Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
File:                     3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa (raw, json)
Hash identifier:          GBtKVgX/6N8OfQ7+D79Sq9sLlpuwnBvGpwRcDFC6ZRw=
Subject key identifier:   F6:5C:BA:71:6F:34:3B:DE:49:0A:E1:FE:EF:18:FA:BF:5F:80:EC:39
Certificate issuer:       /CN=fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26
Certificate serial:       178B2CD7C840A69133B4C85FF02A6298BE71329A
Authority key identifier: EE:BE:EE:18:83:0C:F3:81:9A:78:90:C8:15:5F:B9:79:21:DF:45:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12dc7a96-47ea-453b-a3ad-351c682409d9/fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa
Signing time:             Thu 13 Jan 2022 19:22:11 +0000
ROA not before:           Thu 13 Jan 2022 19:17:11 +0000
ROA not after:            Thu 12 Jan 2023 19:22:11 +0000
asID:                     399970
IP address blocks:        149.112.152.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:8b:2c:d7:c8:40:a6:91:33:b4:c8:5f:f0:2a:62:98:be:71:32:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26
        Validity
            Not Before: Jan 13 19:17:11 2022 GMT
            Not After : Jan 12 19:22:11 2023 GMT
        Subject: CN=F65CBA716F343BDE490AE1FEEF18FABF5F80EC39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:f6:8e:a2:2e:df:d3:4c:04:e2:16:6c:64:
                    38:92:e6:fe:33:6e:6f:01:26:c7:fe:d2:c7:1b:3d:
                    e8:bc:8d:63:76:f5:72:38:97:e1:d2:55:7b:cd:e8:
                    bd:05:1f:8e:39:dc:fd:47:9d:f2:df:5f:c3:f8:30:
                    6a:f0:45:2e:f4:d8:5f:e7:3f:91:b9:ed:d3:de:db:
                    8d:f6:95:9e:89:10:ce:47:72:67:17:a8:b7:07:b0:
                    6b:60:5c:9a:3f:f5:15:30:fd:c4:db:ab:78:67:85:
                    b1:63:b1:6a:16:40:06:37:1b:48:8a:00:f4:69:7a:
                    c4:c6:d7:38:2c:94:53:eb:b5:ce:25:6c:17:68:33:
                    78:b7:c3:13:07:8a:cb:c0:ec:cb:95:a7:1d:85:50:
                    3a:99:e5:d5:4e:90:29:47:16:de:fa:ae:75:f7:a8:
                    43:e1:b0:17:e4:59:46:ed:57:22:c5:16:87:12:7d:
                    d8:8a:bb:52:8d:9d:cc:49:20:f8:30:02:8e:65:9d:
                    d7:f5:d3:e5:05:d4:ac:59:ce:4e:e0:e5:35:b0:79:
                    dd:38:60:7b:60:0e:ef:ee:15:6f:40:64:87:d4:cf:
                    28:6a:d0:84:b3:32:2a:8d:a0:30:35:a9:60:5b:0e:
                    e7:c9:42:84:83:51:f5:c0:34:b5:13:6b:5c:9b:aa:
                    e6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:5C:BA:71:6F:34:3B:DE:49:0A:E1:FE:EF:18:FA:BF:5F:80:EC:39
            X509v3 Authority Key Identifier:
                keyid:EE:BE:EE:18:83:0C:F3:81:9A:78:90:C8:15:5F:B9:79:21:DF:45:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/EEBEEE18830CF3819A7890C8155FB97921DF45E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/12dc7a96-47ea-453b-a3ad-351c682409d9/fcb20f5966b32d6502551aba4eba546b743d7166f24f9a9f26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade7e25b7e4017e54cc83fa12bc/0/3134392e3131322e3135322e302f32322d3232203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:dc:b7:39:24:a1:a1:0b:9d:8d:d9:b5:68:31:fc:e8:7e:19:
