Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS19437.roa
File:                     AS19437.roa (raw, json)
Hash identifier:          iten59FIkdGKWvZpZjOG/pq/mTcdVKON1ZJhObW/iqM=
Subject key identifier:   A5:E1:78:14:32:8F:F4:EA:00:FC:79:5F:33:B6:27:18:BC:69:2C:B4
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       4557B788FE6A7E0675C7605FA187BC9B6B63D1A2
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS19437.roa
Signing time:             Thu 08 Sep 2022 06:49:09 +0000
ROA not before:           Thu 08 Sep 2022 06:44:09 +0000
ROA not after:            Thu 07 Sep 2023 06:49:09 +0000
asID:                     19437
IP address blocks:        216.122.182.0/24 maxlen: 24
                          216.122.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:57:b7:88:fe:6a:7e:06:75:c7:60:5f:a1:87:bc:9b:6b:63:d1:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Sep  8 06:44:09 2022 GMT
            Not After : Sep  7 06:49:09 2023 GMT
        Subject: CN=A5E17814328FF4EA00FC795F33B62718BC692CB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f7:e9:f4:ca:7c:2d:95:d0:21:3d:af:9a:fa:
                    5b:b9:b6:aa:97:c7:ec:71:39:81:80:19:67:bd:94:
                    cb:3a:b9:4d:ea:09:3d:65:7a:56:8e:4d:72:96:86:
                    e0:a5:c5:3d:76:1f:34:75:8c:04:7c:0d:e1:c4:f3:
                    0f:02:c4:56:8b:bb:25:c9:81:d0:37:3b:bd:c3:85:
                    de:06:e7:65:7f:de:d3:af:fd:83:9f:75:92:d6:ea:
                    69:7a:53:98:72:bb:45:a9:91:1a:2c:b8:b0:e7:4e:
                    0e:f3:37:1d:14:27:fb:88:3d:73:80:68:48:53:25:
                    21:14:aa:b0:08:5f:ee:77:dd:ec:8e:93:ac:bd:b3:
                    0f:6c:14:b1:bf:7c:a9:65:88:66:cd:60:45:6f:95:
                    2b:48:4e:1d:f3:25:35:48:bc:b2:93:70:89:1b:57:
                    17:7c:5c:33:b6:b7:6d:4c:79:0e:f8:f2:0d:e5:5d:
                    5f:3a:b9:0d:02:34:81:79:6d:8c:ec:c7:1d:89:18:
                    db:e0:4a:fc:27:d3:3e:08:8a:b9:60:a9:73:3b:2c:
                    c8:fe:6b:68:7e:48:95:a4:1f:40:df:7d:81:92:bb:
                    07:a9:19:aa:3a:8d:a9:d1:fe:a6:5f:a4:19:ce:e7:
                    b2:73:0c:cb:80:e0:ad:5b:fb:99:23:8b:5e:7d:e9:
                    8f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E1:78:14:32:8F:F4:EA:00:FC:79:5F:33:B6:27:18:BC:69:2C:B4
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS19437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.182.0/24
                  216.122.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:24:9f:21:aa:ae:4f:f3:a5:3a:9f:d4:df:14:0d:df:0c:d6:
         da:04:8a:3b:90:8d:31:cb:43:d9:56:23:f1:8e:82:6a:a6:c2:
         ae:0f:69:b2:a3:d4:64:18:fc:52:3b:c5:ad:19:8f:5c:96:89:
         95:6b:e6:31:97:9b:48:59:16:e5:ec:db:69:5b:25:24:db:41:
         9b:fb:7a:34:c6:74:f7:41:46:51:88:ac:0d:2d:16:fd:d6:7f:
         ff:1f:f9:09:d9:0c:0f:e3:34:db:1e:bd:8a:13:12:33:61:9d:
         1a:38:a9:9e:29:01:2f:b0:28:51:10:54:b4:5b:00:b6:60:f7:
         ed:c7:6d:9b:69:b9:bb:f7:0a:82:ab:6e:20:19:39:55:6c:2f:
         8c:14:6e:04:c1:cc:a3:0a:58:26:9f:32:cc:78:80:fe:36:3e:
         f2:ad:ed:b9:3f:9a:d6:f9:87:8a:63:ea:91:68:53:c3:8f:32:
         ef:53:02:41:a0:da:dc:a9:67:4f:02:72:04:6a:20:9d:5d:87:
         b6:9d:ef:6c:7b:c8:c2:7d:14:db:ca:89:19:ed:53:db:5b:28:
         3b:e3:b9:d7:57:9c:37:05:1c:4e:30:4d:6d:87:31:a2:d1:a6:
         e9:5a:dc:70:06:83:80:0e:cc:aa:67:2a:d0:0e:74:78:91:fa:
         56:1c:8f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:22 2023 by rpki-client on console-ams.rpki-client.org