Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138302e302f32342d3234203d3e203631333137.roa
File:                     3231362e3132322e3138302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          eE4W/IR2gmQD18ILsaEaiWrfAd5gP6RLGfaTOHSSng8=
Subject key identifier:   70:74:6E:69:57:83:93:88:B9:B6:05:05:52:95:99:2D:9B:92:93:EB
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       085C91CEA9E0C3A2DF25807FABB532D7B4E7348F
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138302e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 11 Jul 2022 08:30:59 +0000
ROA not before:           Mon 11 Jul 2022 08:25:59 +0000
ROA not after:            Mon 10 Jul 2023 08:30:59 +0000
asID:                     61317
IP address blocks:        216.122.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:5c:91:ce:a9:e0:c3:a2:df:25:80:7f:ab:b5:32:d7:b4:e7:34:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:59 2022 GMT
            Not After : Jul 10 08:30:59 2023 GMT
        Subject: CN=70746E6957839388B9B605055295992D9B9293EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:91:65:ac:19:33:6f:73:22:dc:e8:6b:3d:2e:
                    66:ec:6d:53:be:0e:a3:e7:ae:af:f9:80:72:a3:ca:
                    14:bc:65:3c:51:24:97:9e:46:ab:c0:39:0f:76:df:
                    64:4b:29:6f:7d:b8:9e:14:90:de:62:57:bc:59:31:
                    74:33:34:08:d0:50:00:ca:cc:4d:60:80:40:89:b7:
                    81:df:16:af:45:2b:82:b0:bb:6d:94:ad:8b:13:25:
                    3e:7c:02:bc:e2:65:01:a0:40:78:ec:6a:93:88:d3:
                    cb:b2:91:94:a0:96:5f:5e:45:db:c5:0b:6b:4e:cf:
                    aa:5d:ee:25:8c:dd:63:0a:7a:3f:e1:ef:e5:e1:49:
                    1c:b8:9c:6a:1a:7a:fd:8e:5c:4a:e0:08:f9:aa:7d:
                    1b:37:3e:af:dd:45:36:5b:ce:18:a7:45:11:0d:ee:
                    48:39:23:1f:ea:e7:6d:be:c1:e6:04:1e:1f:12:b6:
                    3d:31:38:f9:1b:99:d3:4e:dc:03:49:4c:31:61:97:
                    f4:60:50:11:45:36:e0:03:79:16:af:c6:ac:43:0c:
                    2e:39:fd:ed:0b:e1:8c:9a:af:e6:11:18:0f:46:30:
                    3c:55:75:40:31:b6:d4:d1:64:b0:19:e1:55:59:47:
                    d8:40:84:d5:49:59:1d:1f:8c:4a:bd:a3:2d:d3:35:
                    f1:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:74:6E:69:57:83:93:88:B9:B6:05:05:52:95:99:2D:9B:92:93:EB
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:f1:a9:d2:b1:d5:c0:da:b6:dd:1a:1a:8e:48:d1:9b:0d:cb:
         a9:2f:fe:f2:5c:b2:75:46:97:de:88:45:1e:68:62:b7:cd:4f:
         e0:ad:76:44:8d:8a:3c:e1:16:a4:3b:24:06:7c:f9:3b:4e:fd:
         6b:07:75:9e:b7:4e:ba:ef:71:cf:d4:5b:3c:b4:e3:80:1a:6a:
         1a:f6:54:62:04:cd:63:06:8d:7c:85:05:49:e4:ca:a7:2b:a3:
         01:a1:1b:0e:ce:ec:c4:f7:98:78:fd:e5:28:06:bd:65:7b:a8:
         24:ec:e7:08:c0:0a:f5:db:d7:01:80:72:16:77:6b:fe:36:a3:
         1a:5b:ca:6f:2a:98:6e:a8:7a:97:37:7f:f0:19:dd:23:25:2b:
         b3:34:2f:1e:a5:ae:80:50:31:25:07:1f:b2:20:fe:04:5e:36:
         43:9c:69:4f:77:35:32:f7:00:b7:99:8e:0d:47:61:8c:1e:af:
         2a:89:5c:18:86:94:4b:cb:c3:30:c4:c0:06:94:f9:c2:f2:c0:
         fc:23:b3:ce:d3:95:a7:b2:ba:ae:ed:d0:d5:56:5d:50:58:fe:
         65:f7:21:55:bd:b6:6f:9c:9f:10:ef:fe:73:1f:96:86:4d:15:
         cf:c3:65:fd:62:bd:ae:ac:0b:69:3b:07:95:5e:3c:a0:43:cd:
         e5:b5:c1:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org