         dd:a0:df:cd:15:a8:d3:bb:b0:06:7b:35:3e:21:14:f4:46:a9:
         28:09:c9:45:a6:aa:6f:84:ac:be:b3:14:9a:7e:1f:88:1c:2d:
         86:ea:68:8e:eb:cb:0d:a0:88:ff:8a:63:84:5c:a2:9a:5b:8b:
         4c:f4:92:de:bf:19:a4:79:45:a1:e1:66:34:85:5b:a9:b9:42:
         58:74:fa:85:7d:df:2b:e9:19:31:a5:fe:2d:22:0e:c1:36:b9:
         4a:d9:c7:3e:55:f0:fc:bf:d1:44:0c:74:fc:60:03:63:c8:bb:
         2c:ef:c4:4b:4d:af:75:a0:5f:a3:e1:5e:cc:94:31:82:5c:f9:
         ad:87:8b:7d:c9:fe:0b:00:fd:fb:e7:dd:2b:fa:43:59:b7:63:
         6e:6a:c9:63:41:8c:53:77:fb:24:1b:eb:97:ca:c2:58:16:a1:
         bb:d6:ea:3d:35:c2:5e:48:69:f4:f5:40:03:f1:4d:79:89:8d:
         61:c4:ee:30:dc:f2:d7:37:9c:7a:08:f4:64:dd:23:ba:81:7e:
         1c:1b:90:f7:bb:0a:46:61:93:27:25:96:fb:53:e2:ef:6b:ac:
         b6:0c:db:bf:91:be:cc:41:ea:74:e4:b2:e4:ad:e5:99:c8:cb:
         f4:6d:aa:a7
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUF4ss18hAppEztMhf8CpimL5xMpowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NmIzMmQ2NTAyNTUxYWJhNGViYTU0NmI3
NDNkNzE2NmYyNGY5YTlmMjYwHhcNMjIwMTEzMTkxNzExWhcNMjMwMTEyMTkyMjEx
WjAzMTEwLwYDVQQDEyhGNjVDQkE3MTZGMzQzQkRFNDkwQUUxRkVFRjE4RkFCRjVG
ODBFQzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw032jqIu39NM
BOIWbGQ4kub+M25vASbH/tLHGz3ovI1jdvVyOJfh0lV7zei9BR+OOdz9R53y31/D
+DBq8EUu9Nhf5z+Rue3T3tuN9pWeiRDOR3JnF6i3B7BrYFyaP/UVMP3E26t4Z4Wx
Y7FqFkAGNxtIigD0aXrExtc4LJRT67XOJWwXaDN4t8MTB4rLwOzLlacdhVA6meXV
TpApRxbe+q5196hD4bAX5FlG7VcixRaHEn3YirtSjZ3MSSD4MAKOZZ3X9dPlBdSs
Wc5O4OU1sHndOGB7YA7v7hVvQGSH1M8oatCEszIqjaAwNalgWw7nyUKEg1H1wDS1
E2tcm6rmOQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFPZcunFvNDveSQrh/u8Y+r9f
gOw5MB8GA1UdIwQYMBaAFO6+7hiDDPOBmniQyBVfuXkh30XiMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlN2UyNWI3ZTQwMTdlNTRjYzgzZmExMmJjLzAv
RUVCRUVFMTg4MzBDRjM4MTlBNzg5MEM4MTU1RkI5NzkyMURGNDVFMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjLzEyZGM3YTk2LTQ3ZWEtNDUzYi1hM2FkLTM1MWM2ODI0MDlkOS9mY2Iy
MGY1OTY2YjMyZDY1MDI1NTFhYmE0ZWJhNTQ2Yjc0M2Q3MTY2ZjI0ZjlhOWYyNi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTdlMjViN2U0MDE3ZTU0
Y2M4M2ZhMTJiYy8wLzMxMzQzOTJlMzEzMTMyMmUzMTM1MzIyZTMwMmYzMjMyMmQz
MjMyMjAzZDNlMjAzMzM5MzkzOTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAKVcJgwDQYJKoZIhvcN
AQELBQADggEBAB/ctzkkoaELnY3ZtWgx/Oh+Gd2g380VqNO7sAZ7NT4hFPRGqSgJ
yUWmqm+ErL6zFJp+H4gcLYbqaI7ryw2giP+KY4Rcoppbi0z0kt6/GaR5RaHhZjSF
W6m5Qlh0+oV93yvpGTGl/i0iDsE2uUrZxz5V8Py/0UQMdPxgA2PIuyzvxEtNr3Wg
X6PhXsyUMYJc+a2Hi33J/gsA/fvn3Sv6Q1m3Y25qyWNBjFN3+yQb65fKwlgWobvW
6j01wl5IafT1QAPxTXmJjWHE7jDc8tc3nHoI9GTdI7qBfhwbkPe7CkZhkycllvtT
4u9rrLYM27+RvsxB6nTksuSt5ZnIy/Rtqqc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org