Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234332e302f32342d3234203d3e20383334.roa
File:                     3139392e34382e3234332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          oIs44e4lnNTMDvSc+fXmsvEadqNjwtgcmNvqW1VQU1s=
Subject key identifier:   AA:CC:44:37:4E:D8:52:4C:27:55:24:DE:F9:6C:B4:74:98:29:F7:84
Certificate issuer:       /CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
Certificate serial:       62D6225B25F04C453F323ED85FB394B7EE97B12D
Authority key identifier: 3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234332e302f32342d3234203d3e20383334.roa
Signing time:             Mon 17 Jun 2024 14:55:12 +0000
ROA not before:           Mon 17 Jun 2024 14:50:12 +0000
ROA not after:            Mon 16 Jun 2025 14:55:12 +0000
asID:                     834
IP address blocks:        199.48.243.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d6:22:5b:25:f0:4c:45:3f:32:3e:d8:5f:b3:94:b7:ee:97:b1:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
        Validity
            Not Before: Jun 17 14:50:12 2024 GMT
            Not After : Jun 16 14:55:12 2025 GMT
        Subject: CN=AACC44374ED8524C275524DEF96CB4749829F784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f4:8c:67:cf:1c:59:08:b0:f4:5d:5d:33:4b:
                    ef:7e:0c:3d:d1:62:5d:0a:82:22:95:35:5f:3c:d5:
                    cb:52:80:6f:7e:ea:1f:09:ed:a7:83:0a:7b:e5:36:
                    4e:fb:11:3a:e4:23:e8:6c:4a:4b:fd:ab:d3:7f:74:
                    82:f7:00:9c:ff:dd:12:ab:7a:d6:a6:8d:c9:2e:a1:
                    de:d9:39:4f:ab:d0:ce:ad:30:55:2c:c0:af:7a:3f:
                    cf:db:19:a6:59:53:6a:39:d6:e2:cf:03:fc:4d:ed:
                    4f:3d:b5:3a:7e:1c:91:0c:49:1e:04:be:26:1b:6d:
                    36:c4:87:08:af:91:14:f4:12:01:18:87:fb:0b:ce:
                    5d:27:b8:67:b9:c3:d6:57:84:07:5b:42:be:7d:51:
                    d2:5e:3f:8e:d4:4c:19:22:7e:c0:e6:da:3a:a3:40:
                    46:69:74:ea:22:0e:ac:83:ea:28:04:52:68:ba:9c:
                    9d:36:64:9f:13:b6:ac:f5:ac:9a:e1:d6:f0:51:95:
                    cc:ea:4e:a6:75:a7:02:c6:26:61:57:3e:ed:05:92:
                    1b:81:2d:4b:8d:89:14:01:2e:b3:42:65:9f:a9:ba:
                    2d:39:45:51:4e:c1:80:85:cd:44:c7:62:0f:f1:bf:
                    dc:ea:b3:ee:fd:82:37:0c:6a:8b:f0:77:62:5e:ff:
                    b3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:CC:44:37:4E:D8:52:4C:27:55:24:DE:F9:6C:B4:74:98:29:F7:84
            X509v3 Authority Key Identifier:
                keyid:3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:72:e6:9a:13:dd:3d:af:b8:59:80:3d:79:ae:ef:84:a7:89:
