Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130352e302f32342d3234203d3e20333939313232.roa
File:                     3231362e3234372e3130352e302f32342d3234203d3e20333939313232.roa (raw, json)
Hash identifier:          cpRoCtwFU3TjuCwMv7HVvV2uDBggqrc2ZyXsRnWAF/g=
Subject key identifier:   42:77:CD:AD:E4:C9:DE:6C:D2:28:F3:A9:53:05:79:6E:BA:76:20:16
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       541A45B299AAD0577FFFA5E5E0671D21A877150F
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130352e302f32342d3234203d3e20333939313232.roa
Signing time:             Thu 03 Nov 2022 21:38:50 +0000
ROA not before:           Thu 03 Nov 2022 21:33:50 +0000
ROA not after:            Thu 02 Nov 2023 21:38:50 +0000
asID:                     399122
IP address blocks:        216.247.105.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:1a:45:b2:99:aa:d0:57:7f:ff:a5:e5:e0:67:1d:21:a8:77:15:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Nov  3 21:33:50 2022 GMT
            Not After : Nov  2 21:38:50 2023 GMT
        Subject: CN=4277CDADE4C9DE6CD228F3A95305796EBA762016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f7:47:86:a9:56:45:fc:89:cb:40:12:47:d2:
                    b2:32:e0:b8:40:9e:8b:28:9e:fb:f9:6a:fb:cf:a8:
                    c2:2c:7b:90:eb:dd:90:79:85:17:a2:b3:c5:91:17:
                    87:2a:d8:9f:e5:c6:92:a5:e5:dd:f7:47:c1:10:73:
                    60:08:d2:1f:db:9c:6b:6a:db:88:31:9d:17:9e:e1:
                    7e:4f:40:c7:1a:cc:20:dd:e2:bd:12:67:60:63:43:
                    f6:5d:f4:75:f0:bd:98:06:ff:28:a0:74:8a:35:e9:
                    50:6f:54:f8:49:1d:6d:37:ae:29:da:30:9e:03:92:
                    f4:37:e6:b9:1d:93:be:06:79:2b:0b:a3:59:99:34:
                    7d:f4:34:fe:95:3d:09:07:84:1d:67:73:6d:8e:09:
                    b5:f9:ed:36:68:4d:30:76:26:c7:96:5d:7a:87:3a:
                    29:11:7d:9d:64:21:7d:2c:f2:82:b2:20:35:d9:da:
                    14:78:b3:65:db:5f:f7:24:d7:03:3b:64:14:63:97:
                    b0:a8:94:8b:7e:e0:8c:9c:a9:6a:4d:10:13:71:bd:
                    86:8f:17:2a:ed:16:cd:d2:92:c2:eb:76:0c:4a:7e:
                    cc:0c:48:a6:08:88:c8:3a:5a:0e:11:99:97:f9:25:
                    18:f2:3a:1d:35:1c:ea:34:48:9e:8a:4c:43:f2:05:
                    57:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:77:CD:AD:E4:C9:DE:6C:D2:28:F3:A9:53:05:79:6E:BA:76:20:16
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130352e302f32342d3234203d3e20333939313232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:bc:ea:8e:d9:37:d5:3c:e7:56:7a:79:a5:b3:bd:b6:79:2e:
         2f:22:f5:75:af:87:0a:4f:b5:c4:00:5b:ea:44:b2:e3:78:3b:
         f5:c0:f7:01:42:42:69:0a:30:33:3e:64:9e:ed:d8:7a:13:8c:
         f2:08:bc:d2:61:ce:47:24:73:e6:cc:73:0b:35:5b:87:c5:d4:
         33:2f:e2:90:80:d3:14:ca:93:73:3a:45:4c:07:b0:a0:41:60:
         ae:66:d6:bd:e8:2e:1c:83:0e:91:0e:f4:24:ae:3d:a2:34:1e:
         54:94:43:06:f9:7c:be:91:b6:34:eb:ff:87:3d:9f:c2:1b:88:
         4d:b3:dd:6b:1b:20:11:fe:ef:f7:84:66:1b:92:c9:47:58:26:
         d2:54:b4:ae:b8:7d:5f:33:9c:00:13:f2:00:4f:f8:99:5d:5a:
         ee:5c:41:6b:73:0c:67:ec:54:7a:c9:0d:d5:36:19:67:38:fa:
         e5:02:93:e8:75:f0:27:f4:25:8b:36:d1:dc:3f:0c:7c:dc:a6:
         af:d4:d4:29:96:b3:af:b9:f5:da:5f:b7:22:34:8f:2b:c3:40:
         d9:3e:0e:46:f4:fb:a7:5f:25:a6:7d:8e:fe:bb:32:0f:d2:30:
         0a:d7:bf:37:35:21:02:08:a8:b7:a4:58:2c:e4:df:63:bb:67:
         1d:93:ff:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:20 2023 by rpki-client on console-fra.rpki-client.org