Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e39392e302f32342d3234203d3e203430363736.roa
File:                     3231362e3234372e39392e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          bJvz4J5j1pVJ6OOGbT294ZxBq2C8WzurfdePfq19HUk=
Subject key identifier:   6E:F2:AB:FD:9C:57:E1:B9:9E:29:34:E6:AE:2B:09:B4:CB:69:24:7C
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       09AF6A90F168652F61488022B203649A6D890DD8
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e39392e302f32342d3234203d3e203430363736.roa
Signing time:             Tue 12 Jul 2022 05:47:32 +0000
ROA not before:           Tue 12 Jul 2022 05:42:32 +0000
ROA not after:            Tue 11 Jul 2023 05:47:32 +0000
asID:                     40676
IP address blocks:        216.247.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:af:6a:90:f1:68:65:2f:61:48:80:22:b2:03:64:9a:6d:89:0d:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Jul 12 05:42:32 2022 GMT
            Not After : Jul 11 05:47:32 2023 GMT
        Subject: CN=6EF2ABFD9C57E1B99E2934E6AE2B09B4CB69247C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:80:b2:65:4e:47:8d:d9:7c:9e:1b:59:7c:30:
                    25:0b:46:8b:fb:56:57:f5:99:b5:ac:e6:65:db:5b:
                    73:2d:08:5e:d7:f3:35:90:36:23:e9:bd:27:c1:da:
                    23:fa:d2:d8:84:f5:fd:d7:59:41:b9:79:ae:6b:25:
                    e2:2c:60:1b:38:80:df:f9:4f:9f:b4:fe:2c:e5:9d:
                    fb:80:25:54:6e:49:52:4f:ec:47:7c:d2:cd:30:cd:
                    92:b7:89:ba:b6:e9:30:e5:7d:20:37:0b:bf:45:11:
                    77:74:ab:00:93:42:42:85:10:32:e8:4b:cd:a3:d9:
                    f6:57:02:24:3d:c3:17:b1:48:f2:85:44:d6:a5:3b:
                    82:b9:c1:36:de:fd:2e:a7:03:2a:ed:1f:51:3b:24:
                    84:17:74:24:dc:72:0b:1c:e1:2d:a5:41:d3:c9:d2:
                    65:e5:b2:44:58:66:c3:a5:7f:45:df:dc:9c:45:2a:
                    20:33:91:7d:9f:48:c0:e6:10:b3:7b:84:cf:ee:48:
                    7c:be:6b:87:5c:3b:89:3f:43:e5:85:cb:8c:62:8f:
                    69:b7:9c:d4:ed:39:53:56:7f:fe:92:12:52:00:21:
                    64:e4:bd:ea:39:f1:65:b3:78:67:be:14:12:e8:42:
                    42:b5:66:3b:8a:07:51:4c:4f:70:c3:78:c4:c3:22:
                    06:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F2:AB:FD:9C:57:E1:B9:9E:29:34:E6:AE:2B:09:B4:CB:69:24:7C
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/3231362e3234372e39392e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:e7:48:77:93:75:86:50:32:df:fa:f7:62:24:52:ee:20:40:
         cd:6f:47:b0:43:3e:94:7f:e4:2e:e7:15:11:62:17:81:50:d0:
         c4:2a:c7:89:48:63:ec:32:f3:c7:66:81:16:c6:a2:b1:51:4c:
         af:c4:89:21:62:22:b9:86:a6:82:cf:9e:f8:bc:6a:5c:41:b8:
         2f:a2:84:1d:77:86:ce:e0:2e:4e:3f:1c:0f:a2:89:f0:e7:5f:
         a0:66:da:c5:b7:53:9b:b1:c4:4f:5e:45:94:15:d7:a6:95:18:
         1b:96:58:7b:0a:a9:07:f6:ae:1e:f7:15:9b:4c:f4:6a:00:52:
         8f:de:85:09:91:d4:82:e2:1e:27:7b:ad:90:cd:79:13:25:cc:
         cc:13:7f:a9:5a:2d:e9:84:31:61:ef:c5:16:41:61:d9:b8:01:
         94:1b:21:0b:66:91:9a:38:5f:52:18:e0:d0:28:eb:dd:7e:5d:
         27:5a:f0:91:de:9d:13:61:a5:e4:cb:51:82:6f:c0:c3:ca:0d:
         e0:d1:a1:68:57:15:ac:d1:a1:2a:44:31:fd:9e:40:63:f2:72:
         7c:62:ed:e2:ee:ec:f0:63:8c:4d:f6:2b:ab:7d:5d:25:88:98:
         21:ee:fd:d7:16:64:37:4b:06:35:21:ed:a3:a9:3b:75:d5:0e:
         c7:c3:0e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org