Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e302e302f31382d3138203d3e203136353039.roa
File:                     34302e3138332e302e302f31382d3138203d3e203136353039.roa (raw, json)
Hash identifier:          s5i73gZt6cfwIeOtqUx6gy7sbm4Y9ZH/kH5jQ+Vu1/M=
Subject key identifier:   7F:6B:52:B1:28:B9:1D:2C:78:F0:1A:7E:70:B7:4E:FB:AD:AD:15:DC
Certificate issuer:       /CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
Certificate serial:       5A41E8BFC90A091D71C0557831FE88EA2DB95FC6
Authority key identifier: 3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e302e302f31382d3138203d3e203136353039.roa
Signing time:             Thu 03 Aug 2023 01:35:49 +0000
ROA not before:           Thu 03 Aug 2023 01:30:49 +0000
ROA not after:            Thu 01 Aug 2024 01:35:49 +0000
asID:                     16509
IP address blocks:        40.183.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:41:e8:bf:c9:0a:09:1d:71:c0:55:78:31:fe:88:ea:2d:b9:5f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
        Validity
            Not Before: Aug  3 01:30:49 2023 GMT
            Not After : Aug  1 01:35:49 2024 GMT
        Subject: CN=7F6B52B128B91D2C78F01A7E70B74EFBADAD15DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:c5:56:d4:6b:ab:dc:d6:d8:26:ea:e0:c3:
                    66:b0:1f:29:f7:cf:b7:19:c7:7f:f1:8b:e6:f6:6a:
                    49:08:fd:d4:9e:70:09:ed:5d:ff:1b:5d:11:02:38:
                    6c:5d:7d:ac:77:fb:2b:4e:1c:24:32:26:bc:80:a5:
                    d5:45:dd:9f:34:c0:7b:09:e0:e5:5b:3a:a0:a2:82:
                    bd:27:4f:a2:3c:d3:df:4b:43:9e:ce:66:a3:48:4e:
                    43:56:82:0d:2a:1a:88:ff:00:8b:45:62:7f:22:59:
                    c7:3a:73:a9:f2:ef:91:11:89:b9:5d:c2:93:5d:1b:
                    85:db:f9:e0:af:20:10:05:7d:95:ad:c1:d8:1c:a8:
                    28:9b:f4:ff:fb:11:da:bf:b9:c7:fc:64:52:1e:da:
                    28:64:cb:ad:5a:41:a2:ab:50:84:cf:23:f5:64:0d:
                    20:ba:6b:c6:d6:9b:26:61:55:0a:c7:49:f5:07:cd:
                    1a:f7:0b:f6:2b:30:c2:d0:b5:70:e2:c7:24:fa:7e:
                    1d:8f:ae:d2:0e:8d:60:c2:94:60:f8:a6:79:0e:c5:
                    bf:7c:99:47:fc:a1:b7:f2:a5:ba:40:2b:e9:97:23:
                    4a:21:b0:14:af:8d:01:6d:3d:6b:c5:7b:76:01:a2:
                    f4:d4:57:0a:3f:ac:4c:6e:76:45:66:47:7d:1d:d2:
                    f4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:6B:52:B1:28:B9:1D:2C:78:F0:1A:7E:70:B7:4E:FB:AD:AD:15:DC
            X509v3 Authority Key Identifier:
                keyid:3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/3BE33FD1B3E5FCDFADDA581BE834F9455AFF155F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e302e302f31382d3138203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0e:47:97:28:b2:24:87:9a:cc:43:bd:e6:43:26:ad:5c:1a:f1:
         e9:27:51:88:2f:e2:e4:18:12:3b:df:ca:b5:2a:8c:08:e5:27:
         dc:35:ab:af:0b:21:3d:84:6e:d1:ec:c5:f3:76:a5:2a:6e:5d:
         a7:25:a0:dc:e7:5e:b6:b2:98:7f:e6:8c:14:46:fa:e4:45:05:
         7e:56:ad:ab:5d:5d:e7:71:62:7d:21:30:24:50:86:d7:fb:a3:
         65:dd:4a:d3:ef:2c:b8:da:d5:a3:2c:e7:5f:a2:db:01:16:f1:
         b2:be:f4:b4:99:b3:94:8b:12:c3:39:6b:7d:05:c7:0c:b2:37:
         12:a8:87:1b:b5:fc:d9:7d:27:16:84:dd:cb:36:b1:45:e8:7d:
         9c:7b:60:b7:62:86:6f:9b:97:c8:79:95:c8:fe:a8:66:8e:34:
         cf:09:28:95:ac:99:1a:e3:da:81:4b:c5:04:7f:21:26:2f:fe:
         88:29:9c:f9:07:94:a5:b3:34:59:ff:a8:84:cc:29:90:dd:ce:
         93:d8:b4:6f:ff:ac:fe:ca:01:df:60:25:73:18:04:83:40:67:
         79:41:44:35:94:f8:60:23:e2:48:e1:21:98:8a:10:90:63:a7:
         bb:a3:9e:5e:56:fc:50:e0:80:18:89:2f:c7:43:9b:f3:8b:2e:
         64:b3:f3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:03 2024 by rpki-client on console-fra.rpki-client.org