Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138342e302f32342d3234203d3e20343030333834.roa
File:                     3231362e3132322e3138342e302f32342d3234203d3e20343030333834.roa (raw, json)
Hash identifier:          97hchbRG8MwH0z8iDkQGHGNzJ3OjTCrO0Sk0cKqhJK0=
Subject key identifier:   3C:8E:20:41:5E:74:13:11:15:A9:F2:15:16:13:7E:D2:4B:26:78:00
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       0366397E3E548F3F11DF9B977E48F6CB9E5523E7
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138342e302f32342d3234203d3e20343030333834.roa
Signing time:             Mon 11 Jul 2022 08:30:44 +0000
ROA not before:           Mon 11 Jul 2022 08:25:44 +0000
ROA not after:            Mon 10 Jul 2023 08:30:44 +0000
asID:                     400384
IP address blocks:        216.122.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:66:39:7e:3e:54:8f:3f:11:df:9b:97:7e:48:f6:cb:9e:55:23:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:44 2022 GMT
            Not After : Jul 10 08:30:44 2023 GMT
        Subject: CN=3C8E20415E74131115A9F21516137ED24B267800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a2:e8:c0:fe:a9:b2:0b:a3:06:a3:6c:76:ac:
                    55:37:4c:94:e7:37:b5:30:de:ee:d8:d2:22:31:6f:
                    af:42:48:e7:8d:26:7d:ff:7a:4a:8c:90:8c:ee:e3:
                    37:22:ea:9c:b6:1c:4c:ed:1b:15:3a:6e:36:6a:7d:
                    03:19:87:7b:0f:a9:83:07:62:ef:14:60:bd:a2:c1:
                    79:fd:b1:aa:d6:61:7d:d0:d0:3a:41:ca:cf:48:7b:
                    f3:16:fa:5a:b9:8d:40:68:5b:2a:74:d8:2d:91:03:
                    d1:ad:4a:8e:79:af:25:ec:9b:c2:e7:88:07:2c:4b:
                    2c:f7:18:4e:70:d8:2f:4e:68:f4:8c:87:52:a7:81:
                    a6:78:15:dd:bc:06:b4:df:b4:70:d6:d9:3d:2a:02:
                    59:8e:10:92:79:49:84:d1:7d:b1:a3:a3:5c:f5:e0:
                    9c:90:94:c1:78:b5:35:d2:a6:4b:9f:98:21:8c:42:
                    9c:0f:f9:08:6c:9e:a9:aa:46:ba:35:61:86:4d:d3:
                    0b:da:38:b9:28:b2:33:bc:b0:b1:8d:a5:e2:a7:34:
                    3f:b6:cd:b7:ae:d8:08:d5:31:2d:4c:32:6f:2c:45:
                    88:03:74:2c:e1:0f:84:04:a4:2e:9a:78:fd:1f:0c:
                    b1:5a:87:9a:2d:3e:a6:82:6d:69:c5:af:c4:d8:45:
                    f6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8E:20:41:5E:74:13:11:15:A9:F2:15:16:13:7E:D2:4B:26:78:00
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138342e302f32342d3234203d3e20343030333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:1d:99:d3:8b:47:08:2a:35:27:eb:18:04:e6:9a:0c:f3:c3:
         25:9d:5d:9c:60:b2:7b:42:c7:b0:71:1c:4f:cf:6e:e8:48:d1:
         e6:9b:0d:61:dc:d9:82:59:4e:66:5b:73:ef:51:0e:23:3b:f9:
         17:ba:01:89:c8:e3:f0:1f:bb:40:48:d5:0d:f1:bf:d6:55:7a:
         62:dc:1d:6f:38:4a:08:50:9c:d5:e8:69:12:64:bb:27:b1:2c:
         a7:a5:c1:af:dc:34:47:70:a6:46:bb:8a:5a:e0:77:a7:22:32:
         c8:2f:d8:02:83:71:36:ec:d8:db:03:2b:33:8e:b1:07:59:ec:
         dd:c6:4e:5f:33:97:d8:51:d1:a8:55:d8:c1:d4:52:e4:e3:23:
         e0:68:6f:73:35:dd:7f:3f:bd:21:f0:34:26:08:a7:09:29:7e:
         3c:67:b1:0c:6c:c8:59:82:30:9c:e2:94:b1:5d:ef:70:d1:00:
         44:35:4a:83:1b:ed:0e:64:5e:19:64:ae:17:87:f7:bf:57:0d:
         7c:6f:cc:ef:bf:c0:58:ce:15:ae:85:52:89:a3:32:ee:2e:ce:
         c2:eb:19:1c:45:dd:40:14:c9:f6:e0:3d:27:62:12:64:e1:15:
         a2:cb:bb:ef:7e:6a:a2:71:58:6c:21:ae:e6:a0:50:0d:d9:69:
         3b:e6:bd:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org