Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e302e302f31382d3234203d3e203136353039.roa
File:                     34302e3138332e302e302f31382d3234203d3e203136353039.roa (raw, json)
Hash identifier:          tR0lZIpup8egY8/zsxhEe6RoM0DbUKzfRMjUcCULFg4=
Subject key identifier:   E1:31:0C:49:4F:DC:E9:F1:F8:53:66:7F:68:5C:36:57:BA:A8:BA:5C
Certificate issuer:       /CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
Certificate serial:       0224C0AE39D3BC5BDF2D4D1256086F72F595AEAD
Authority key identifier: 3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e302e302f31382d3234203d3e203136353039.roa
Signing time:             Fri 04 Aug 2023 18:28:44 +0000
ROA not before:           Fri 04 Aug 2023 18:23:44 +0000
ROA not after:            Fri 02 Aug 2024 18:28:44 +0000
asID:                     16509
IP address blocks:        40.183.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:24:c0:ae:39:d3:bc:5b:df:2d:4d:12:56:08:6f:72:f5:95:ae:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
        Validity
            Not Before: Aug  4 18:23:44 2023 GMT
            Not After : Aug  2 18:28:44 2024 GMT
        Subject: CN=E1310C494FDCE9F1F853667F685C3657BAA8BA5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f8:b1:09:ac:9a:02:c8:56:1b:39:f8:f8:4e:
                    43:93:fc:ba:ed:3c:ae:28:27:35:b1:0b:4c:b0:04:
                    7c:b7:77:47:be:e1:5d:b7:6a:65:f5:3b:6b:fc:26:
                    9d:dc:14:c4:10:ed:b1:cc:ad:53:6f:bd:ca:a9:d4:
                    de:9d:b8:d2:18:47:68:e3:86:a2:fd:5e:86:f4:f3:
                    77:30:08:48:8d:00:d6:7b:95:69:33:ed:12:da:7e:
                    16:ef:78:e7:7b:3c:89:75:31:e5:82:6f:95:d8:62:
                    3c:74:8c:8e:3a:e0:be:4a:b0:ad:d8:4d:39:de:d2:
                    a9:bb:ea:fe:84:04:7b:aa:0f:cd:d5:9f:4b:c6:e8:
                    20:92:a0:ea:65:03:ea:4d:3b:27:6e:e0:0e:d2:fe:
                    b1:c8:5a:7e:d2:89:77:76:64:13:9a:47:dd:ca:d7:
                    40:3b:0a:2c:57:f5:ff:21:56:c9:a2:88:38:ef:a9:
                    74:89:d4:99:64:4f:55:f7:d2:04:12:bd:0c:4c:15:
                    88:2e:01:65:cc:f4:be:fe:74:3f:8b:9a:b5:8a:78:
                    3e:07:67:b7:60:28:b4:02:af:d9:8d:5d:88:b6:98:
                    77:1a:8a:45:b3:12:3a:d5:1b:d0:b3:44:e6:d5:18:
                    f0:ad:0b:c8:82:1d:28:c6:18:2f:72:96:2d:32:cf:
                    de:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:31:0C:49:4F:DC:E9:F1:F8:53:66:7F:68:5C:36:57:BA:A8:BA:5C
            X509v3 Authority Key Identifier:
                keyid:3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/3BE33FD1B3E5FCDFADDA581BE834F9455AFF155F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e302e302f31382d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         71:3c:2d:0d:cf:c3:4d:ea:60:f6:3a:60:07:66:be:ef:7c:6b:
         d0:b2:b9:56:24:ea:66:00:33:b9:e9:e7:13:20:40:4c:99:d6:
         8c:c5:06:9b:30:88:de:3b:34:cb:f6:09:4a:a1:d4:35:05:2d:
         83:58:92:ab:f8:d6:ea:8d:74:59:b7:10:dc:a3:db:66:7f:b3:
         38:fe:bb:96:ec:47:b2:ed:e5:e2:9a:77:a2:6d:99:87:a1:ef:
         4b:70:0f:97:42:de:10:ed:7c:4d:1a:ee:f4:dd:f0:8c:60:b5:
         af:a0:56:84:04:f0:59:73:53:1b:24:35:5d:69:3d:61:4a:69:
         fd:32:a1:30:61:05:ea:4d:45:0b:d2:15:d4:ed:2e:6e:03:7a:
         5d:5f:eb:c9:62:b0:77:dd:7f:58:66:1b:39:70:cb:fd:eb:58:
         2e:8f:e0:46:ce:f0:c8:11:a4:72:94:5a:82:96:c9:ba:78:6a:
         24:dd:0a:c5:aa:24:a2:48:2b:73:e7:ed:6c:e3:0c:e7:a5:a2:
         cb:9d:56:3c:91:33:7e:69:dd:bf:06:9a:9f:4b:15:92:81:99:
         c2:fc:06:da:07:51:f9:1f:93:76:c1:87:11:7b:75:84:ce:4c:
         4b:a6:b3:7c:a9:c0:22:f8:9f:7f:07:be:c8:28:56:5a:d7:13:
         20:bd:af:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:32 2024 by rpki-client on console-ams.rpki-client.org