         40:62:d4:82:d6:19:cd:33:0a:07:52:c5:f4:51:9f:01:f6:93:
         f5:a7:15:91:71:c5:22:9c:37:b1:5c:22:82:cb:3c:1f:6a:57:
         58:c0:31:bd:85:84:c6:b7:c2:29:08:5b:34:2f:df:42:b0:17:
         d4:e6:a6:1a:c9:3f:2a:0c:38:f1:22:d6:66:2e:7b:f2:60:4b:
         60:4b:f5:6b:36:28:f5:18:3b:2d:94:53:96:65:f4:0c:d7:f6:
         e8:2f:e8:97:5f:4b:8d:ce:aa:16:64:6a:16:6b:47:18:ba:34:
         c7:a4:7f:1c:73:06:66:06:4c:a2:71:65:ba:96:c5:c2:4a:db:
         8a:0b:16:4a:47:5c:9d:d2:d9:b3:9b:47:ae:86:5f:fd:00:d4:
         54:03:85:94:85:4d:6e:98:f3:01:04:75:67:d0:7f:74:e9:83:
         04:66:b6:22:f9:ac:d8:8b:cf:6a:81:a2:2a:7f:22:a8:72:0f:
         c6:3d:ce:fe:ab:94:f0:ba:ad:b5:49:49:94:1d:18:e4:cc:3e:
         16:43:91:de:4f:3c:22:17:9a:ea:93:76:d8:c8:51:89:f8:4c:
         b0:80:de:58:4b:0b:41:8d:7e:a9:dc:98:03:a8:13:ce:48:ef:
         45:21:a8:3c
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUYtYiWyXwTEU/Mj7YX7OUt+6XsS0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjAwMjAyYjE4OGUzNTFmYzI5NTA2Mjc1Nzk1YmI4OWNl
NzdjMDAwZjZlNWI5YjhmYTUwHhcNMjQwNjE3MTQ1MDEyWhcNMjUwNjE2MTQ1NTEy
WjAzMTEwLwYDVQQDEyhBQUNDNDQzNzRFRDg1MjRDMjc1NTI0REVGOTZDQjQ3NDk4
MjlGNzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvSMZ88cWQiw
9F1dM0vvfgw90WJdCoIilTVfPNXLUoBvfuofCe2ngwp75TZO+xE65CPobEpL/avT
f3SC9wCc/90Sq3rWpo3JLqHe2TlPq9DOrTBVLMCvej/P2xmmWVNqOdbizwP8Te1P
PbU6fhyRDEkeBL4mG202xIcIr5EU9BIBGIf7C85dJ7hnucPWV4QHW0K+fVHSXj+O
1EwZIn7A5to6o0BGaXTqIg6sg+ooBFJoupydNmSfE7as9aya4dbwUZXM6k6mdacC
xiZhVz7tBZIbgS1LjYkUAS6zQmWfqbotOUVRTsGAhc1Ex2IP8b/c6rPu/YI3DGqL
8HdiXv+zWQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKrMRDdO2FJMJ1Uk3vlstHSY
KfeEMB8GA1UdIwQYMBaAFD7oclq6tLgiFWyeMox6GIpmgedJMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODhlOGI5MDcwMTg5MmMyZTUwODYzYzNlLzAv
M0VFODcyNUFCQUI0QjgyMjE1NkM5RTMyOEM3QTE4OEE2NjgxRTc0OS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiL2I0NTg2OTY0LTNjOGItNDQ0MS04YjhhLWIyZDA3NzIxZjM0Ni82MDAy
MDJiMTg4ZTM1MWZjMjk1MDYyNzU3OTViYjg5Y2U3N2MwMDBmNmU1YjliOGZhNS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODhlOGI5MDcwMTg5MmMy
ZTUwODYzYzNlLzAvMzEzOTM5MmUzNDM4MmUzMjM0MzMyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADHMPMwDQYJKoZIhvcNAQELBQADggEB
AHpy5poT3T2vuFmAPXmu74SniUBi1ILWGc0zCgdSxfRRnwH2k/WnFZFxxSKcN7Fc
IoLLPB9qV1jAMb2FhMa3wikIWzQv30KwF9TmphrJPyoMOPEi1mYue/JgS2BL9Ws2
KPUYOy2UU5Zl9AzX9ugv6JdfS43OqhZkahZrRxi6NMekfxxzBmYGTKJxZbqWxcJK
24oLFkpHXJ3S2bObR66GX/0A1FQDhZSFTW6Y8wEEdWfQf3TpgwRmtiL5rNiLz2qB
oip/IqhyD8Y9zv6rlPC6rbVJSZQdGOTMPhZDkd5PPCIXmuqTdtjIUYn4TLCA3lhL
C0GNfqncmAOoE85I70UhqDw=
-----END CERTIFICATE-----
Generated at Mon Apr 7 15:48:28 2025 by rpki-client