Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138362e302f32342d3234203d3e20323131353835.roa
File:                     3231362e3132322e3138362e302f32342d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          Z7t/BFdN9+gfeaWMEhwofbD79jwOYJYqlHUo9Jr3X6I=
Subject key identifier:   9D:86:61:E9:D7:F4:5E:75:AA:AE:63:64:80:0A:E9:A5:FF:67:94:60
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       537276E4C75992537A1316AC3C6395E6F0193AA0
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138362e302f32342d3234203d3e20323131353835.roa
Signing time:             Mon 11 Jul 2022 08:30:59 +0000
ROA not before:           Mon 11 Jul 2022 08:25:59 +0000
ROA not after:            Mon 10 Jul 2023 08:30:59 +0000
asID:                     211585
IP address blocks:        216.122.186.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:72:76:e4:c7:59:92:53:7a:13:16:ac:3c:63:95:e6:f0:19:3a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:59 2022 GMT
            Not After : Jul 10 08:30:59 2023 GMT
        Subject: CN=9D8661E9D7F45E75AAAE6364800AE9A5FF679460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:7f:2e:08:ca:57:f2:b7:68:d1:bf:c6:6f:1a:
                    3f:fd:8a:d9:ef:51:44:f1:09:b0:9a:43:d8:03:82:
                    56:d9:f1:3d:e1:1b:ad:1e:4a:00:93:7d:cc:9a:23:
                    60:7b:b6:bd:f6:10:1f:9f:ec:4f:10:bb:ca:60:38:
                    91:e5:ee:97:13:fc:13:df:41:76:c2:c3:ea:a7:93:
                    79:62:58:f1:e5:d0:f6:d3:23:8a:dd:31:43:3e:35:
                    55:f4:55:4e:ea:47:8d:a8:a6:59:6a:6c:c0:3c:2d:
                    3c:ed:1c:ce:0b:6a:3c:e7:6a:b6:86:9d:6c:eb:c1:
                    2a:7c:31:a2:7d:5e:e1:88:93:92:34:99:f1:0d:c5:
                    15:ef:ab:2c:60:5d:a1:98:6a:3e:45:7f:cd:6b:b2:
                    d6:e0:48:d0:6d:30:71:d2:81:ce:19:03:77:c0:4d:
                    7f:49:11:c8:a9:6b:1c:08:c7:50:1e:72:58:e4:c2:
                    9b:4c:a4:5e:61:83:de:ce:f8:dc:12:10:d5:12:25:
                    be:1d:55:99:ad:71:9b:80:c1:ab:0a:85:95:d1:4b:
                    56:fb:00:ae:90:9c:4e:88:77:5b:b5:f2:a0:5f:9e:
                    64:a7:77:3e:98:bb:7d:67:97:df:62:ea:76:02:3e:
                    02:fd:81:76:84:44:d3:9e:c9:fa:89:eb:7d:3f:c7:
                    4a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:86:61:E9:D7:F4:5E:75:AA:AE:63:64:80:0A:E9:A5:FF:67:94:60
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138362e302f32342d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:c7:54:53:c7:9f:32:35:e3:68:bf:8f:dc:4c:89:54:f5:81:
         3a:b6:98:f5:fa:76:5c:9b:56:d4:bb:a0:a9:82:0f:16:ef:11:
         61:92:14:dd:9a:9f:e0:79:cd:80:6a:4e:3a:e3:6d:d9:68:18:
         d0:1b:d2:cd:35:b4:54:18:ea:a9:a5:e6:31:1b:9a:c7:e6:ea:
         dd:07:01:3a:83:44:d4:d0:d3:89:14:6e:3a:6c:29:6b:c2:ce:
         e7:1c:f2:d8:4d:14:eb:26:dc:86:af:f1:ed:a3:1f:ef:0a:12:
         51:0d:b7:c0:69:68:78:3d:af:23:c6:5d:21:ce:33:df:52:87:
         84:a1:c6:dd:41:a7:1e:27:62:78:55:e7:3a:fb:97:3f:bf:71:
         d0:2d:1d:51:3b:e5:59:3d:c0:04:00:92:ba:f5:9f:92:7d:68:
         6b:cf:05:47:e9:c5:fb:dd:d9:7c:88:b1:54:fa:9e:d9:3b:ab:
         c6:28:c3:57:d7:ca:cd:00:1a:cc:2c:9f:d8:e8:f4:13:fb:d3:
         fc:57:0f:e2:ef:12:15:64:7a:d2:25:60:09:42:2e:62:86:b1:
         58:35:48:a0:70:45:0e:06:f0:1e:be:31:fd:64:f4:18:8b:70:
         f9:85:26:e7:a3:8e:66:27:95:3b:6d:cf:ac:0c:ab:f0:4e:41:
         be:ac:9f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org