Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e302e302f31382d3234203d3e203134363138.roa
File:                     34302e3138332e302e302f31382d3234203d3e203134363138.roa (raw, json)
Hash identifier:          Pf5Vsl29I6D7ZbLPzNjAJKf03w/cRxPYaHZlfbvLBYI=
Subject key identifier:   87:56:3A:71:DB:34:D8:CF:B1:25:A5:D9:84:37:55:98:9C:55:B8:78
Certificate issuer:       /CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
Certificate serial:       41FA127247F95F185B5F562C8E4C565444AA2F72
Authority key identifier: 3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e302e302f31382d3234203d3e203134363138.roa
Signing time:             Fri 04 Aug 2023 18:28:17 +0000
ROA not before:           Fri 04 Aug 2023 18:23:17 +0000
ROA not after:            Fri 02 Aug 2024 18:28:17 +0000
asID:                     14618
IP address blocks:        40.183.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:fa:12:72:47:f9:5f:18:5b:5f:56:2c:8e:4c:56:54:44:aa:2f:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
        Validity
            Not Before: Aug  4 18:23:17 2023 GMT
            Not After : Aug  2 18:28:17 2024 GMT
        Subject: CN=87563A71DB34D8CFB125A5D9843755989C55B878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:27:89:7f:87:3d:cf:ba:f4:ed:ad:1d:84:c8:
                    72:88:40:55:14:c8:0c:91:0b:9b:4a:a7:21:99:a8:
                    60:b1:c7:27:8a:c4:9d:38:a1:58:c6:56:94:06:38:
                    53:37:e3:c8:2e:e6:a7:96:1a:0e:63:8b:b1:36:99:
                    01:c8:e9:a9:ad:4b:e3:1b:57:11:a2:b7:df:e8:1b:
                    07:95:aa:22:f5:c6:99:1a:fe:76:0f:94:d9:ed:67:
                    f0:c1:d1:7b:18:22:30:62:e2:33:5a:30:13:2b:de:
                    bb:4e:35:da:14:a3:f7:a3:ee:96:f6:35:05:67:33:
                    5f:c3:f6:bc:dd:cf:62:68:3f:9e:f3:ae:b2:22:5c:
                    b2:dc:7e:4f:75:81:c2:2f:d7:99:ab:fe:3c:f3:6c:
                    94:0e:b8:6a:08:5b:e0:22:4d:20:65:3b:9d:42:4d:
                    67:c7:36:bb:af:cf:19:3d:73:4b:d9:8e:30:1a:24:
                    ea:73:32:87:23:c8:87:91:b9:89:5b:49:62:97:f0:
                    0d:c7:ac:50:cf:16:89:6f:da:0c:77:50:a6:23:ed:
                    2f:3b:fe:87:a3:4e:6b:c5:8f:7e:cc:c8:da:28:b4:
                    0e:86:67:ed:94:77:3e:51:40:59:19:f0:03:d5:e3:
                    94:f5:e8:43:cd:b6:25:5b:9d:76:b3:48:4b:9e:b3:
                    60:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:56:3A:71:DB:34:D8:CF:B1:25:A5:D9:84:37:55:98:9C:55:B8:78
            X509v3 Authority Key Identifier:
                keyid:3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/3BE33FD1B3E5FCDFADDA581BE834F9455AFF155F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e302e302f31382d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8d:0e:33:29:2a:21:0e:ff:ca:28:de:d8:04:b7:9f:85:51:88:
         13:d4:e3:5c:c8:de:71:e3:8d:a7:8a:ec:60:c6:03:db:c6:fc:
         5d:34:0d:a7:84:2a:ce:fa:85:50:d7:64:87:cf:b0:b6:87:1a:
         97:09:f8:5f:f9:e1:e5:a6:03:ee:59:cb:52:df:49:f2:38:f0:
         aa:0e:75:cb:89:61:b4:7e:81:1a:94:01:1a:8f:b0:d9:b0:79:
         d4:30:66:69:98:d9:14:44:b2:9b:92:ce:c6:61:ba:d2:4d:92:
         98:4d:c4:bd:da:71:a9:05:d6:5e:a4:48:dc:c9:ed:6c:1e:cc:
         f4:ad:95:77:9f:33:e7:c4:6e:0e:72:31:43:f0:57:a1:67:54:
         4b:29:00:ae:18:72:c5:02:37:79:d1:b0:93:f3:f3:67:78:fa:
         8b:a8:a1:b2:e1:d2:90:45:3e:6f:13:3e:08:a2:09:ed:04:de:
         70:02:30:5f:c6:8f:55:82:61:be:cd:49:aa:8e:d9:ff:b7:2d:
         44:89:01:f7:c3:fa:02:86:fc:5c:53:42:a2:38:f5:2d:03:df:
         16:56:e1:90:24:22:be:80:9b:03:5a:f8:12:08:07:f9:23:52:
         6b:c7:45:fe:ae:6b:a3:d8:97:0b:a0:21:89:4a:53:eb:d6:b2:
         3b:03:f8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:03 2024 by rpki-client on console-fra.rpki-client.org