Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/3139392e3138322e3133352e302f32342d3234203d3e203534313130.roa
File:                     3139392e3138322e3133352e302f32342d3234203d3e203534313130.roa (raw, json)
Hash identifier:          V8nqI5H3JEfCYHRD/qBEDgEw6NYswm75FSz1Wabp7OA=
Subject key identifier:   83:BE:CA:4B:49:AD:3F:01:EC:BF:7E:97:94:97:C8:7C:81:1E:5E:CC
Certificate issuer:       /CN=69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078
Certificate serial:       0C1DFFDA24038E19B20C901DD47A05B15F0D0052
Authority key identifier: 47:55:58:BF:6C:C8:31:10:14:1F:03:25:D9:12:A8:69:EB:23:4A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/3139392e3138322e3133352e302f32342d3234203d3e203534313130.roa
Signing time:             Tue 03 Jan 2023 20:26:56 +0000
ROA not before:           Tue 03 Jan 2023 20:21:56 +0000
ROA not after:            Tue 02 Jan 2024 20:26:56 +0000
asID:                     54110
IP address blocks:        199.182.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:1d:ff:da:24:03:8e:19:b2:0c:90:1d:d4:7a:05:b1:5f:0d:00:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078
        Validity
            Not Before: Jan  3 20:21:56 2023 GMT
            Not After : Jan  2 20:26:56 2024 GMT
        Subject: CN=83BECA4B49AD3F01ECBF7E979497C87C811E5ECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0d:3a:d2:8a:65:0e:e8:ca:be:72:b0:5e:94:
                    bd:bd:a5:22:d8:67:d9:30:3d:b6:ae:0d:f8:c3:70:
                    61:67:05:f6:ee:98:03:ac:36:e8:48:1e:7b:b2:72:
                    70:c7:39:24:dc:73:47:5a:ac:6e:e8:87:ac:3b:75:
                    34:b3:57:ae:e3:d5:3f:ce:65:6d:75:f1:21:57:13:
                    a8:d8:cf:d8:c8:d5:f7:96:38:27:db:40:ee:fa:e9:
                    06:f3:ab:58:4b:e1:20:d0:20:72:07:fe:01:6a:c7:
                    ef:07:ab:74:40:e0:5b:41:d7:ce:0e:8d:dc:fb:71:
                    94:43:11:bf:65:80:9c:fb:6d:0d:52:30:ca:e2:ae:
                    b1:c2:56:17:85:11:96:2d:4c:ad:f9:df:d0:68:d9:
                    df:82:da:b5:30:2a:35:6d:80:b4:ff:26:d2:e2:c5:
                    4c:3e:63:2d:41:49:a9:ce:ae:84:7c:dd:7d:35:c6:
                    67:d8:3e:eb:78:fc:47:35:3d:5b:75:98:eb:99:e3:
                    01:c1:e0:e3:48:a6:d9:ba:d8:f4:2e:22:7e:a2:24:
                    92:9c:ba:cd:29:bf:d4:33:d6:ad:df:98:8d:02:d4:
                    f6:8a:20:35:ff:a6:54:53:fb:6b:7a:01:d5:36:9b:
                    9e:1a:46:ea:c8:68:3d:51:29:09:f2:df:3a:97:0e:
                    0e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:BE:CA:4B:49:AD:3F:01:EC:BF:7E:97:94:97:C8:7C:81:1E:5E:CC
            X509v3 Authority Key Identifier:
                keyid:47:55:58:BF:6C:C8:31:10:14:1F:03:25:D9:12:A8:69:EB:23:4A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/475558BF6CC83110141F0325D912A869EB234A9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/3139392e3138322e3133352e302f32342d3234203d3e203534313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:b2:ee:1d:e9:92:1b:82:4b:fb:31:4f:ab:83:51:f4:4e:65:
