Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130352e302f32342d3234203d3e203436353733.roa
File:                     3231362e3234372e3130352e302f32342d3234203d3e203436353733.roa (raw, json)
Hash identifier:          2dWTAXOIVaW7ksfKyB7qjDcWXz9OKa04XyaBc6ocXrs=
Subject key identifier:   A2:AA:58:72:AF:C4:D1:6F:19:0D:84:BE:11:61:E6:76:BD:01:79:04
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       4B99D7B762341A39179923081FA6A0FC4C79B48B
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130352e302f32342d3234203d3e203436353733.roa
Signing time:             Tue 12 Jul 2022 05:47:34 +0000
ROA not before:           Tue 12 Jul 2022 05:42:34 +0000
ROA not after:            Tue 11 Jul 2023 05:47:34 +0000
asID:                     46573
IP address blocks:        216.247.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:99:d7:b7:62:34:1a:39:17:99:23:08:1f:a6:a0:fc:4c:79:b4:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Jul 12 05:42:34 2022 GMT
            Not After : Jul 11 05:47:34 2023 GMT
        Subject: CN=A2AA5872AFC4D16F190D84BE1161E676BD017904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:13:ed:57:36:88:fb:72:da:c7:36:e9:56:04:
                    e2:0b:a9:4f:9f:57:ac:b2:55:9a:40:8f:1b:48:b0:
                    11:fc:73:3e:a7:c8:ff:ad:73:87:cf:fe:77:cc:91:
                    18:9f:c8:e8:97:60:ba:e5:ca:46:4c:d7:1a:84:cc:
                    46:ee:62:74:3a:07:23:39:da:cb:3c:ac:ca:db:6c:
                    a5:80:10:72:f2:87:e9:9e:90:4d:4e:b6:c6:ee:03:
                    ab:39:1a:bf:f0:8e:d2:fb:86:39:ee:d2:2d:30:eb:
                    86:36:cf:fa:89:6f:de:c7:4e:f5:77:71:4b:7a:62:
                    87:14:0a:4a:32:4a:c2:3d:4e:ac:01:13:72:80:ff:
                    ed:2a:55:ec:05:77:de:97:dd:bb:e7:78:fb:63:e0:
                    5f:58:af:a7:60:67:fd:48:ee:f9:3c:de:34:4e:11:
                    22:b2:ae:d1:b9:34:14:48:5e:4b:2c:58:15:d5:1b:
                    c0:ae:c2:5e:50:d0:2b:a6:47:2b:44:8f:1a:99:4e:
                    94:55:3a:a1:3c:97:a7:f9:50:2a:d6:e4:d9:28:01:
                    7b:cf:44:57:94:6a:a1:5a:68:14:9d:08:59:8b:d3:
                    74:07:7a:9e:59:1c:96:34:84:0e:1e:03:e5:12:f7:
                    ab:c4:84:a4:d6:46:b1:e9:2a:c2:a4:ad:18:d0:82:
                    ed:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:AA:58:72:AF:C4:D1:6F:19:0D:84:BE:11:61:E6:76:BD:01:79:04
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130352e302f32342d3234203d3e203436353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:18:88:98:8f:a0:0c:9e:a6:33:c6:b7:23:ec:61:79:55:75:
         85:a9:24:93:8f:95:c3:4f:74:9b:c5:42:d4:62:b9:2a:1c:d3:
         6f:8b:6c:c8:2b:d2:29:dc:e0:df:6a:0f:c0:85:40:39:13:78:
         9b:cb:ad:28:ab:95:1c:a6:68:5b:c7:5d:61:3c:cb:23:65:76:
         9e:cd:40:a0:66:f3:d3:c5:2d:38:b2:84:ab:79:07:dd:91:82:
         19:4b:66:ca:77:e6:e7:84:bf:48:be:17:8b:8e:5e:b7:52:81:
         2b:cc:de:ec:30:f7:3d:37:68:df:33:a2:61:dc:08:09:47:90:
         ef:93:b0:2c:7b:85:52:ca:d1:1e:66:69:6b:d0:a2:10:a1:bf:
         29:44:74:b4:5c:ae:ce:bb:19:dd:42:b6:24:0e:26:15:fe:5a:
         0f:98:58:c4:ab:00:5e:94:de:c4:78:b1:8d:a8:4f:9e:c2:69:
         fb:00:91:7b:4e:b3:c6:67:37:3e:91:10:62:28:35:5a:bc:f7:
         e7:8f:24:f5:69:48:4d:e1:c7:3a:3b:51:02:b7:a6:df:34:be:
         a3:d6:a7:92:a4:66:27:33:5b:76:3c:36:46:2f:b9:2d:d4:ac:
         74:b4:c3:5d:00:58:c2:2e:c3:4a:06:3f:28:b7:31:06:d8:1a:
         8e:c9:33:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org