Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d79fb532-f05b-44e1-b53b-eac1cec44d4c/dad66d68-4c64-3386-b2f4-303ac79cdac2.roa
File:                     dad66d68-4c64-3386-b2f4-303ac79cdac2.roa (raw, json)
Hash identifier:          F0KLZsWqSsBPxWrxuG8B2Jw8UJpdbAWBDG9keiWUKUg=
Subject key identifier:   ED:37:F8:E1:88:6F:E2:9A:09:EA:60:24:90:0B:A0:DB:0B:1A:1E:2D
Certificate issuer:       /CN=d79fb532-f05b-44e1-b53b-eac1cec44d4c
Certificate serial:       010D0C9F4328583FB91AA2555E900E236CD0D280
Authority key identifier: 3F:F4:24:B0:60:F5:B1:73:42:F9:F4:B3:85:CD:02:E9:4A:B7:4D:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d79fb532-f05b-44e1-b53b-eac1cec44d4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d79fb532-f05b-44e1-b53b-eac1cec44d4c/dad66d68-4c64-3386-b2f4-303ac79cdac2.roa
Signing time:             Mon 15 Nov 2021 16:48:47 +0000
ROA not before:           Mon 15 Nov 2021 16:48:47 +0000
ROA not after:            Mon 15 May 2023 04:00:00 +0000
asID:                     1239
IP address blocks:        141.242.48.0/20 maxlen: 20
                          141.242.0.0/20 maxlen: 20
                          141.242.16.0/20 maxlen: 20
                          141.242.32.0/20 maxlen: 20
                          141.242.64.0/20 maxlen: 20
                          141.242.80.0/20 maxlen: 20
                          141.242.96.0/20 maxlen: 20
                          141.242.112.0/20 maxlen: 20
                          141.242.128.0/20 maxlen: 20
                          141.242.144.0/20 maxlen: 20
                          141.242.160.0/20 maxlen: 20
                          141.242.176.0/20 maxlen: 20
                          141.242.192.0/20 maxlen: 20
                          141.242.208.0/20 maxlen: 20
                          141.242.224.0/20 maxlen: 20
                          141.242.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3f:b9:1a:a2:55:5e:90:0e:23:6c:d0:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79fb532-f05b-44e1-b53b-eac1cec44d4c
        Validity
            Not Before: Nov 15 16:48:47 2021 GMT
            Not After : May 15 04:00:00 2023 GMT
        Subject: CN=b1e4e794-f3f4-415d-a9cc-83e8b053c8ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f5:84:61:f0:01:14:50:6b:4d:cb:00:49:b4:
                    1b:24:48:4e:eb:ec:71:87:7a:ca:72:48:f8:51:96:
                    e3:ea:1f:1f:4b:f9:ff:06:64:3f:51:3a:4f:f6:8c:
                    b2:23:de:95:ff:50:7e:72:eb:1f:2b:23:06:a4:fa:
                    a7:02:b5:9c:83:46:f4:a1:80:1a:7d:c2:c3:64:5f:
                    4c:32:7a:a1:de:cb:b2:81:3f:d9:50:35:c8:0d:0b:
                    e1:20:40:43:a2:48:1a:da:1a:17:14:49:91:58:5d:
                    14:73:f6:a8:ce:59:b8:e5:77:68:1a:39:90:b0:4a:
                    c3:96:ab:48:04:91:57:cc:45:81:19:bf:17:50:a9:
                    48:ed:7d:23:e3:8f:e1:88:d8:3a:b8:1a:23:62:15:
                    ca:d7:68:8d:00:3c:e7:2d:d0:fa:f8:15:ca:12:23:
                    ad:97:1b:a7:57:e5:3f:6f:d8:2b:0a:b5:0a:c1:59:
                    22:8c:c8:a7:12:75:7b:d1:e1:0e:6a:98:00:bb:c5:
                    75:c2:47:d8:3b:bc:de:84:e4:67:c6:fb:bb:4b:b9:
                    eb:99:36:06:d8:6d:bc:87:23:05:93:4f:7a:0a:96:
                    ca:43:11:2e:c0:36:b2:03:5a:6c:ad:05:f5:0c:3d:
                    1f:e0:93:2d:f7:8f:3a:19:7f:ff:b3:e3:21:c7:c0:
                    59:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:37:F8:E1:88:6F:E2:9A:09:EA:60:24:90:0B:A0:DB:0B:1A:1E:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d79fb532-f05b-44e1-b53b-eac1cec44d4c/dad66d68-4c64-3386-b2f4-303ac79cdac2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d79fb532-f05b-44e1-b53b-eac1cec44d4c/d79fb532-f05b-44e1-b53b-eac1cec44d4c.crl

            X509v3 Authority Key Identifier:
                keyid:3F:F4:24:B0:60:F5:B1:73:42:F9:F4:B3:85:CD:02:E9:4A:B7:4D:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d79fb532-f05b-44e1-b53b-eac1cec44d4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.242.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:fd:0e:e8:a7:33:5b:32:35:c2:2d:bf:d9:a4:cb:33:26:3c:
         5b:63:b6:01:6c:da:a9:30:ca:15:9e:48:eb:bb:29:30:73:48:
         8e:c1:ce:1f:36:d9:b3:77:de:7c:ea:1b:ea:ca:4a:be:6b:99:
         cc:dd:6b:dd:ba:38:95:da:f4:d3:28:19:6c:03:8b:9b:e2:8e:
         c0:91:22:a3:a9:1b:63:72:98:ad:ec:5f:51:2c:5b:a2:7e:ed:
         99:5d:ce:df:00:47:0c:b8:09:b7:f3:66:c3:1b:75:e6:93:88:
         55:52:51:2f:c4:67:57:ad:20:cb:59:a5:5f:dc:8f:bd:15:44:
         f1:1a:0c:7b:c3:c4:53:6d:c1:6f:22:5c:51:98:de:81:c5:a2:
         29:7e:a7:bf:00:99:9c:a0:25:8d:5e:71:e0:0f:32:f1:55:47:
         29:5a:f0:ad:e3:0d:30:fb:1b:c0:16:9d:09:a5:fa:4c:11:03:
         d8:3e:30:1a:4b:46:02:24:53:df:d4:6f:c0:ee:ca:b2:da:92:
         34:a5:3b:c7:df:1c:30:4c:c7:07:8f:38:a3:92:50:1d:32:49:
         58:cd:a1:fa:6e:41:27:df:e9:49:81:9f:d0:df:4a:54:f0:4f:
         8d:81:94:dd:20:7b:71:f1:40:30:8e:b2:b7:9b:cb:fe:3f:dd:
         f5:ec:16:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:39:47 2023 by rpki-client on console-fra.rpki-client.org