Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad978b29-bdbc-4a32-9366-4c3e77ceb900/ac898b76-e87e-3d63-a6b4-a69e1041ae52.roa
File:                     ac898b76-e87e-3d63-a6b4-a69e1041ae52.roa (raw, json)
Hash identifier:          zoLAFmzAIhVMo+YL28Aceim6oULuOq/VKXZ5TyQSV1M=
Subject key identifier:   4D:77:57:DB:46:D9:72:A4:6C:8B:04:3D:AD:53:81:AC:52:1A:9C:1B
Certificate issuer:       /CN=ad978b29-bdbc-4a32-9366-4c3e77ceb900
Certificate serial:       010D0C9F4328576D51CC73C042CFC173DCA493DE
Authority key identifier: 6F:3E:52:F3:94:A4:72:BE:5A:9A:0F:FE:51:EE:30:08:F1:18:61:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad978b29-bdbc-4a32-9366-4c3e77ceb900.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad978b29-bdbc-4a32-9366-4c3e77ceb900/ac898b76-e87e-3d63-a6b4-a69e1041ae52.roa
Signing time:             Tue 11 Aug 2020 08:30:40 +0000
ROA not before:           Mon 10 Aug 2020 04:00:00 +0000
ROA not after:            Wed 14 Nov 2029 05:00:00 +0000
asID:                     203177
IP address blocks:        66.129.176.0/20 maxlen: 20
                          67.226.192.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:57:6d:51:cc:73:c0:42:cf:c1:73:dc:a4:93:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad978b29-bdbc-4a32-9366-4c3e77ceb900
        Validity
            Not Before: Aug 10 04:00:00 2020 GMT
            Not After : Nov 14 05:00:00 2029 GMT
        Subject: CN=3fdd6c1e-b4c4-41a5-96a6-101afe67853e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:20:04:ac:80:e6:ab:9c:e9:74:d9:75:ef:ec:
                    69:b1:3c:cd:68:bb:9e:19:ce:47:f9:57:86:4c:f3:
                    e9:ed:74:4d:73:85:9e:9c:02:e9:6d:b8:36:24:79:
                    51:53:71:97:21:3f:5f:65:a3:01:d9:f8:05:d2:52:
                    3f:82:51:27:8a:79:10:27:0b:b3:dd:01:bf:48:d2:
                    a7:0f:76:28:09:f3:65:e7:4d:d5:a5:49:39:2d:9c:
                    39:ef:81:7a:31:ed:02:62:1d:f2:c9:1d:af:69:e8:
                    cf:83:81:ef:4a:25:ee:88:10:2c:b9:3b:e0:fd:07:
                    98:4b:7c:bd:02:51:84:b3:4d:09:d6:7f:48:be:63:
                    15:10:44:0b:b6:9e:c3:c4:16:b2:9e:8d:62:4e:6b:
                    7e:85:76:6b:c4:52:c5:81:ae:02:fc:98:34:45:27:
                    d7:01:af:d9:6a:bc:0c:65:94:2c:ca:84:d7:7e:d2:
                    e3:ba:5a:70:75:1b:f8:0d:b3:fc:68:86:40:f7:82:
                    1d:bf:20:81:64:67:e9:38:5c:8a:ea:5f:27:d5:92:
                    19:c0:bc:17:fa:6b:3a:1a:3f:50:45:08:7d:3a:83:
                    f3:de:71:8a:7f:68:00:f9:d7:a1:db:90:4a:20:26:
                    aa:36:bf:69:c9:9c:23:e8:da:a5:7f:fe:66:30:7d:
                    13:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:77:57:DB:46:D9:72:A4:6C:8B:04:3D:AD:53:81:AC:52:1A:9C:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad978b29-bdbc-4a32-9366-4c3e77ceb900/ac898b76-e87e-3d63-a6b4-a69e1041ae52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad978b29-bdbc-4a32-9366-4c3e77ceb900/ad978b29-bdbc-4a32-9366-4c3e77ceb900.crl

            X509v3 Authority Key Identifier:
                keyid:6F:3E:52:F3:94:A4:72:BE:5A:9A:0F:FE:51:EE:30:08:F1:18:61:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ad978b29-bdbc-4a32-9366-4c3e77ceb900.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.129.176.0/20
