Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/acc39f1e-e8fa-3fd1-8194-bf2e7c42eca1.roa
File:                     acc39f1e-e8fa-3fd1-8194-bf2e7c42eca1.roa (raw, json)
Hash identifier:          gES3dlkPP636SsGnFOeuXVRxIK0ANS7x75uaR+2eOuw=
Subject key identifier:   AC:09:54:7A:8B:39:43:CA:50:B3:AB:25:20:1B:92:95:B0:D6:68:9B
Certificate issuer:       /CN=53d3ef8c-8c56-4056-ba3f-9b8f638952cb
Certificate serial:       010D0C9F43285843608FFD86C51BFE4BE1278080
Authority key identifier: 38:11:5C:73:A8:6F:D6:66:4D:31:97:5D:5F:4A:40:F8:9B:90:6D:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/acc39f1e-e8fa-3fd1-8194-bf2e7c42eca1.roa
Signing time:             Thu 28 Sep 2023 22:19:55 +0000
ROA not before:           Thu 28 Sep 2023 22:19:55 +0000
ROA not after:            Wed 27 Dec 2023 23:19:55 +0000
asID:                     13649
IP address blocks:        66.59.196.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:60:8f:fd:86:c5:1b:fe:4b:e1:27:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53d3ef8c-8c56-4056-ba3f-9b8f638952cb
        Validity
            Not Before: Sep 28 22:19:55 2023 GMT
            Not After : Dec 27 23:19:55 2023 GMT
        Subject: CN=38610fda-cff5-4933-8d7b-ab067e4d3301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:83:75:64:a4:79:d7:7c:64:a7:ca:d5:87:39:
                    08:29:ac:e4:d0:3d:91:5a:1e:15:1b:cc:3f:19:85:
                    d4:41:30:6a:ff:2c:c2:43:f0:1f:c9:c4:d1:52:fa:
                    33:cf:08:12:a6:00:b2:7e:99:d1:78:4b:56:bf:66:
                    50:3d:7e:30:e4:c1:94:24:ee:0c:2d:27:bb:29:36:
                    57:cb:17:a9:28:a6:2b:4b:9b:e3:c1:7a:8d:8e:1d:
                    08:89:2c:03:3f:01:48:59:1c:1c:8e:40:8d:a2:d1:
                    ad:4d:2b:7f:fd:f2:2d:2d:f5:fd:f7:20:ec:dd:aa:
                    8f:ec:30:14:c5:5c:37:8a:7a:04:51:f4:b9:9a:5a:
                    69:62:67:05:d5:61:8b:2b:fb:64:e3:4d:48:ad:12:
                    f3:69:0a:3f:34:e5:0c:d1:e2:63:18:97:ce:c0:42:
                    e4:77:0f:20:2b:5d:63:df:a0:f5:c6:14:e1:db:90:
                    63:8d:4c:8e:b9:9c:30:b9:b7:e9:96:76:3e:48:6b:
                    7b:91:a7:fe:73:70:53:07:2c:36:53:3d:95:54:8e:
                    39:99:49:86:c1:08:47:2a:f6:0d:ce:ba:cd:cc:5c:
                    35:34:e3:dc:01:24:64:60:fa:2f:e2:67:e0:bd:db:
                    4e:c5:fc:88:67:d5:0a:81:61:36:2b:dc:af:1e:26:
                    2f:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:09:54:7A:8B:39:43:CA:50:B3:AB:25:20:1B:92:95:B0:D6:68:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/acc39f1e-e8fa-3fd1-8194-bf2e7c42eca1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.crl

            X509v3 Authority Key Identifier:
                keyid:38:11:5C:73:A8:6F:D6:66:4D:31:97:5D:5F:4A:40:F8:9B:90:6D:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/53d3ef8c-8c56-4056-ba3f-9b8f638952cb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.59.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:0d:e2:14:7a:5f:eb:2f:09:b8:c9:d0:31:a6:63:be:d5:56:
         50:5f:f7:1c:ee:5f:b0:51:e5:85:88:64:a1:c9:14:56:22:08:
         d4:f8:20:6d:da:6c:42:29:fa:ce:35:3b:5c:f8:aa:0f:bf:64:
         77:f9:7c:f9:1c:3b:35:b8:87:b9:1d:46:21:05:d2:86:bb:db:
         f5:86:0a:43:8d:14:65:d8:eb:1a:22:4d:e8:49:98:4c:e1:3d:
         eb:97:8a:be:54:78:d3:61:3a:4c:a3:dd:5e:29:d8:fa:8e:e7:
         9a:61:33:16:26:56:ef:65:4f:6f:c4:70:8c:8e:ca:08:75:65:
         82:1d:2e:eb:dd:dd:d2:74:80:01:f4:60:47:e5:3e:11:17:de:
         ac:f3:0c:9e:f3:4e:d6:a5:75:78:be:20:e9:ca:3f:41:91:71:
         fd:7d:ce:e9:c3:c2:61:ed:a5:53:23:11:28:a7:a1:03:52:f6:
         64:d2:de:c9:bb:76:b3:e0:ba:fb:2f:e9:fd:6c:c6:49:bc:20:
         cc:fc:5f:f8:da:a7:fd:01:ad:1e:fc:05:98:99:2a:5b:cf:20:
         cb:6f:12:0c:89:fb:8b:16:37:95:29:65:ad:1b:41:23:5e:20:
         6a:2c:27:78:cc:4a:82:b6:ff:d5:f4:e3:65:92:11:22:8a:28:
         25:c0:7a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 13 19:15:55 2023 by rpki-client on console-fra.rpki-client.org