Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e3232342e302f31392d3234203d3e203239383032.roa
File:                     34302e3138332e3232342e302f31392d3234203d3e203239383032.roa (raw, json)
Hash identifier:          n1hAraULY11CcE5xOlLyxdoB+Yb6iTpkzYwX4ziuFok=
Subject key identifier:   2A:F0:71:D4:FD:40:EF:95:2D:46:BF:1B:E6:77:A3:3A:FA:54:15:97
Certificate issuer:       /CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
Certificate serial:       3DACAAFEC217AA7E75DCBB2370A4EC81F21CD7BA
Authority key identifier: 3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e3232342e302f31392d3234203d3e203239383032.roa
Signing time:             Mon 06 Mar 2023 12:09:20 +0000
ROA not before:           Mon 06 Mar 2023 12:04:20 +0000
ROA not after:            Mon 04 Mar 2024 12:09:20 +0000
asID:                     29802
IP address blocks:        40.183.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:ac:aa:fe:c2:17:aa:7e:75:dc:bb:23:70:a4:ec:81:f2:1c:d7:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5
        Validity
            Not Before: Mar  6 12:04:20 2023 GMT
            Not After : Mar  4 12:09:20 2024 GMT
        Subject: CN=2AF071D4FD40EF952D46BF1BE677A33AFA541597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a7:18:09:3d:0c:51:ad:63:fd:22:bd:fe:8a:
                    8e:d0:43:09:50:99:5b:86:d3:19:34:c1:a1:91:8b:
                    20:ee:25:06:d2:d1:9d:26:f3:21:9c:e0:14:29:b5:
                    9f:15:b1:05:e6:d8:a4:3e:8c:09:f1:ec:a4:3e:1b:
                    75:08:5e:ce:01:ed:a5:74:94:31:b7:27:0d:af:b4:
                    23:a2:e4:63:cd:63:19:e0:78:1e:23:29:99:8f:e1:
                    90:60:4e:c3:fa:d6:99:79:93:9e:e8:48:06:9b:dc:
                    05:29:b9:96:27:e3:32:ab:5a:fa:7c:bc:fd:fe:32:
                    a4:7f:69:27:af:79:93:d8:93:42:e2:0c:74:a8:84:
                    1d:04:ae:03:38:8b:b4:60:4c:f2:69:a5:e8:33:02:
                    9c:58:0d:3c:ab:f9:fd:46:4b:8e:ac:4f:63:e1:df:
                    d7:15:77:b6:ad:d1:50:ff:b5:52:96:c7:28:d0:63:
                    bd:41:5b:ca:c7:6e:bf:19:34:eb:06:c8:44:f5:83:
                    76:ea:01:27:77:95:42:c0:ff:a6:84:70:f2:c7:e3:
                    e6:b9:59:ee:9e:a4:1b:c5:09:f6:3e:8e:45:7f:d5:
                    72:81:92:e5:8d:93:dc:47:6f:06:75:f0:11:59:cd:
                    b3:88:f6:13:6a:ef:06:af:1e:35:79:be:88:ec:28:
                    0b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F0:71:D4:FD:40:EF:95:2D:46:BF:1B:E6:77:A3:3A:FA:54:15:97
            X509v3 Authority Key Identifier:
                keyid:3B:E3:3F:D1:B3:E5:FC:DF:AD:DA:58:1B:E8:34:F9:45:5A:FF:15:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/3BE33FD1B3E5FCDFADDA581BE834F9455AFF155F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b938f317b0f7db000ced2b6a0fb6ebf6af73546b0a5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/1/34302e3138332e3232342e302f31392d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         26:d5:2b:7d:de:50:61:11:8f:26:d3:2e:1a:62:02:86:23:24:
         b8:68:19:e6:cb:0b:cb:73:d9:bf:81:a6:b7:fa:13:a7:66:85:
         d5:22:eb:af:66:3d:72:0c:be:a0:d9:f8:5d:e9:fa:11:91:e5:
         52:b4:44:c0:ff:de:ce:aa:8f:99:f4:9d:ea:d1:f7:0c:d5:6e:
         0b:0c:aa:ab:a7:79:4e:25:c9:13:2b:fc:e0:58:3f:94:6a:64:
         67:0b:40:88:e4:a3:5a:a3:09:31:02:a9:6f:d4:86:eb:c9:b8:
         43:17:3f:f9:73:13:24:56:89:76:16:9c:07:1c:dd:df:93:62:
         05:a9:10:2a:aa:c8:e3:b0:fb:8b:56:02:5d:39:46:e1:f2:8b:
         55:dd:b5:73:1f:94:e1:d9:87:6e:a4:16:44:eb:1e:d0:fa:b4:
         fd:c3:9d:41:d7:f8:95:c1:4d:5d:4b:7d:52:94:be:a6:7f:d6:
         2c:28:f8:78:2b:da:3f:f5:ad:1c:ea:c2:ca:9c:24:75:00:5e:
         68:74:7e:6d:19:ea:15:90:a5:b6:4e:85:94:cb:b0:7e:80:a8:
         1d:8f:fd:8d:bc:cc:57:36:d7:7b:51:e5:c5:8a:2b:dc:76:ad:
         ed:aa:37:4a:01:0d:a7:54:3e:a7:97:60:ba:36:95:cf:6c:5e:
         6d:ee:1d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:03 2024 by rpki-client on console-fra.rpki-client.org