                  67.226.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:33:4c:23:55:58:e0:c9:19:f8:7c:66:9a:44:fe:cc:c1:da:
         e1:a8:83:d1:a6:87:d2:54:49:c9:0e:55:94:51:da:83:bc:dc:
         55:80:88:b5:5f:80:1d:81:a6:97:3b:88:c5:4f:b7:5c:fa:be:
         0c:f1:aa:96:3e:9b:d7:a2:1b:bf:fc:77:06:01:85:ea:90:4a:
         37:ca:64:34:9b:5a:97:a5:5e:bd:2d:17:5f:b3:50:49:02:cd:
         3a:4b:07:e8:05:a4:d1:f8:1b:7d:2a:de:48:c4:a0:a2:7e:a4:
         1e:9d:af:f9:ed:b0:a5:a8:b5:c9:6a:4a:a6:73:94:6b:58:7f:
         9a:4c:d0:01:89:d5:a4:15:a8:22:5e:64:99:62:90:0d:2b:0c:
         7e:bb:2b:5a:f4:c0:ee:0e:9e:9d:e5:01:2b:43:17:31:f4:ad:
         9a:9e:3a:33:21:a1:d6:57:d3:99:74:f3:fc:bc:d3:60:36:65:
         02:88:27:20:28:8d:12:28:bc:68:24:a6:19:7e:59:a4:b0:56:
         57:f5:b5:ec:96:9d:4e:df:98:ee:92:80:fa:d0:eb:40:c2:58:
         0d:91:b5:3b:da:21:94:05:3d:c0:50:25:5d:4f:39:a4:df:14:
         73:ed:00:dc:56:7b:c4:27:36:cc:4a:f3:4b:48:fd:3a:2f:e6:
         60:6e:04:2d
-----BEGIN CERTIFICATE-----
MIIGRTCCBS+gAwIBAgIUAQ0Mn0MoV21RzHPAQs/Bc9ykk94wCwYJKoZIhvcNAQEL
MC8xLTArBgNVBAMTJGFkOTc4YjI5LWJkYmMtNGEzMi05MzY2LTRjM2U3N2NlYjkw
MDAeFw0yMDA4MTAwNDAwMDBaFw0yOTExMTQwNTAwMDBaMC8xLTArBgNVBAMTJDNm
ZGQ2YzFlLWI0YzQtNDFhNS05NmE2LTEwMWFmZTY3ODUzZTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAJcgBKyA5quc6XTZde/sabE8zWi7nhnOR/lXhkzz
6e10TXOFnpwC6W24NiR5UVNxlyE/X2WjAdn4BdJSP4JRJ4p5ECcLs90Bv0jSpw92
KAnzZedN1aVJOS2cOe+BejHtAmId8skdr2noz4OB70ol7ogQLLk74P0HmEt8vQJR
hLNNCdZ/SL5jFRBEC7aew8QWsp6NYk5rfoV2a8RSxYGuAvyYNEUn1wGv2Wq8DGWU
LMqE137S47pacHUb+A2z/GiGQPeCHb8ggWRn6ThciupfJ9WSGcC8F/prOho/UEUI
fTqD895xin9oAPnXoduQSiAmqja/acmcI+japX/+ZjB9E7ECAwEAAaOCA1swggNX
MB0GA1UdDgQWBBRNd1fbRtlypGyLBD2tU4GsUhqcGzCB5QYIKwYBBQUHAQsEgdgw
gdUwgdIGCCsGAQUFBzALhoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRv
cnkvYXJpbi1ycGtpLXRhLzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIx
NTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWQ5Nzhi
MjktYmRiYy00YTMyLTkzNjYtNGMzZTc3Y2ViOTAwL2FjODk4Yjc2LWU4N2UtM2Q2
My1hNmI0LWE2OWUxMDQxYWU1Mi5yb2EwgdwGA1UdHwSB1DCB0TCBzqCBy6CByIaB
xXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81
ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2
Mi00YTZjLWJhMDUtODcxODdmMDA5OWIyL2FkOTc4YjI5LWJkYmMtNGEzMi05MzY2
LTRjM2U3N2NlYjkwMC9hZDk3OGIyOS1iZGJjLTRhMzItOTM2Ni00YzNlNzdjZWI5
MDAuY3JsMB8GA1UdIwQYMBaAFG8+UvOUpHK+WpoP/lHuMAjxGGFnMA4GA1UdDwEB
/wQEAwIHgDCBwAYIKwYBBQUHAQEEgbMwgbAwga0GCCsGAQUFBzAChoGgcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0yZDYyLTRhNmMt
YmEwNS04NzE4N2YwMDk5YjIvYWQ5NzhiMjktYmRiYy00YTMyLTkzNjYtNGMzZTc3
Y2ViOTAwLmNlcjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBEKBsAMEBEPi
wDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz
Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMAsGCSqGSIb3
DQEBCwOCAQEAQTNMI1VY4MkZ+HxmmkT+zMHa4aiD0aaH0lRJyQ5VlFHag7zcVYCI
tV+AHYGmlzuIxU+3XPq+DPGqlj6b16Ibv/x3BgGF6pBKN8pkNJtal6VevS0XX7NQ
SQLNOksH6AWk0fgbfSreSMSgon6kHp2v+e2wpai1yWpKpnOUa1h/mkzQAYnVpBWo
Il5kmWKQDSsMfrsrWvTA7g6eneUBK0MXMfStmp46MyGh1lfTmXTz/LzTYDZlAogn
ICiNEii8aCSmGX5ZpLBWV/W17JadTt+Y7pKA+tDrQMJYDZG1O9ohlAU9wFAlXU85
pN8Uc+0A3FZ7xCc2zErzS0j9Oi/mYG4ELQ==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:42:24 2023 by rpki-client on console-ams.rpki-client.org