Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130362e302f32332d3234203d3e20333938343635.roa
File:                     3231362e3234372e3130362e302f32332d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          OY1RIplcA0/wO99Bt7wDzrv10AlZsy4dGEq3QN8X1kY=
Subject key identifier:   70:6F:9A:D8:5E:83:2C:61:4F:44:A0:A2:BD:F4:7A:7B:05:1E:3E:59
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       7321A625C397FC489D2946CCF2BF8A27001D0BFB
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130362e302f32332d3234203d3e20333938343635.roa
Signing time:             Tue 12 Jul 2022 05:47:36 +0000
ROA not before:           Tue 12 Jul 2022 05:42:36 +0000
ROA not after:            Tue 11 Jul 2023 05:47:36 +0000
asID:                     398465
IP address blocks:        216.247.106.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:21:a6:25:c3:97:fc:48:9d:29:46:cc:f2:bf:8a:27:00:1d:0b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Jul 12 05:42:36 2022 GMT
            Not After : Jul 11 05:47:36 2023 GMT
        Subject: CN=706F9AD85E832C614F44A0A2BDF47A7B051E3E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:72:57:13:b3:dd:26:c5:65:d8:8b:05:24:d7:
                    65:0b:96:c1:70:94:ba:91:99:b3:01:2a:d5:03:9f:
                    28:44:c4:85:9b:9a:5e:1b:ee:12:9c:a8:ce:3c:f2:
                    b1:49:c8:7b:80:ea:81:82:80:d3:d1:48:ad:95:53:
                    1e:39:0a:b6:99:84:7a:1b:ae:d6:f0:6c:72:98:79:
                    fc:fc:67:45:1e:e9:44:98:e2:72:d2:96:c7:2a:42:
                    28:56:a5:eb:72:31:bd:c4:f8:6f:a4:2b:f4:21:06:
                    00:5e:1c:3c:1e:a7:96:27:60:11:4c:15:a2:32:38:
                    43:35:39:50:82:ca:a8:c8:26:b2:3a:12:a4:32:90:
                    2e:23:fe:06:1f:2f:6a:53:65:32:8d:71:b8:fb:ac:
                    5a:5b:6c:15:f0:c3:91:54:84:a8:8f:d6:22:3f:ef:
                    2e:de:ab:56:8b:cc:cd:6e:43:df:14:41:7c:44:18:
                    a9:70:ee:5c:c2:0e:79:3e:b3:cd:0d:e3:4f:29:b4:
                    d8:3b:ab:0e:67:8d:47:49:16:e8:17:0e:b4:b3:d9:
                    1c:e9:99:c3:9b:12:bf:c6:c0:56:51:07:c9:ea:f8:
                    29:de:6e:b0:f2:eb:90:8f:2b:7b:64:77:ab:28:0c:
                    71:28:fd:a5:6c:78:32:11:a4:90:d3:59:08:c7:8b:
                    94:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:6F:9A:D8:5E:83:2C:61:4F:44:A0:A2:BD:F4:7A:7B:05:1E:3E:59
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e3130362e302f32332d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:00:de:b3:27:e7:73:f3:a1:3f:19:1a:fc:e1:5d:22:2a:33:
         ed:f3:bc:bc:55:7c:4e:13:8a:ff:31:0b:3c:39:11:93:8f:6f:
         0a:d4:ce:c9:b1:7c:8b:6f:a6:35:06:c6:e5:c5:e2:9e:ff:ba:
         cc:b9:3c:1a:01:26:48:14:98:cd:c5:3c:56:3e:2c:7c:a1:f8:
         a8:9a:f3:34:53:96:4b:9f:18:6d:4e:c4:f8:72:0d:ff:eb:01:
         6c:52:ac:10:98:fe:7c:ef:6a:79:bd:72:ea:bd:c7:4f:81:0d:
         a8:75:a7:d8:20:ff:2d:51:70:ae:3d:1b:62:20:4f:62:2a:cc:
         78:b3:ee:76:c9:13:5c:57:9f:42:cf:10:4d:64:95:c2:2e:a6:
         fd:b4:03:c2:e4:98:e5:0d:9a:75:4c:07:80:97:96:2f:d5:c2:
         1b:68:74:55:29:ea:09:4f:56:25:87:bc:5a:54:6d:7b:f1:51:
         15:4e:c8:e9:38:bd:65:60:aa:89:66:2d:a2:df:d0:fc:fd:fa:
         df:be:0d:35:6d:83:f5:22:f3:8a:03:d2:b5:12:2f:48:8e:06:
         e8:91:5a:ee:a5:4e:98:63:27:f7:d3:2d:7f:3c:ef:53:4f:86:
         98:61:44:2d:f6:63:9e:5c:3d:6f:da:a1:51:3c:33:b8:74:9b:
         47:ea:e8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:20 2023 by rpki-client on console-fra.rpki-client.org