Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd6e0f4c-de10-48b2-9396-d9f5918d96d1/297fe338-4452-3a30-9ace-4aa311cad3c1.roa
File:                     297fe338-4452-3a30-9ace-4aa311cad3c1.roa (raw, json)
Hash identifier:          UMbiO42/UI77TcrGC4tXKcGzq4S448Ak7bJ3O3JjAEU=
Subject key identifier:   77:52:C8:DF:A2:D4:E6:66:81:31:CC:AE:9B:65:73:3A:74:12:90:78
Certificate issuer:       /CN=dd6e0f4c-de10-48b2-9396-d9f5918d96d1
Certificate serial:       010D0C9F4328583ADEBEDB73A73BD6F3E8803340
Authority key identifier: 83:42:BB:6A:97:7E:80:2C:26:EE:D9:CA:15:4D:C6:89:46:74:87:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd6e0f4c-de10-48b2-9396-d9f5918d96d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd6e0f4c-de10-48b2-9396-d9f5918d96d1/297fe338-4452-3a30-9ace-4aa311cad3c1.roa
Signing time:             Mon 09 Aug 2021 04:00:00 +0000
ROA not before:           Mon 09 Aug 2021 04:00:00 +0000
ROA not after:            Wed 09 Feb 2022 05:00:00 +0000
asID:                     3356
IP address blocks:        144.142.0.0/18 maxlen: 18
                          144.142.64.0/18 maxlen: 18
                          144.142.128.0/18 maxlen: 18
                          144.142.192.0/18 maxlen: 18
                          163.192.0.0/18 maxlen: 18
                          163.192.64.0/18 maxlen: 18
                          163.192.128.0/18 maxlen: 18
                          163.192.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:de:be:db:73:a7:3b:d6:f3:e8:80:33:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6e0f4c-de10-48b2-9396-d9f5918d96d1
        Validity
            Not Before: Aug  9 04:00:00 2021 GMT
            Not After : Feb  9 05:00:00 2022 GMT
        Subject: CN=77603dff-865a-432a-a1cd-bd1a0fd02817
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:79:55:a2:b1:a8:9e:61:00:8e:03:c8:00:e0:
                    fc:c5:60:f2:3f:91:83:ed:7a:00:11:52:56:d9:5b:
                    bd:c0:c8:1b:b3:bd:fd:56:27:c7:b8:52:86:f9:32:
                    a0:f2:50:f3:4a:22:e0:9e:10:b1:e5:67:79:57:7a:
                    04:0a:fd:08:06:e7:4a:38:64:bb:ac:ac:ac:59:07:
                    f9:e3:a4:bf:d8:cd:96:6a:8a:9b:88:ae:d7:df:89:
                    52:40:86:04:d9:8b:2c:ff:9b:67:b0:2c:06:3a:b8:
                    30:ea:cd:80:34:d4:82:91:85:08:c7:4f:e0:5d:53:
                    0d:75:5e:9f:bb:96:cc:64:1e:c4:ca:f7:a8:3e:98:
                    a0:63:c1:10:6d:90:af:a9:30:28:5d:fa:82:8a:a9:
                    8e:1e:85:91:58:36:09:6b:6c:be:bb:b9:b8:b3:34:
                    3d:50:eb:a2:90:70:f6:34:64:db:df:fc:b8:01:a6:
                    f7:93:90:11:e6:1d:76:bd:70:fa:b4:f9:f6:22:77:
                    40:99:6e:62:34:43:e0:3e:b7:b8:8a:17:f5:23:aa:
                    5b:d8:00:9c:86:1b:9c:cb:8c:44:91:49:07:06:6d:
                    d8:35:f1:6d:5d:90:80:83:82:82:57:ec:3e:84:85:
                    ef:6e:bb:f6:5a:02:1f:5f:9d:2f:d6:0c:1e:74:64:
                    ec:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:52:C8:DF:A2:D4:E6:66:81:31:CC:AE:9B:65:73:3A:74:12:90:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd6e0f4c-de10-48b2-9396-d9f5918d96d1/297fe338-4452-3a30-9ace-4aa311cad3c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd6e0f4c-de10-48b2-9396-d9f5918d96d1/dd6e0f4c-de10-48b2-9396-d9f5918d96d1.crl

            X509v3 Authority Key Identifier:
                keyid:83:42:BB:6A:97:7E:80:2C:26:EE:D9:CA:15:4D:C6:89:46:74:87:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd6e0f4c-de10-48b2-9396-d9f5918d96d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.142.0.0/16
                  163.192.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:fa:76:f2:01:b1:d1:dd:c9:1f:97:4a:1c:0c:2b:e4:03:9b:
         fa:8a:6f:9e:9c:59:ae:fc:58:e2:1c:b1:64:2e:bb:e9:31:08:
         85:9b:d0:d7:91:f0:ae:2d:db:b6:01:70:3e:9c:4c:13:0f:e4:
         86:68:1d:8f:3b:22:59:06:41:cc:e9:a6:f2:d3:98:14:11:1a:
         7f:9d:14:1e:05:26:89:ce:e5:c8:5c:fb:93:fc:34:20:d3:de:
         be:d6:cf:a0:a8:42:68:25:e7:8f:68:5a:0c:d0:11:e0:0f:77:
         23:7e:e7:a2:43:3a:71:9f:90:05:c9:3d:04:98:36:0f:bf:75:
         40:79:c1:73:2d:85:d5:d7:45:cc:b1:bb:d4:a8:68:8d:23:76:
         96:c7:dd:39:c8:c9:21:5c:a9:32:fe:8b:a7:d4:1c:91:4f:c5:
         d8:44:16:67:25:e6:a6:10:24:42:41:1b:da:ba:b6:a6:10:c7:
         8e:c4:68:f1:89:63:2a:de:f9:ec:4e:7f:c9:fe:40:a3:95:71:
         b4:33:6e:8e:56:5d:29:94:1e:5e:d5:8f:11:26:32:fd:a9:ff:
         bd:8f:6a:64:f1:2f:bc:be:16:1a:98:88:4b:33:21:40:a8:3b:
         68:02:cb:93:9c:6e:e9:04:a3:aa:3a:45:e6:04:1f:79:a9:5e:
         4d:8c:63:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:43 2023 by rpki-client on console-ams.rpki-client.org