Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e3132382e302f31392d3234203d3e2031323339.roa
File:                     34302e3138332e3132382e302f31392d3234203d3e2031323339.roa (raw, json)
Hash identifier:          pIzYQovhy09qzP0Ku8dp4Y4LhVvCUuxnl8gO6zsYaXw=
Subject key identifier:   4E:C1:14:3F:B9:39:DC:25:82:80:BE:9A:06:8D:17:DF:9D:56:F5:14
Certificate issuer:       /CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
Certificate serial:       3B42480119DB117477C2B39AE1E9632D268AB817
Authority key identifier: 3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e3132382e302f31392d3234203d3e2031323339.roa
Signing time:             Wed 29 Mar 2023 14:02:22 +0000
ROA not before:           Wed 29 Mar 2023 13:57:22 +0000
ROA not after:            Wed 27 Mar 2024 14:02:22 +0000
asID:                     1239
IP address blocks:        40.183.128.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:42:48:01:19:db:11:74:77:c2:b3:9a:e1:e9:63:2d:26:8a:b8:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
        Validity
            Not Before: Mar 29 13:57:22 2023 GMT
            Not After : Mar 27 14:02:22 2024 GMT
        Subject: CN=4EC1143FB939DC258280BE9A068D17DF9D56F514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:33:3f:33:ce:6f:ba:4e:3f:92:e9:aa:0a:fc:
                    77:e5:d8:07:6a:ef:1d:68:e2:41:bb:3c:6a:c6:1d:
                    27:bd:54:2e:87:50:e9:05:9f:64:da:7c:ac:52:cf:
                    65:69:ee:6e:25:e2:7b:da:f7:92:15:a8:60:4e:a9:
                    f7:fc:c6:82:b3:4c:90:33:7c:0f:5a:09:a2:cc:ad:
                    6b:23:ab:f7:ac:50:3c:7d:9a:a4:71:02:20:11:65:
                    af:e2:cf:9d:4a:3e:70:94:04:e3:6c:2b:ea:79:43:
                    ed:55:68:8d:c4:1c:3d:98:6d:79:2b:6b:11:73:b3:
                    eb:20:d8:41:76:8b:b0:66:73:93:34:d3:ea:1f:4b:
                    64:c1:5a:a7:28:48:3b:22:a2:0b:0f:fc:80:ea:94:
                    f8:86:22:23:cf:d6:6e:56:93:d5:ca:e9:28:51:09:
                    c3:00:b4:8c:c8:7b:6b:90:27:9f:43:1d:1c:88:58:
                    20:95:a1:83:b9:54:68:c1:da:d8:34:2e:d2:2b:c0:
                    82:17:59:56:d9:fa:66:e6:34:b4:e7:63:21:a4:20:
                    b8:4d:44:10:af:0a:b0:5c:eb:18:e3:b2:22:89:f9:
                    22:9e:74:01:23:03:03:5f:69:1e:73:ea:25:13:25:
                    ee:2b:a9:15:bd:37:bc:f5:c9:ca:7f:e7:ae:51:29:
                    c7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C1:14:3F:B9:39:DC:25:82:80:BE:9A:06:8D:17:DF:9D:56:F5:14
            X509v3 Authority Key Identifier:
                keyid:3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/3BE33FD1B3E5FCDFADDA581BE834F9455AFF155F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e3132382e302f31392d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5c:1c:42:5b:5a:38:bc:68:4e:26:2e:d5:52:d7:e2:8d:14:ea:
         fd:f0:d1:aa:6d:9b:9e:a2:88:d0:89:9a:73:b9:5f:99:b5:fb:
         0b:2a:1a:e6:d0:0b:25:aa:db:61:9d:79:87:ce:2b:00:2a:b0:
         87:ae:e5:70:18:49:ca:f0:a5:4a:3c:7a:f6:50:4a:59:11:a7:
         66:75:36:82:45:5a:f2:18:38:73:74:98:0a:a5:95:be:32:9b:
         c2:95:e9:00:62:9f:f0:02:a4:43:cf:6c:74:5a:c8:c2:56:6f:
         11:9c:db:05:0a:b1:4d:21:cd:fd:92:fb:77:2f:10:16:e8:9b:
         d0:d1:58:e0:b3:ec:1d:db:87:c9:4f:0a:b0:e6:4c:f0:b2:0c:
         04:59:dd:8b:a3:1f:72:de:e0:4e:f3:c7:be:61:37:f8:ea:4c:
         fe:6c:ba:bf:58:2c:31:32:59:e2:9e:67:8d:cc:3e:0b:e0:77:
         ea:07:1d:cb:ed:60:86:10:e0:09:8b:43:e3:82:30:b1:4f:81:
         31:f4:cb:f5:98:d4:1a:ef:84:c5:27:9c:98:a7:05:b9:e1:43:
         82:4a:f6:06:1a:74:fb:9a:4e:10:8d:a3:cd:e9:67:50:1b:8f:
         62:33:cc:c5:16:99:69:10:50:b1:9c:5a:50:bc:b1:6d:37:d6:
         59:7f:93:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:03 2024 by rpki-client on console-fra.rpki-client.org