Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e3139322e302f31392d3234203d3e203239383032.roa
File:                     34302e3138332e3139322e302f31392d3234203d3e203239383032.roa (raw, json)
Hash identifier:          bTSuosrJvvimD8JIUn7JuETLJNR1MSGTzc0TxJb/tCA=
Subject key identifier:   20:92:87:A4:0C:E3:50:CA:1F:55:38:D4:FC:BD:84:22:31:6D:13:62
Certificate issuer:       /CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
Certificate serial:       7452A5872EF0CD970E4EAAD8A7ADEDC333C589C6
Authority key identifier: 3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e3139322e302f31392d3234203d3e203239383032.roa
Signing time:             Mon 06 Mar 2023 12:09:19 +0000
ROA not before:           Mon 06 Mar 2023 12:04:19 +0000
ROA not after:            Mon 04 Mar 2024 12:09:19 +0000
asID:                     29802
IP address blocks:        40.183.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:52:a5:87:2e:f0:cd:97:0e:4e:aa:d8:a7:ad:ed:c3:33:c5:89:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
        Validity
            Not Before: Mar  6 12:04:19 2023 GMT
            Not After : Mar  4 12:09:19 2024 GMT
        Subject: CN=209287A40CE350CA1F5538D4FCBD8422316D1362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f4:31:9c:67:a2:3d:45:d5:86:ed:2c:4c:34:
                    d2:ae:0f:fc:86:ad:01:2f:ed:b9:6d:9c:b0:0f:65:
                    9c:6c:92:fd:38:0f:f3:20:b7:8c:52:88:0e:60:ce:
                    f5:1e:7b:c5:f9:fa:03:b8:13:d6:5f:73:6f:8f:de:
                    b7:f8:82:c4:f8:06:ca:41:8c:ed:fd:48:e8:f1:92:
                    ef:f2:0a:42:26:52:c4:11:70:86:03:80:34:19:7a:
                    a5:8e:17:c8:0d:33:68:bc:78:6f:28:cc:8c:cd:f9:
                    0e:8f:85:30:25:c1:13:33:f1:8d:a4:59:41:f7:1c:
                    a4:4c:32:82:bb:9e:4b:70:4b:e6:02:dd:ea:16:be:
                    59:7a:93:a2:20:65:ad:4f:a7:c1:e0:93:3c:db:2f:
                    86:21:b0:b7:3e:d9:80:61:55:19:21:06:f3:0f:d7:
                    d8:14:53:0e:9c:94:8a:f8:8d:f3:8f:28:ea:90:8b:
                    70:c3:ee:2f:10:60:98:82:8a:c8:36:9a:2a:1f:0f:
                    13:c3:bb:86:39:fe:1c:68:17:a8:63:fe:7b:1f:4e:
                    78:48:d9:a2:69:7f:94:92:cf:c8:7c:a0:d4:81:18:
                    71:cd:c5:c1:45:4a:cf:35:3e:90:9f:69:2d:9a:78:
                    28:ad:f2:ca:70:81:43:18:e3:cf:9e:26:9b:35:4a:
                    89:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:92:87:A4:0C:E3:50:CA:1F:55:38:D4:FC:BD:84:22:31:6D:13:62
            X509v3 Authority Key Identifier:
                keyid:3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/3BE33FD1B3E5FCDFADDA581BE834F9455AFF155F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e3139322e302f31392d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:5f:bc:21:39:a6:f9:dc:f0:b3:4d:19:68:7e:18:52:9d:29:
         4e:2e:4d:88:f8:57:5e:be:25:69:44:da:5f:a7:ac:d3:94:c8:
         98:d4:35:57:03:25:61:a4:7d:7f:79:94:2c:cd:20:b5:08:03:
         8e:97:94:28:10:07:a4:76:95:32:66:24:8a:d5:d9:2c:4f:f2:
         0b:81:3d:26:25:e5:ee:4e:39:07:4d:85:ef:41:aa:f3:02:6e:
         4f:16:1f:7b:cf:e6:9b:b0:74:de:21:9e:a4:95:73:c6:6a:a5:
         7a:b4:55:bd:ca:75:b0:ef:9b:31:eb:39:e3:2f:37:75:68:3d:
         02:c4:c7:6b:84:51:8f:cb:1a:5e:af:e6:e2:33:bd:30:b0:83:
         b3:98:93:46:f9:e1:5b:d1:86:96:a8:d5:ec:0b:54:6f:52:f4:
         b4:fe:6b:6e:21:b6:b5:20:66:4b:0f:1c:79:53:a2:3e:fb:37:
         ed:ea:a5:9a:9b:26:36:b7:36:59:fe:cd:28:e4:5d:66:57:fb:
         42:16:33:69:15:75:bd:f6:8f:9a:44:8f:7f:8f:4e:9f:c5:4b:
         70:0d:7a:4c:18:ad:16:b6:c3:52:d0:21:ec:b8:a5:1f:6b:97:
         5c:85:16:54:60:ed:a0:99:85:77:00:fb:05:a5:78:a9:f7:72:
         c4:a5:36:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:03 2024 by rpki-client on console-fra.rpki-client.org