Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3138322e302f32342d3234203d3e20383334.roa
File:                     3139392e34382e3138322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          O/fmMlEitTwbmHccktSavUIIrgvehZSkNTFXK0zb+HM=
Subject key identifier:   CD:20:86:58:A9:A9:C1:0A:07:19:45:E3:EF:FF:99:6A:1F:E1:B4:DE
Certificate issuer:       /CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
Certificate serial:       4C81238816A31C62B7E6D717DDFFBEE4627044A2
Authority key identifier: 7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3138322e302f32342d3234203d3e20383334.roa
Signing time:             Thu 10 Aug 2023 14:30:05 +0000
ROA not before:           Thu 10 Aug 2023 14:25:05 +0000
ROA not after:            Thu 08 Aug 2024 14:30:05 +0000
asID:                     834
IP address blocks:        199.48.182.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:81:23:88:16:a3:1c:62:b7:e6:d7:17:dd:ff:be:e4:62:70:44:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
        Validity
            Not Before: Aug 10 14:25:05 2023 GMT
            Not After : Aug  8 14:30:05 2024 GMT
        Subject: CN=CD208658A9A9C10A071945E3EFFF996A1FE1B4DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ae:b9:f3:32:ff:9c:cf:da:4d:df:68:7f:f4:
                    c3:e2:88:9c:08:ea:7e:ed:57:14:8b:44:27:48:80:
                    28:32:32:b9:00:fd:02:c5:4a:8d:aa:e9:73:b9:61:
                    09:88:62:15:21:2b:0d:dc:7e:e1:0b:c4:db:c3:24:
                    5a:de:da:9f:93:f5:a1:5f:ca:62:c3:bf:f4:5c:9d:
                    26:89:98:eb:00:b9:85:81:fc:a1:94:71:a2:e3:41:
                    c9:59:53:c6:a3:5f:a1:77:19:2a:86:d5:ad:de:58:
                    d9:cf:24:d4:44:97:c2:6c:6a:af:4d:fd:dd:41:05:
                    c7:ae:71:7f:fb:3e:bd:fd:e4:c1:0f:13:10:6b:f2:
                    b8:f7:65:e9:f1:ba:8a:34:c7:0e:9e:8b:6b:e1:74:
                    47:05:75:f6:c8:3f:e7:a2:3f:ce:20:cb:c6:4f:07:
                    99:dc:dc:66:d6:9a:2e:46:5f:dc:0a:66:64:1d:a3:
                    14:4a:a9:9a:68:18:e5:e5:82:3b:38:bf:98:5e:04:
                    88:5b:a0:14:31:b5:ae:f7:b3:db:c4:81:a3:a8:a2:
                    6b:a8:27:ca:ab:d6:50:91:0f:9e:f9:bc:42:d3:66:
                    3b:8d:e5:61:ce:7d:4f:5a:cd:f9:df:a1:df:c0:c6:
                    6f:4d:07:c8:cd:f5:58:2c:ea:68:fc:b9:7b:5c:da:
                    f5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:20:86:58:A9:A9:C1:0A:07:19:45:E3:EF:FF:99:6A:1F:E1:B4:DE
            X509v3 Authority Key Identifier:
                keyid:7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/7CC8AFEDC13ED7A2E0FB10BB32E0D9FC616C6AB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3138322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:9b:6d:0f:b4:26:b6:c5:12:97:c7:4b:30:76:8e:84:d2:10:
         8a:a7:f1:10:26:12:b3:06:fe:ff:31:2e:f9:b3:a2:9b:1d:cc:
         09:25:c9:4a:22:5d:b1:a8:20:be:68:e9:a7:06:45:12:a0:57:
         61:96:e8:ae:a8:36:33:12:c7:e2:9d:04:5b:82:36:36:ab:f7:
         34:74:53:69:94:fc:34:08:39:00:db:9e:ce:e0:73:dc:cf:7b:
         06:4b:a9:bd:73:31:21:be:e7:76:df:62:56:e9:dc:19:01:47:
         46:f3:23:33:02:cd:ab:6e:70:2a:ad:4c:0d:64:de:2f:31:ba:
         0e:c5:25:75:3b:4d:3e:f5:c3:0a:39:b9:ef:09:a9:ad:03:92:
         64:c6:7b:52:9a:51:41:35:42:d9:d4:d0:a4:5a:52:91:ec:0c:
         6f:ab:87:21:4c:a1:5a:44:42:36:af:c7:bb:fc:3b:6f:40:02:
         64:61:ee:e5:2b:b1:aa:16:68:ac:89:f6:3c:6f:f8:cc:6a:23:
         56:90:52:36:15:a7:19:7a:e1:a2:3d:1c:4e:6d:81:52:bc:db:
         1b:4f:31:36:fd:27:8e:33:8b:94:c0:44:28:a4:27:56:40:42:
         54:6e:08:e7:d3:49:dd:57:99:53:2d:11:04:67:78:bb:4d:f5:
         0f:34:0f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:09 2024 by rpki-client on console-fra.rpki-client.org