Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d79fb532-f05b-44e1-b53b-eac1cec44d4c/58bdc7fa-e9ac-37be-9b89-b5c623bac840.roa
File:                     58bdc7fa-e9ac-37be-9b89-b5c623bac840.roa (raw, json)
Hash identifier:          iGyGnO3Bcb+3FygKpNJUSgH+VxLgMJ8ywFulKlQS2GE=
Subject key identifier:   42:72:06:9C:15:DD:86:93:13:1E:70:EA:99:6C:A2:6C:CE:CF:1B:A2
Certificate issuer:       /CN=d79fb532-f05b-44e1-b53b-eac1cec44d4c
Certificate serial:       010D0C9F4328583FB8A99A682B1A52E4266C5E80
Authority key identifier: 3F:F4:24:B0:60:F5:B1:73:42:F9:F4:B3:85:CD:02:E9:4A:B7:4D:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d79fb532-f05b-44e1-b53b-eac1cec44d4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d79fb532-f05b-44e1-b53b-eac1cec44d4c/58bdc7fa-e9ac-37be-9b89-b5c623bac840.roa
Signing time:             Mon 15 Nov 2021 16:48:47 +0000
ROA not before:           Mon 15 Nov 2021 16:48:47 +0000
ROA not after:            Thu 30 Jan 2025 05:00:00 +0000
asID:                     1239
IP address blocks:        141.242.48.0/20 maxlen: 20
                          141.242.0.0/20 maxlen: 20
                          141.242.16.0/20 maxlen: 20
                          141.242.32.0/20 maxlen: 20
                          141.242.64.0/20 maxlen: 20
                          141.242.80.0/20 maxlen: 20
                          141.242.96.0/20 maxlen: 20
                          141.242.112.0/20 maxlen: 20
                          141.242.128.0/20 maxlen: 20
                          141.242.144.0/20 maxlen: 20
                          141.242.160.0/20 maxlen: 20
                          141.242.176.0/20 maxlen: 20
                          141.242.192.0/20 maxlen: 20
                          141.242.208.0/20 maxlen: 20
                          141.242.224.0/20 maxlen: 20
                          141.242.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b8:a9:9a:68:2b:1a:52:e4:26:6c:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79fb532-f05b-44e1-b53b-eac1cec44d4c
        Validity
            Not Before: Nov 15 16:48:47 2021 GMT
            Not After : Jan 30 05:00:00 2025 GMT
        Subject: CN=bd66f42b-d176-4643-88c6-20f23fa0cf99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:72:f1:24:18:44:94:c2:c4:29:e5:40:d9:3f:
                    c0:7b:fa:e6:32:b7:04:6a:45:f4:86:1c:ff:a2:55:
                    cb:50:ec:e4:58:26:b0:4b:6a:da:2b:5b:50:e3:97:
                    58:93:8c:0f:5b:37:94:d6:ef:dd:41:ef:bd:03:58:
                    27:04:bf:38:9e:f5:bb:f6:11:eb:90:5d:e3:46:6e:
                    b8:fa:4e:56:27:c3:2c:95:11:37:39:ce:2f:4a:ef:
                    0b:bd:e3:db:26:6f:6d:2e:39:e7:31:dc:5f:0a:0e:
                    0f:8c:ee:0b:ac:2e:9e:6e:d6:4c:45:c6:87:8e:75:
                    4a:6e:21:17:71:79:d6:36:e1:5a:da:f4:1c:e6:a2:
                    cf:80:8b:c9:6a:f6:4c:03:98:ec:53:49:bd:f5:6a:
                    0d:4a:90:bf:ce:84:b6:c7:bc:12:66:0b:56:5c:f9:
                    55:12:b2:ad:83:8c:46:7f:7a:eb:68:67:05:a0:53:
                    b7:f6:32:67:d7:4f:49:0a:50:4d:90:3b:5b:d3:fc:
                    20:cf:35:86:4c:df:a2:7c:76:12:94:79:4d:70:d8:
                    c0:ed:33:8a:14:3b:33:d8:e1:b5:b5:cf:cd:78:a8:
                    0a:1c:55:1b:b4:97:86:68:18:ae:fb:a8:18:d7:02:
                    25:93:df:80:72:ab:7e:c4:21:9e:53:86:4a:fe:19:
                    48:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:72:06:9C:15:DD:86:93:13:1E:70:EA:99:6C:A2:6C:CE:CF:1B:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d79fb532-f05b-44e1-b53b-eac1cec44d4c/58bdc7fa-e9ac-37be-9b89-b5c623bac840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d79fb532-f05b-44e1-b53b-eac1cec44d4c/d79fb532-f05b-44e1-b53b-eac1cec44d4c.crl

            X509v3 Authority Key Identifier:
                keyid:3F:F4:24:B0:60:F5:B1:73:42:F9:F4:B3:85:CD:02:E9:4A:B7:4D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d79fb532-f05b-44e1-b53b-eac1cec44d4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.242.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:35:5b:0d:a8:19:c5:1c:1a:e5:e7:5d:cb:17:3d:5b:11:ff:
         33:dc:16:61:e6:2c:5c:ca:98:e5:6b:d2:b9:ca:b3:34:ac:12:
         ca:75:ee:be:c0:c4:93:8b:e3:a8:6c:41:ae:98:14:2e:cb:dd:
         f3:2f:fa:30:25:77:1f:58:f9:c4:3e:af:2e:62:2a:47:11:5e:
         23:ea:2d:c3:6b:e5:25:95:c7:d9:6c:f6:a0:d4:e4:03:e4:2c:
         6b:bc:47:27:fd:fd:dc:5d:53:ee:0b:71:95:56:34:80:63:23:
         8c:89:23:b9:c6:35:ca:7e:b9:bf:cb:b3:35:e2:47:62:91:4d:
         5c:ef:c6:01:4a:4c:1b:c5:d8:1d:2a:fa:c6:cf:37:f5:fa:84:
         cb:59:bf:7f:fe:05:ea:06:b8:c0:80:d1:99:56:df:3a:c3:92:
         27:78:1d:39:a7:ca:ee:f7:e0:28:90:ee:20:78:9b:c7:c3:84:
         ad:8b:45:73:f9:72:a6:4b:27:01:ec:1e:8b:e8:b8:a6:00:d3:
         97:0a:61:7e:aa:01:d5:dc:97:e7:a6:dd:37:16:8f:46:db:71:
         1c:e8:f9:1d:13:ad:bf:f5:79:49:b9:d9:e5:d1:30:4b:fb:de:
         f5:0c:ec:6a:e7:5c:88:82:6c:94:df:a2:5b:59:10:32:e2:cb:
         10:93:4b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:43 2023 by rpki-client on console-ams.rpki-client.org