         ac:4a:73:ae:ba:c4:72:58:db:ae:cc:c2:80:c1:9b:42:5e:8d:
         f6:4f:a4:57:cd:e3:6f:e5:7a:c0:9a:8a:11:60:b6:94:00:d5:
         44:7b:05:e2:8b:b3:89:f5:ff:e3:26:24:cc:e3:fc:1e:24:eb:
         dd:75:15:5b:d1:da:09:09:9d:8f:27:18:ba:16:0a:c0:4b:de:
         1d:2a:ec:8c:7b:01:b9:18:e4:2f:75:bb:ca:f4:c9:f4:28:24:
         ae:44:ee:8a:4f:89:3b:71:c4:12:11:3b:f9:be:a7:e5:56:de:
         ef:97:a0:71:ff:d7:a5:bf:2d:45:35:22:2c:d4:37:06:0a:f7:
         44:db:e7:d7:64:34:f1:66:73:22:e4:c4:f6:85:75:45:5b:28:
         94:d7:25:74:c7:20:58:67:37:17:98:04:c4:a5:1b:15:8e:6a:
         f0:35:60:5e:4d:2b:cd:45:38:26:53:ca:a6:a2:eb:b2:d0:f4:
         c1:a3:08:b9:a9:40:ff:99:5f:6e:44:22:ea:f6:ef:54:5c:12:
         2d:4a:5a:17:1c:ea:62:1c:97:8d:d4:86:1f:5a:86:ca:0d:89:
         da:f6:87:02:5b:31:7e:85:01:12:2d:2f:be:2c:50:ca:02:ed:
         e3:d7:ff:c2
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUDB3/2iQDjhmyDJAd1HoFsV8NAFIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjkyNzdkMGE5YmZjMjZmZWQ2ZjJjZTM4YTY3NjQ3OGRl
Y2RmNzZlZTgxODAyZmIwNzgwHhcNMjMwMTAzMjAyMTU2WhcNMjQwMTAyMjAyNjU2
WjAzMTEwLwYDVQQDEyg4M0JFQ0E0QjQ5QUQzRjAxRUNCRjdFOTc5NDk3Qzg3Qzgx
MUU1RUNDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsA060oplDujK
vnKwXpS9vaUi2GfZMD22rg34w3BhZwX27pgDrDboSB57snJwxzkk3HNHWqxu6Ies
O3U0s1eu49U/zmVtdfEhVxOo2M/YyNX3ljgn20Du+ukG86tYS+Eg0CByB/4Basfv
B6t0QOBbQdfODo3c+3GUQxG/ZYCc+20NUjDK4q6xwlYXhRGWLUyt+d/QaNnfgtq1
MCo1bYC0/ybS4sVMPmMtQUmpzq6EfN19NcZn2D7rePxHNT1bdZjrmeMBweDjSKbZ
utj0LiJ+oiSSnLrNKb/UM9at35iNAtT2iiA1/6ZUU/tregHVNpueGkbqyGg9USkJ
8t86lw4O+QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFIO+yktJrT8B7L9+l5SXyHyB
Hl7MMB8GA1UdIwQYMBaAFEdVWL9syDEQFB8DJdkSqGnrI0qcMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NmJhM2JkZDQzZDNjLzEv
NDc1NTU4QkY2Q0M4MzExMDE0MUYwMzI1RDkxMkE4NjlFQjIzNEE5Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2E4MTZlOGFkLTliY2MtNDZkYS1hZmQ4LTcwZGQ5N2JkMDIzMi82OTI3
N2QwYTliZmMyNmZlZDZmMmNlMzhhNjc2NDc4ZGVjZGY3NmVlODE4MDJmYjA3OC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTZi
YTNiZGQ0M2QzYy8xLzMxMzkzOTJlMzEzODMyMmUzMTMzMzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNTM0MzEzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7aHMA0GCSqGSIb3DQEB
CwUAA4IBAQB1su4d6ZIbgkv7MU+rg1H0TmWsSnOuusRyWNuuzMKAwZtCXo32T6RX
zeNv5XrAmooRYLaUANVEewXii7OJ9f/jJiTM4/weJOvddRVb0doJCZ2PJxi6FgrA
S94dKuyMewG5GOQvdbvK9Mn0KCSuRO6KT4k7ccQSETv5vqflVt7vl6Bx/9elvy1F
NSIs1DcGCvdE2+fXZDTxZnMi5MT2hXVFWyiU1yV0xyBYZzcXmATEpRsVjmrwNWBe
TSvNRTgmU8qmouuy0PTBowi5qUD/mV9uRCLq9u9UXBItSloXHOpiHJeN1IYfWobK
DYna9ocCWzF+hQESLS++LFDKAu3j1//C
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:41 2024 by rpki-client on console-ams.rpki-client.org