Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e302e302f31382d3234203d3e20383334.roa
File:                     34302e3138332e302e302f31382d3234203d3e20383334.roa (raw, json)
Hash identifier:          RmiM+vyyIc+qg4rbN4ULtUjjO9/TDx9Yr+z58XWuZ1Y=
Subject key identifier:   4F:12:EF:70:DA:A0:FB:78:25:59:FA:61:3C:E4:FE:99:18:A7:55:A8
Certificate issuer:       /CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
Certificate serial:       6405EC4753AD30792E7FF8D445F7610C307F3204
Authority key identifier: 3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e302e302f31382d3234203d3e20383334.roa
Signing time:             Fri 28 Apr 2023 15:00:02 +0000
ROA not before:           Fri 28 Apr 2023 14:55:02 +0000
ROA not after:            Fri 26 Apr 2024 15:00:02 +0000
asID:                     834
IP address blocks:        40.183.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:05:ec:47:53:ad:30:79:2e:7f:f8:d4:45:f7:61:0c:30:7f:32:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
        Validity
            Not Before: Apr 28 14:55:02 2023 GMT
            Not After : Apr 26 15:00:02 2024 GMT
        Subject: CN=4F12EF70DAA0FB782559FA613CE4FE9918A755A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:67:a8:ac:ed:ef:e7:f4:6f:0a:3e:00:82:4d:
                    94:c0:c7:f2:0a:19:d3:fb:08:67:e3:ce:c6:45:16:
                    cf:44:2d:ea:b9:c6:a8:14:19:1d:f4:93:72:85:88:
                    4f:df:ab:18:61:a9:db:42:93:18:be:29:59:e9:d1:
                    cb:7d:5b:0b:be:b0:13:c1:2c:fe:95:64:f9:e8:19:
                    d1:53:e1:b4:b6:d7:a3:09:5b:35:ce:5b:d4:15:55:
                    6a:e0:e3:47:8a:86:27:9b:16:44:e4:d6:a2:99:96:
                    f3:fc:41:63:71:a8:1b:4c:76:3e:bd:35:45:2f:4f:
                    52:9a:b8:2a:50:5f:4c:12:6e:06:12:8a:60:45:fa:
                    a0:39:d0:e6:e2:fe:8a:70:fd:e1:81:e4:06:18:8d:
                    a4:ea:6c:bc:04:30:3d:87:16:db:35:03:f8:50:0d:
                    31:23:96:73:ca:6e:be:63:34:78:9c:59:9b:ed:01:
                    74:22:f1:51:12:50:34:82:84:da:9d:81:83:b7:01:
                    40:21:9a:13:aa:de:fb:bc:3a:b2:fe:8a:b5:f4:74:
                    b7:34:0f:fb:18:32:0c:49:21:4c:c8:6d:38:3c:c8:
                    ae:b9:3f:f7:27:a8:61:32:e9:a3:34:28:14:0e:07:
                    5a:ae:a4:e3:3e:be:9c:70:b4:e9:e8:82:e4:dc:7a:
                    59:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:12:EF:70:DA:A0:FB:78:25:59:FA:61:3C:E4:FE:99:18:A7:55:A8
            X509v3 Authority Key Identifier:
                keyid:3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/3BE33FD1B3E5FCDFADDA581BE834F9455AFF155F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e302e302f31382d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         45:3a:53:74:61:b4:2d:5a:41:1b:ec:6c:60:ce:ea:c5:03:d2:
         14:6d:83:1d:1a:0f:fd:21:c3:70:73:0b:de:77:89:63:ff:a8:
         35:52:1d:76:4c:9f:5c:0b:26:f7:6b:e4:a3:aa:93:c4:b8:91:
         99:a3:ba:bf:f7:b0:66:aa:88:2b:9b:2f:a2:b5:31:1e:34:ad:
         95:1c:af:e2:d0:56:49:a7:b1:03:9f:8d:93:28:e5:49:04:3d:
         11:df:52:2b:0c:69:05:b8:08:e5:ac:68:be:a0:15:42:bb:24:
         14:86:d3:7b:1a:70:cc:83:0d:5d:c7:2d:51:34:4a:58:8a:4d:
         e6:7c:c1:09:91:29:35:67:3e:7e:35:26:fa:88:82:28:c0:88:
         a6:4f:bc:04:e6:2e:78:44:ab:6f:fb:bb:07:d6:3f:8c:b7:12:
         a6:85:f9:fd:37:10:87:70:1d:82:5f:b7:19:96:d5:d1:bc:9e:
         83:0d:d2:23:3e:b2:48:16:b7:13:5d:61:e0:81:25:7d:f5:ad:
         b1:45:5a:60:91:84:92:9e:76:e8:06:6a:0e:ad:e0:47:67:39:
         08:31:b7:ea:f0:df:f6:1f:cb:e1:fb:68:6f:7d:c9:9d:d3:d7:
         bd:cf:bc:ec:d9:91:7f:18:88:08:3b:48:9a:54:ac:26:78:a1:
         12:f6:be:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:03 2024 by rpki-client on console-fra.rpki-client.org