:f6:4a:fd:e5:11:f4:ad:8e:77:45:
         d8:d7:31:b9:37:bc:eb:f7:9d:54:5c:a2:ba:ee:a5:ab:67:84:
         09:3a:f0:48:d9:58:2c:64:ab:4a:93:26:13:98:81:e3:9c:54:
         bf:d5:e7:94:e4:99:7c:d5:76:f3:f1:45:df:8a:fe:1b:46:32:
         a2:bc:f2:c8
-----BEGIN CERTIFICATE-----
MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWDzSDrqgtwKOWAar2ngwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQ2ZTBmNGMtZGUxMC00OGIyLTkzOTYtZDlmNTkxOGQ5
NmQxMB4XDTIyMDIwNDA1MDAwMFoXDTIyMDIwOTA1MDAwMFowLzEtMCsGA1UEAxMk
NWVkYTMxMjktMWE0MS00NDI1LTgxYWUtNWM1NDVlMDJjODFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvosAkXRJv/nENLitZ7MJaAW/s7nICZ6gLYmc
ARg6XBIoQ3aHhFnjbMpkdfj1SnbyunRTDcDGedw/rg3tXl2N70YBB6bDgKIFV5c7
YGWLTf4TlIKMmJnfmct8Pm5hhNcXqx+Disa/ym6Y07e1YE4X5fGyfgaMxckRFkUi
0GlXV+2mtx5kUY9qSTXa/Wn7BHML14000F3kHWgkEXMWyt1Pb7Xc75doTqqPC0jN
yknqmzPlFLhE73Cd510gvu3fdMGXaGXP2ZDBrVwUVi1wNJOAA0BUC8nJf1pBlwHO
1Ikao612KYwGW7Zc5pwMQStXWsYdYXqttTuLwoCYrzjELzLmpQIDAQABo4IDWTCC
A1UwHQYDVR0OBBYEFOmto9SrZW3ZHjM33qK6xCZbgw24MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDZl
MGY0Yy1kZTEwLTQ4YjItOTM5Ni1kOWY1OTE4ZDk2ZDEvMjY5YjgzOTQtYTM1ZS0z
MDJlLThhYTMtM2U0NWRmMjM0ZjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGQ2ZTBmNGMtZGUxMC00OGIyLTkz
OTYtZDlmNTkxOGQ5NmQxL2RkNmUwZjRjLWRlMTAtNDhiMi05Mzk2LWQ5ZjU5MThk
OTZkMS5jcmwwHwYDVR0jBBgwFoAUg0K7apd+gCwm7tnKFU3GiUZ0hwwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZDZlMGY0Yy1kZTEwLTQ4YjItOTM5Ni1kOWY1
OTE4ZDk2ZDEuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAkI4DAwCj
wDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3
DQEBCwUAA4IBAQCArm8HkucFH3bp4mWdK5Lc+r6dYCmLi5pEoxTFZVxMWBTimItV
PgJ4BsP4dx9W6pp8rtdFqkHAQmGqhVlUriY7zApu7mD4fFWu9SHEc7IFoSzkTjpv
g7vc2hPyfRtq3Y28hOswwDdspeauN19a8KQ2YgFpQrXNWZMnjug87KFchr4KXWYC
LArZ1joEC1UvQTNZrsCHW4oWA7OFIhb+Akn5bkLDqotcSnG8YA/3dLUk1IWvIpCD
b5OcShsp8PZK/eUR9K2Od0XY1zG5N7zr951UXKK67qWrZ4QJOvBI2VgsZKtKkyYT
mIHjnFS/1eeU5Jl81Xbz8UXfiv4bRjKivPLI
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:43 2023 by rpki-client on console-ams.rpki-client.org