Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          2bTajoqqQN6YOYvWNWXQGPnBr/vm9cg0ztJYwo1Djfo=
Subject key identifier:   24:43:FE:58:41:BB:B3:E8:27:DD:D7:2F:2E:7A:66:A9:ED:DB:31:AB
Certificate issuer:       /CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
Certificate serial:       1F1E21C0083E06A2476387E8AD9D6FD9966F000C
Authority key identifier: 5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
Signing time:             Sun 22 May 2022 06:06:23 +0000
ROA not before:           Sun 22 May 2022 06:01:23 +0000
ROA not after:            Sun 21 May 2023 06:06:23 +0000
asID:                     399970
IP address blocks:        149.112.154.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1e:21:c0:08:3e:06:a2:47:63:87:e8:ad:9d:6f:d9:96:6f:00:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
        Validity
            Not Before: May 22 06:01:23 2022 GMT
            Not After : May 21 06:06:23 2023 GMT
        Subject: CN=2443FE5841BBB3E827DDD72F2E7A66A9EDDB31AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:d1:93:dc:5b:d1:75:a4:8d:07:0e:87:f3:
                    4a:d2:52:05:05:b9:6c:f0:0d:d7:00:0f:68:1e:d7:
                    ff:b4:3e:e6:fb:0c:c2:27:ed:00:05:cd:7e:15:02:
                    6f:36:4c:24:86:00:9f:6c:4b:6a:69:7e:39:a0:37:
                    60:66:2d:41:4f:54:12:d5:e8:d5:3f:68:da:4a:7d:
                    24:8b:56:95:75:61:b2:3f:9f:a2:d1:71:07:06:8d:
                    6e:74:dc:ec:ab:0b:b6:e1:74:fa:e5:18:3a:0c:9e:
                    ad:c1:1d:f8:31:d1:b7:fc:13:d4:5f:9f:20:23:f4:
                    e0:d3:4f:43:88:ae:1d:8f:11:6e:1e:26:a6:17:03:
                    df:6a:94:d4:6e:2a:0a:30:21:b1:be:ef:17:3b:d4:
                    78:31:3e:ae:ae:88:4a:c1:e9:36:36:86:91:5c:42:
                    3a:cd:bb:6b:2c:e8:81:b1:9a:0e:da:59:82:a8:58:
                    8d:68:68:33:de:c6:13:51:8b:ac:d2:42:9f:fd:3b:
                    0d:13:cc:8b:54:d7:5f:dd:8e:57:79:02:90:d3:e4:
                    1a:76:1c:2c:ab:30:8e:27:38:37:ca:c9:ae:a3:d4:
                    5b:53:f6:1e:7f:80:e7:1b:7e:72:de:63:c4:78:67:
                    33:e8:45:ca:d6:cf:90:01:a5:a6:18:f0:c3:75:fe:
                    e6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:43:FE:58:41:BB:B3:E8:27:DD:D7:2F:2E:7A:66:A9:ED:DB:31:AB
            X509v3 Authority Key Identifier:
                keyid:5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/5A6A2124371AF9DEE86D9383EFCE8AB378309E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:01:d6:71:77:47:41:02:7a:de:ea:fa:b5:1d:a5:e2:e9:cd:
         77:3e:28:2a:a8:48:6e:13:f3:4b:ab:c5:d9:f7:98:7e:ae:7c:
         36:32:32:d0:44:67:fe:4f:a9:48:f8:0a:24:e4:8d:f6:a5:b3:
         06:af:1b:58:de:b7:f2:35:78:a3:eb:dd:04:52:b9:48:41:18:
         26:9a:48:5b:db:6a:49:ae:1c:eb:7b:19:80:a5:f6:47:8a:8f:
         b5:44:f0:22:7e:a8:0e:a9:54:73:5b:95:0a:90:fb:81:ef:da:
         ef:76:c5:83:e1:cb:60:b8:5c:0f:a4:7c:53:72:95:20:3c:02:
         04:11:58:df:3e:d0:14:a6:76:03:88:d0:71:15:0a:d0:6e:09:
         50:14:9b:97:64:2f:5d:5d:8e:0a:db:08:1e:52:a5:36:db:d4:
         0e:d0:60:33:9e:d7:78:4f:f3:85:ab:96:95:cc:9c:66:d3:f0:
         84:b4:98:ac:2a:f0:3d:3c:37:b4:e2:3b:e0:5a:4e:67:c5:ae:
         58:41:93:23:c9:66:e3:cf:b8:9a:f8:88:c9:81:d6:4b:db:12:
         36:51:b6:c1:3f:a7:00:67:39:e9:08:34:f1:0e:a6:be:0d:7c:
         0b:1c:db:24:50:34:f4:ef:30:b3:d0:17:5a:fe:f6:68:fc:1e:
         3c:e5:81:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:18:13 2025 by rpki-client