Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e39382e302f32342d3234203d3e20333938343635.roa
File:                     3231362e3234372e39382e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          ULVIEyXYIgOHv2rga13M78885p2r4ldKptJDZOitOX4=
Subject key identifier:   87:E9:6E:DB:64:E8:DC:3F:96:2E:9F:D4:BB:8D:7B:DD:1E:5B:2F:BB
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       01A19722983DD4E8D9EAF2744DFB619F3E7001C5
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e39382e302f32342d3234203d3e20333938343635.roa
Signing time:             Tue 12 Jul 2022 05:47:36 +0000
ROA not before:           Tue 12 Jul 2022 05:42:36 +0000
ROA not after:            Tue 11 Jul 2023 05:47:36 +0000
asID:                     398465
IP address blocks:        216.247.98.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:97:22:98:3d:d4:e8:d9:ea:f2:74:4d:fb:61:9f:3e:70:01:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Jul 12 05:42:36 2022 GMT
            Not After : Jul 11 05:47:36 2023 GMT
        Subject: CN=87E96EDB64E8DC3F962E9FD4BB8D7BDD1E5B2FBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:99:28:bb:65:7f:ce:78:43:9b:ac:4a:c3:04:
                    45:2e:01:d8:73:cb:10:ba:da:ef:f1:a1:16:3d:9b:
                    e3:01:9e:91:44:46:17:54:34:c9:36:56:ae:7f:ad:
                    9e:74:7a:8c:a6:d1:d1:f8:36:ff:83:32:ce:ed:c5:
                    d5:39:92:1b:72:b6:45:29:c7:7e:d3:cc:02:d5:6e:
                    a2:28:7c:3c:0e:c0:64:81:29:75:98:37:ba:e9:09:
                    e8:79:fd:c2:6b:d2:c3:a4:91:f1:38:17:76:a4:54:
                    18:d9:be:6e:7c:4b:70:01:50:26:4b:3e:fb:19:3f:
                    20:fd:b4:0b:b5:3b:c7:57:03:80:fd:01:c6:5a:24:
                    8d:71:a9:e8:a4:e1:2b:34:44:8d:f8:9d:82:44:cb:
                    a4:14:98:dd:9a:82:06:50:af:0e:92:1e:52:41:d7:
                    e3:da:e5:5d:54:0d:3b:cd:ed:d6:1e:c3:93:a6:76:
                    5e:36:d8:0b:6a:7e:58:84:8d:4d:d7:4f:f3:10:b0:
                    a1:28:eb:e3:33:99:8e:cf:26:35:16:6e:f8:4b:3c:
                    96:53:00:e8:1a:62:78:28:2e:14:b8:74:0b:ab:94:
                    62:5d:10:fc:6c:bc:40:fc:59:85:19:b3:c3:c8:fa:
                    3a:be:a9:29:6a:78:08:78:c8:d5:de:08:01:13:da:
                    60:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E9:6E:DB:64:E8:DC:3F:96:2E:9F:D4:BB:8D:7B:DD:1E:5B:2F:BB
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e39382e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:74:8a:e6:bb:ce:72:be:f6:76:8f:7b:fc:1e:16:8b:9d:4a:
         7a:2b:c8:1a:26:44:0d:20:7e:e1:af:98:49:73:2e:96:f3:f6:
         bf:31:6a:f2:b9:36:e5:1e:74:17:c5:39:70:a2:f1:92:aa:44:
         34:88:b0:fb:e5:a9:2b:a7:ea:5e:92:c0:7a:03:5a:34:76:64:
         7b:09:2d:ef:a4:c5:75:7f:68:86:b8:5b:b2:b6:d0:85:51:82:
         25:43:3e:2a:36:a7:9a:e9:da:4a:22:fe:da:01:c8:2c:1c:c2:
         e6:c7:9c:fa:56:55:40:1a:14:1c:75:0b:d1:49:e2:bc:84:7b:
         0d:2f:31:0e:fa:74:a5:95:88:4f:d6:c2:10:e3:70:9b:05:d9:
         4a:9a:e9:ef:a0:0f:e5:7e:52:16:b8:f2:e0:46:ab:ea:2f:dc:
         63:fc:b6:2f:22:e1:75:a9:08:92:fe:25:e3:64:4f:88:58:83:
         8a:5c:7e:5a:ed:df:2f:75:13:15:fa:7d:85:9a:43:1e:6b:86:
         11:12:c5:14:56:ed:8c:d1:09:c7:68:60:18:86:a9:5a:c5:90:
         d2:60:6f:c1:08:54:27:6e:af:27:fa:2d:c5:fb:10:79:83:5f:
         e9:7e:3c:27:ba:22:c0:b2:36:8f:51:9d:25:32:af:26:0d:36:
         68:9d:5b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:20 2023 by rpki-client on console-fra.rpki-client.org