Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS19437.roa
File:                     AS19437.roa (raw, json)
Hash identifier:          x2Duflg5jL3Dd2t+Qy6aUR822hmHM7bvTj+mxwzlcS0=
Subject key identifier:   6E:D2:73:D0:17:7E:65:78:00:0B:E0:B6:0E:F9:12:13:72:D9:3F:6C
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       36E6CE1DC7BD8DDADD312BBAA52558012BD8EBD9
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS19437.roa
Signing time:             Mon 28 Nov 2022 09:41:22 +0000
ROA not before:           Mon 28 Nov 2022 09:36:22 +0000
ROA not after:            Mon 27 Nov 2023 09:41:22 +0000
asID:                     19437
IP address blocks:        216.122.182.0/24 maxlen: 24
                          216.122.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:e6:ce:1d:c7:bd:8d:da:dd:31:2b:ba:a5:25:58:01:2b:d8:eb:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:22 2022 GMT
            Not After : Nov 27 09:41:22 2023 GMT
        Subject: CN=6ED273D0177E6578000BE0B60EF9121372D93F6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fa:8a:8d:c3:72:9c:36:1f:4a:db:46:ac:ad:
                    a5:18:95:73:21:b4:f1:b8:84:45:33:c3:a7:4d:34:
                    a6:dc:df:21:20:d8:86:73:c9:f0:28:08:b0:be:d8:
                    eb:0a:15:8d:b3:0c:69:4b:a8:a1:1f:a9:9b:25:f9:
                    08:d8:2d:de:43:81:24:10:0a:c2:56:2b:5f:19:ef:
                    19:8e:f8:84:b9:f4:1b:34:60:b0:a4:8c:74:df:ae:
                    8c:2f:d7:b0:d7:94:51:24:5e:1d:75:a0:28:f0:68:
                    88:b5:23:ba:ba:c4:77:b6:4c:31:50:a3:a7:c7:d7:
                    dc:f2:5b:9a:e5:1b:8b:0a:8b:52:5f:ec:27:02:35:
                    b3:3d:22:af:49:dc:11:20:d1:ec:73:c6:42:ff:18:
                    7f:83:d8:ce:bd:bb:81:ee:7f:e6:ae:4a:52:24:2e:
                    f9:da:b6:9c:4a:c2:f7:8c:54:1d:8d:18:6f:57:fd:
                    ea:ac:8b:25:5a:31:f3:91:ae:63:ea:e8:23:c0:9c:
                    c3:6f:64:f2:47:04:af:cb:39:12:2e:48:23:69:d5:
                    e3:88:f9:37:af:3e:c9:c9:25:8a:88:37:b3:b0:1b:
                    d0:d5:2e:80:b2:0f:9a:b2:1d:e9:27:51:31:da:cb:
                    e0:da:08:0b:9e:9f:37:46:ed:6e:f8:43:9f:17:4a:
                    e9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D2:73:D0:17:7E:65:78:00:0B:E0:B6:0E:F9:12:13:72:D9:3F:6C
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS19437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.182.0/24
                  216.122.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:a0:b3:22:6d:0f:6e:51:6a:ec:f0:a7:c4:29:29:e4:0f:fe:
         fe:ed:fd:ff:81:90:81:91:0c:f4:bc:09:cc:0a:18:90:7f:a7:
         24:50:9f:28:cf:f1:ba:d9:73:16:13:69:97:13:f7:c1:80:bc:
         ad:ff:8e:e2:6e:93:a9:7c:ee:84:94:d4:8f:da:e6:a9:46:1a:
         f7:5d:e2:80:74:d4:3d:75:c2:2a:49:75:ee:89:5c:ba:26:e8:
         b9:6f:7b:49:bc:3c:2a:7c:4c:bf:77:ab:fc:b2:2e:8f:9a:b4:
         3c:63:aa:1a:f7:9a:07:a7:cf:01:80:cc:fe:8f:ae:a3:8c:48:
         a6:d2:e9:28:84:86:22:36:88:7d:18:b3:0e:6f:cb:93:cf:a1:
         b8:c4:9a:78:52:e1:4f:3c:8d:41:f5:71:6c:6a:de:ac:95:99:
         c5:df:f8:0b:bd:6a:bd:bd:04:c7:3d:36:44:82:17:54:a0:80:
         88:8a:98:8e:f3:4f:06:32:67:7e:2b:4a:d3:5c:2b:ac:eb:5d:
         92:0b:34:26:d3:8c:23:69:1a:e9:de:70:26:4b:3b:f9:4a:25:
         86:7f:54:3f:dd:c8:be:0b:65:5d:72:22:1f:ba:c1:79:c6:65:
         5a:50:1e:49:6a:dd:6b:2b:ee:94:ce:dc:2c:e6:94:52:cf:56:
         cb:77:8f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org