Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd6e0f4c-de10-48b2-9396-d9f5918d96d1/cc992dc3-8bcb-3d74-bcdf-61f0b43397c0.roa
File:                     cc992dc3-8bcb-3d74-bcdf-61f0b43397c0.roa (raw, json)
Hash identifier:          3zlHm7TBpc707zoACln7W4kCC0SIuBKciOzKQ86loe4=
Subject key identifier:   9A:91:73:2F:2C:7B:72:B8:AE:B2:AD:03:C6:B9:EC:20:F7:7D:9E:34
Certificate issuer:       /CN=dd6e0f4c-de10-48b2-9396-d9f5918d96d1
Certificate serial:       010D0C9F4328583CD1F3685003EE5FC1D128A7C0
Authority key identifier: 83:42:BB:6A:97:7E:80:2C:26:EE:D9:CA:15:4D:C6:89:46:74:87:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd6e0f4c-de10-48b2-9396-d9f5918d96d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd6e0f4c-de10-48b2-9396-d9f5918d96d1/cc992dc3-8bcb-3d74-bcdf-61f0b43397c0.roa
Signing time:             Fri 04 Feb 2022 05:00:00 +0000
ROA not before:           Fri 04 Feb 2022 05:00:00 +0000
ROA not after:            Thu 08 Feb 2024 05:00:00 +0000
asID:                     11420
IP address blocks:        144.142.144.0/20 maxlen: 20
                          144.142.80.0/20 maxlen: 20
                          144.142.112.0/20 maxlen: 20
                          144.142.48.0/20 maxlen: 20
                          144.142.0.0/20 maxlen: 20
                          144.142.16.0/20 maxlen: 20
                          144.142.32.0/20 maxlen: 20
                          144.142.64.0/20 maxlen: 20
                          144.142.96.0/20 maxlen: 20
                          144.142.128.0/20 maxlen: 20
                          144.142.160.0/20 maxlen: 20
                          144.142.176.0/20 maxlen: 20
                          144.142.192.0/20 maxlen: 20
                          144.142.208.0/20 maxlen: 20
                          144.142.224.0/20 maxlen: 20
                          144.142.240.0/20 maxlen: 20
                          163.192.0.0/20 maxlen: 20
                          163.192.16.0/20 maxlen: 20
                          163.192.32.0/20 maxlen: 20
                          163.192.64.0/20 maxlen: 20
                          163.192.80.0/20 maxlen: 20
                          163.192.96.0/20 maxlen: 20
                          163.192.112.0/20 maxlen: 20
                          163.192.128.0/20 maxlen: 20
                          163.192.144.0/20 maxlen: 20
                          163.192.160.0/20 maxlen: 20
                          163.192.176.0/20 maxlen: 20
                          163.192.192.0/20 maxlen: 20
                          163.192.208.0/20 maxlen: 20
                          163.192.224.0/20 maxlen: 20
                          163.192.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:d1:f3:68:50:03:ee:5f:c1:d1:28:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dd6e0f4c-de10-48b2-9396-d9f5918d96d1
        Validity
            Not Before: Feb  4 05:00:00 2022 GMT
            Not After : Feb  8 05:00:00 2024 GMT
        Subject: CN=95d7f77e-1a8d-4095-8c84-8ddbee949f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:08:62:21:c2:14:f4:43:e4:ea:7a:e4:64:86:
                    3a:1a:18:c4:62:ae:3c:1d:bf:47:38:b4:1c:78:12:
                    9c:46:4e:88:12:c7:8d:8d:87:7a:78:5c:a3:29:49:
                    72:5d:4e:a7:88:e8:89:95:9e:82:50:ee:0d:a2:a7:
                    5c:70:71:4f:8e:ae:be:00:c5:66:67:da:59:c0:85:
                    57:d9:e0:e0:e4:79:d1:1b:2a:63:7c:11:03:2f:14:
                    1e:12:55:2c:19:02:f4:ae:97:1c:46:68:3b:bf:3a:
                    8b:6e:ca:c3:a7:37:be:e0:c9:05:18:b7:66:96:43:
                    00:30:dc:19:65:46:21:9d:7c:61:f0:fe:f8:46:1e:
                    f4:f0:63:c0:fd:36:f6:f5:95:95:cb:30:03:54:e3:
                    2a:4d:aa:2b:93:2f:70:2f:4a:39:45:c6:f9:68:3e:
                    2e:2b:7c:59:b4:23:63:b7:16:93:84:3f:6f:f4:83:
                    dc:20:8a:f1:af:fa:8f:cb:9b:f5:e0:14:e1:79:f1:
                    39:d9:6e:89:ee:d6:82:60:72:85:8a:4b:44:6f:19:
                    d0:91:fe:52:87:4c:43:f5:06:61:ee:31:c2:5c:7b:
                    a4:94:c9:e2:9b:ce:ce:66:a2:67:d9:df:a0:fe:b6:
                    2a:58:24:a5:f9:de:fb:a9:fa:a4:14:8d:63:e9:70:
                    c1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:91:73:2F:2C:7B:72:B8:AE:B2:AD:03:C6:B9:EC:20:F7:7D:9E:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd6e0f4c-de10-48b2-9396-d9f5918d96d1/cc992dc3-8bcb-3d74-bcdf-61f0b43397c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd6e0f4c-de10-48b2-9396-d9f5918d96d1/dd6e0f4c-de10-48b2-9396-d9f5918d96d1.crl

            X509v3 Authority Key Identifier:
                keyid:83:42:BB:6A:97:7E:80:2C:26:EE:D9:CA:15:4D:C6:89:46:74:87:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/dd6e0f4c-de10-48b2-9396-d9f5918d96d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.142.0.0/16
                  163.192.0.0-163.192.47.255
                  163.192.64.0-163.192.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:0b:29:71:d5:26:e7:b9:1a:71:ed:60:2f:c4:10:be:f8:bd:
         72:36:78:08:e5:09:fc:6a:ba:c9:ff:28:0b:46:8b:ad:a9:8d:
         65:38:43:a2:0a:41:51:85:cc:e0:c0:00:a1:bc:af:cf:25:5d:
         cc:76:62:95:2c:cf:98:2a:83:87:a2:03:45:f3:93:45:fd:f8:
         af:67:30:f9:54:79:40:17:ab:28:19:a0:27:54:b3:70:84:7f:
         c3:9e:8a:44:03:0e:59:f3:de:6c:6a:ef:07:81:87:40:28:16:
         a8:49:82:fe:2b:2a:1c:fe:d7:46:0c:f6:45:f4:8b:8c:c0:07:
         e0:3a:0e:94:81:b6:93:07:44:d3:55:c6:ed:64:00:4c:54:a0:
         1d:25:46:35:a8:d5:43:31:ae:38:3b:05:6d:7b:cb:9e:9b:a4:
         50:40:db:63:b7:d0:35:81:d7:38:8d:57:fd:04:13:e1:a9:c5:
         e4:b0:dc:f0:78:2d:a9:68:bf:6d:8e:1b:f3:40:67:3d:de:4d:
         40:43:4e:ca:68:1c:c3:57:f7:33:df:23:08:96:a9:8e:ee:0c:
         ef:e7:25:cc:67:7d:12:5e:11:74:96:22:cc:9f:78:7a:de:17:
         94:c8:01:69:ec:00:b5:b8:c1:50:de:cb:0a:46:53:16:22:27:
         9a:ae:f5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:47 2023 by rpki-client on console-fra.rpki-client.org