Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          1ilX0RldCNHj+nEnuaUKjkLtVt0+i9pSQseqrdXelJ8=
Subject key identifier:   B5:09:8B:48:6F:19:5E:3D:A2:C0:6C:BD:8A:01:AA:8D:6C:F0:34:0D
Certificate issuer:       /CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
Certificate serial:       60E9F88CCC7CF97FF5F9330AF5258173974526FA
Authority key identifier: 5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
Signing time:             Sun 22 May 2022 06:07:54 +0000
ROA not before:           Sun 22 May 2022 06:02:54 +0000
ROA not after:            Sun 21 May 2023 06:07:54 +0000
asID:                     399970
IP address blocks:        149.112.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e9:f8:8c:cc:7c:f9:7f:f5:f9:33:0a:f5:25:81:73:97:45:26:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c
        Validity
            Not Before: May 22 06:02:54 2022 GMT
            Not After : May 21 06:07:54 2023 GMT
        Subject: CN=B5098B486F195E3DA2C06CBD8A01AA8D6CF0340D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:da:c0:77:02:ba:94:07:6c:fc:95:27:1f:
                    1a:d0:9c:4e:15:37:6a:0c:42:6c:fd:95:42:27:75:
                    8b:99:d3:69:cd:4c:c4:dd:08:8f:c9:19:de:ea:1d:
                    1d:7c:e8:0d:3d:21:2f:72:84:7a:59:e2:d0:f4:51:
                    1f:e4:9a:43:58:c0:9e:cd:96:11:d4:f6:19:5d:8c:
                    6e:ba:25:9d:75:f8:08:db:d3:ec:fb:bc:d1:72:90:
                    a9:eb:3c:d8:e5:24:f8:28:05:cd:d3:9a:8e:ae:af:
                    2a:1f:28:66:7f:7d:73:b7:11:13:20:50:12:e8:b8:
                    89:81:22:31:69:2a:3a:cc:6b:0b:40:17:ed:0d:96:
                    b7:c0:17:d6:32:6d:71:43:94:19:df:df:5f:f1:28:
                    57:fb:b4:e2:95:75:fc:89:b5:1a:80:02:d2:ff:c3:
                    6b:37:52:a5:dd:dc:14:a7:15:1a:9c:59:0e:d2:0d:
                    47:33:cd:f3:9b:c0:b7:ad:db:ea:24:dc:02:18:7f:
                    eb:a1:2a:47:8f:73:82:b6:38:03:04:a6:63:a4:55:
                    0d:6e:7d:4e:35:87:68:ee:b8:70:d0:f4:31:0e:57:
                    64:51:5e:5e:34:ee:e4:75:ef:48:a6:05:a7:36:1c:
                    79:ca:d4:fb:90:e3:81:d3:0e:3d:2d:6b:bf:af:1f:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:09:8B:48:6F:19:5E:3D:A2:C0:6C:BD:8A:01:AA:8D:6C:F0:34:0D
            X509v3 Authority Key Identifier:
                keyid:5A:6A:21:24:37:1A:F9:DE:E8:6D:93:83:EF:CE:8A:B3:78:30:9E:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/5A6A2124371AF9DEE86D9383EFCE8AB378309E73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/233e65fa-892f-427b-adc7-f23c951a8348/fcb20f5966813055f65eaf505395b86339edf0e42df6297f6c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80ae91df0180ea5d5fb330cc/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:cd:d2:36:ec:13:b0:fa:b7:dc:18:3b:9f:7c:d0:f7:01:19:
         c0:44:01:23:10:a7:f8:a8:e8:47:f9:1a:19:9d:b1:2d:23:87:
         aa:44:c0:3c:ef:00:77:fd:31:57:c7:17:a1:8d:b8:c9:ab:0a:
         12:c2:04:99:38:ee:48:59:d6:24:aa:0b:e4:7e:df:2d:8c:b0:
         79:71:93:e4:82:78:76:54:38:77:9b:ee:4f:40:2c:95:33:3a:
         f7:f3:93:f4:10:4c:bf:af:c1:1a:47:f8:45:a3:4c:45:e4:fc:
         fe:66:8a:3f:60:cf:fc:c3:54:5d:e1:64:ae:c4:83:93:9e:42:
         00:e5:36:63:9f:e3:f4:ce:6e:84:7b:e4:a1:eb:30:c9:76:e9:
         63:6d:69:91:85:c8:99:9a:5c:67:e8:fc:e3:14:d5:df:4e:f0:
         63:ed:fe:4c:28:ac:a2:8d:7b:63:7b:19:e2:b2:16:fe:b0:73:
         28:ed:0d:4c:83:63:f3:b5:8c:fe:1b:c0:b8:7c:5a:63:b4:03:
         cf:22:83:5d:5b:76:0f:31:fd:22:02:bf:c1:2a:54:12:08:3a:
         57:70:e9:5a:8b:2a:24:d2:0f:21:4d:81:92:5b:89:3f:2f:49:
         47:40:4f:c5:54:d8:33:b7:58:6f:1e:b6:f4:97:8f:8d:2f:fb:
         dd:16:1b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:21:06 2025 by rpki-client