Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/3139392e3138322e3133322e302f32342d3234203d3e2039343439.roa
File:                     3139392e3138322e3133322e302f32342d3234203d3e2039343439.roa (raw, json)
Hash identifier:          2wiz8tT4+WoSRS+QenFDbZ2KmD8CXJO7M42+O40ZFsU=
Subject key identifier:   09:2C:96:28:FC:31:A1:BF:17:3F:CC:F9:24:80:E0:21:B2:AC:FF:72
Certificate issuer:       /CN=69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078
Certificate serial:       156CF060BF3C65CB9B93029516716BBC436336D6
Authority key identifier: 47:55:58:BF:6C:C8:31:10:14:1F:03:25:D9:12:A8:69:EB:23:4A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/3139392e3138322e3133322e302f32342d3234203d3e2039343439.roa
Signing time:             Tue 03 Jan 2023 20:26:57 +0000
ROA not before:           Tue 03 Jan 2023 20:21:57 +0000
ROA not after:            Tue 02 Jan 2024 20:26:57 +0000
asID:                     9449
IP address blocks:        199.182.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6c:f0:60:bf:3c:65:cb:9b:93:02:95:16:71:6b:bc:43:63:36:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078
        Validity
            Not Before: Jan  3 20:21:57 2023 GMT
            Not After : Jan  2 20:26:57 2024 GMT
        Subject: CN=092C9628FC31A1BF173FCCF92480E021B2ACFF72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:11:38:78:58:85:e1:17:74:e3:e2:17:4a:3c:
                    95:8e:94:e7:78:f0:67:dd:45:ac:c3:b0:13:3e:42:
                    5f:26:9e:f9:5a:ab:ae:74:ae:4d:71:0e:d0:88:bc:
                    6d:86:66:ce:1a:b9:02:4d:fc:6a:9a:8e:40:5c:b1:
                    6f:00:db:b5:c8:26:26:79:04:31:96:ce:25:a4:ee:
                    33:16:45:f1:9f:5e:64:0b:c8:e2:67:07:3f:3a:e1:
                    80:35:f8:f2:11:5a:ac:f4:d2:c9:4d:b3:31:2e:85:
                    78:8d:0b:db:96:ed:c4:11:d6:5c:74:71:d4:8a:05:
                    d7:4c:5b:dc:3d:df:e0:47:f6:31:94:d3:2c:2d:c6:
                    9c:2d:9f:9d:4c:da:df:b4:5e:52:e4:37:55:56:f0:
                    04:47:df:eb:80:97:7d:16:01:b3:22:cb:73:9e:84:
                    e4:3b:d9:b2:ef:1f:25:cb:9c:e5:5d:98:d5:35:db:
                    79:08:6e:ed:4f:3e:38:10:b8:f0:d4:19:44:4e:4d:
                    61:c8:d2:08:b0:06:6d:be:a4:fd:73:36:01:a4:0a:
                    34:85:bf:d2:37:1e:cf:72:15:1a:5e:e2:b3:f0:b7:
                    ec:71:c3:b8:70:d1:8e:be:bd:79:4e:fe:76:cc:f5:
                    05:75:06:c4:d4:03:b8:e8:70:e0:8e:5a:81:93:d5:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:2C:96:28:FC:31:A1:BF:17:3F:CC:F9:24:80:E0:21:B2:AC:FF:72
            X509v3 Authority Key Identifier:
                keyid:47:55:58:BF:6C:C8:31:10:14:1F:03:25:D9:12:A8:69:EB:23:4A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/475558BF6CC83110141F0325D912A869EB234A9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/3139392e3138322e3133322e302f32342d3234203d3e2039343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:a1:c3:1f:38:73:de:97:d7:59:d2:da:dc:4b:90:ec:40:10:
         33:e0:73:2d:af:d6:01:3c:4f:f5:3d:4d:75:5a:b0:f0:69:6f:
         08:ca:e6:27:7c:ad:5b:96:cd:98:74:fe:f6:dd:4d:f0:89:25:
         1a:bd:3b:fc:20:d2:3f:26:d7:64:f8:ca:35:c0:92:5a:0f:56:
         b0:7d:86:10:0e:c4:3b:af:4e:c4:65:13:cb:31:20:48:fe:48:
         09:1c:b0:58:e9:4b:c6:87:f7:23:df:37:7f:9d:c3:8d:23:f1:
         b3:0c:d2:2e:bb:45:54:cd:19:11:9b:58:30:f5:22:1e:3c:d9:
         66:be:05:7a:e6:5f:55:3d:ce:19:ee:5f:1a:8d:ed:7d:e6:94:
         b0:2f:05:ab:ef:1c:7c:e0:d8:4b:03:6e:4a:17:6b:15:65:90:
         b9:fd:3b:4e:a8:d5:bf:68:7f:54:d4:2d:62:9b:67:a2:9c:ba:
         75:7d:08:3d:8c:98:e7:53:d2:57:29:87:1b:61:fd:e4:94:fb:
         0e:d2:d7:43:34:33:17:5c:47:34:aa:b5:6e:7d:33:c0:5b:03:
         a0:b6:d5:cc:ff:13:c4:5e:8b:11:f9:3a:a6:57:a9:0e:51:c0:
         1d:92:90:95:28:54:3a:07:61:8f:ff:68:c2:09:48:ff:4d:e2:
         8c:b8:2f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org