Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137372e302f32342d3234203d3e2031323339.roa
File:                     3139392e34382e3137372e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          gzUrAk4TU9geKEWMbwsqiXWO96pw7S+0YFBU7E5M+Gw=
Subject key identifier:   4C:81:EC:4C:20:91:43:FB:EE:F4:A4:EB:B2:81:73:79:BD:BA:30:C5
Certificate issuer:       /CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
Certificate serial:       28A616ED3EB5DA65A51AE1FD97EBE84DE7815868
Authority key identifier: 7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137372e302f32342d3234203d3e2031323339.roa
Signing time:             Thu 27 Jul 2023 18:48:44 +0000
ROA not before:           Thu 27 Jul 2023 18:43:44 +0000
ROA not after:            Thu 25 Jul 2024 18:48:44 +0000
asID:                     1239
IP address blocks:        199.48.177.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a6:16:ed:3e:b5:da:65:a5:1a:e1:fd:97:eb:e8:4d:e7:81:58:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
        Validity
            Not Before: Jul 27 18:43:44 2023 GMT
            Not After : Jul 25 18:48:44 2024 GMT
        Subject: CN=4C81EC4C209143FBEEF4A4EBB2817379BDBA30C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:51:58:7b:f2:cf:93:c6:8f:39:6b:1f:27:96:
                    2a:7f:23:31:ed:18:be:49:4a:64:6a:d7:49:bd:a2:
                    59:e2:10:18:29:c0:48:53:71:72:85:11:23:1a:ab:
                    92:0e:e1:ec:c6:d4:86:8c:bd:11:95:2b:06:e6:2f:
                    f9:16:d3:36:f9:85:60:17:11:81:2f:ab:f4:8e:0a:
                    31:5d:a9:9a:d4:c1:e4:0a:3a:83:ca:32:45:a3:b3:
                    e6:51:71:c7:7f:21:b2:38:98:d7:50:25:f2:5c:bf:
                    99:c7:18:66:46:d1:f4:c5:4a:a1:7c:ad:a2:87:6d:
                    b7:28:db:c9:7e:b8:6b:be:0d:a7:83:a0:5e:75:8a:
                    b0:ea:12:84:0d:cb:ca:f7:2b:da:d2:75:f8:6a:f3:
                    2b:70:b7:30:83:c7:4f:1e:00:e4:7f:d3:77:ac:bf:
                    4e:0b:bf:59:33:0c:1c:93:92:81:ae:bd:13:68:a1:
                    39:24:7b:ab:1f:17:00:92:73:3f:5c:05:54:c0:87:
                    e0:08:b9:f7:88:19:65:d5:6f:eb:cc:73:d0:40:05:
                    89:00:e1:78:52:50:b3:05:d0:8c:b2:38:ab:a9:2b:
                    2b:65:df:5e:cc:b4:da:75:20:26:fb:5e:55:18:80:
                    9a:f9:38:a5:4e:38:d5:5b:d6:41:f3:ea:69:60:98:
                    85:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:81:EC:4C:20:91:43:FB:EE:F4:A4:EB:B2:81:73:79:BD:BA:30:C5
            X509v3 Authority Key Identifier:
                keyid:7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/7CC8AFEDC13ED7A2E0FB10BB32E0D9FC616C6AB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137372e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:71:98:79:f3:3e:50:3c:7f:49:de:b1:44:be:0c:ae:a8:ad:
         2e:1e:19:3c:24:c3:b7:5f:0f:1f:17:87:06:ee:c6:c9:b2:af:
         e2:54:ce:d7:f8:26:51:4c:51:22:c1:1c:85:52:dc:f9:92:93:
         9b:e2:1b:71:a0:4a:1b:89:e4:6e:67:d5:8c:57:9f:3e:0e:55:
         7f:06:a3:81:e0:d6:95:97:14:c0:11:b7:d2:9c:29:48:4d:39:
         51:56:40:59:bc:60:57:a4:92:14:ed:6e:e6:47:c1:b3:25:44:
         24:a6:73:10:ff:d9:41:0a:6f:7a:62:6d:b5:b9:9b:5c:53:cd:
         24:d2:24:a6:19:55:2b:0a:f2:91:30:d5:02:70:5b:5b:1a:e0:
         93:a8:74:80:05:a1:2e:60:f4:51:88:39:11:cb:84:59:2b:47:
         f8:1c:f3:49:77:36:50:54:c5:52:93:dc:70:e0:ee:b6:ce:65:
         d9:2b:6c:57:19:51:dd:5b:37:74:c0:23:de:72:34:2c:eb:70:
         2d:3e:8c:6b:45:0c:24:e9:23:62:6c:68:dd:11:6d:54:a5:ac:
         22:91:0b:ce:1c:70:5d:85:e4:46:96:cc:87:0c:19:ba:4a:4a:
         f4:a3:e4:5d:d8:38:6c:3a:32:fc:dd:04:ce:c0:65:84:89:dc:
         4f:aa:90:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:44 2024 by rpki-client on console-ams.rpki-client.org