Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/34302e3138332e3139322e302f31392d3234203d3e203239383032.roa
File:                     34302e3138332e3139322e302f31392d3234203d3e203239383032.roa (raw, json)
Hash identifier:          ty8ZFh9Xrqkiapj1RY/YJOjBZwvrotmJBT2FHsuf57c=
Subject key identifier:   1C:A8:A8:E5:00:A5:43:D4:78:A5:67:77:00:BE:DC:83:DB:E1:1E:76
Certificate issuer:       /CN=8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41
Certificate serial:       63FA4A6AA84A65DFCFE3ABF7BCD63D5B7A490BFE
Authority key identifier: 48:04:F8:14:D0:78:11:7A:38:1B:CE:FD:E5:1B:28:F0:53:59:52:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/34302e3138332e3139322e302f31392d3234203d3e203239383032.roa
Signing time:             Wed 16 Aug 2023 07:20:51 +0000
ROA not before:           Wed 16 Aug 2023 07:15:51 +0000
ROA not after:            Wed 14 Aug 2024 07:20:51 +0000
asID:                     29802
IP address blocks:        40.183.192.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fa:4a:6a:a8:4a:65:df:cf:e3:ab:f7:bc:d6:3d:5b:7a:49:0b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41
        Validity
            Not Before: Aug 16 07:15:51 2023 GMT
            Not After : Aug 14 07:20:51 2024 GMT
        Subject: CN=1CA8A8E500A543D478A5677700BEDC83DBE11E76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:88:c9:db:7a:6b:19:88:21:f5:13:d1:7b:
                    82:e4:4d:3d:e6:db:77:83:73:30:6d:13:71:ac:c2:
                    3b:29:e7:65:04:9a:f9:ac:01:64:2a:fd:64:84:45:
                    a6:dd:d2:07:4d:af:2c:3c:78:cd:3b:ef:21:69:5b:
                    6c:d9:27:f6:0d:0e:53:c5:2f:e4:65:f5:4b:e8:67:
                    11:37:e9:58:7c:36:3e:33:ba:34:91:23:1e:98:e4:
                    3b:1e:90:13:cc:e4:f0:ab:cf:ca:dc:f2:e1:fe:e8:
                    02:c3:d9:9d:09:ec:29:e4:0a:72:34:67:1d:1f:64:
                    64:d4:c1:ef:67:88:06:75:ff:7c:a7:f1:60:c7:ce:
                    8c:21:1d:a0:e0:cd:2d:13:a4:51:6a:fa:17:3d:a1:
                    5f:15:4e:b8:ac:e1:f9:f4:72:6d:94:a5:cf:e2:00:
                    58:fb:b8:29:fd:64:ce:83:c3:10:6a:34:f6:bf:66:
                    1f:c5:b2:9c:d2:b3:66:45:fa:db:18:7d:5c:de:5b:
                    ba:d1:5d:47:35:9a:66:d1:c6:30:9b:77:a3:4f:85:
                    b5:34:3f:77:cb:7f:26:7b:4d:71:71:d5:82:0b:e1:
                    21:3d:98:82:82:e7:cb:46:b6:c6:39:28:d0:01:62:
                    22:7e:4e:06:3e:d8:86:8a:0f:91:d8:9c:39:fc:58:
                    63:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:A8:A8:E5:00:A5:43:D4:78:A5:67:77:00:BE:DC:83:DB:E1:1E:76
            X509v3 Authority Key Identifier:
                keyid:48:04:F8:14:D0:78:11:7A:38:1B:CE:FD:E5:1B:28:F0:53:59:52:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/4804F814D078117A381BCEFDE51B28F053595252.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/34302e3138332e3139322e302f31392d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0c:0d:3f:a4:3c:e2:1f:58:a8:38:58:bb:08:bd:b0:6b:97:08:
         f2:fa:53:e2:95:31:9b:ed:33:dc:00:30:c1:06:0b:10:4e:19:
         44:4c:11:b5:6c:b7:61:29:c0:11:ae:ee:71:91:df:79:db:c7:
         37:70:f1:23:0f:08:54:08:86:b0:0f:a1:a2:f4:19:12:e6:f9:
         e0:f7:b5:b6:1d:74:8c:60:96:c9:be:72:f2:7e:60:5d:0b:d9:
         e3:71:d6:ae:b3:d0:8a:de:45:f5:88:62:a3:ae:6b:eb:75:af:
         34:d3:3e:cf:85:72:be:f7:a5:c5:f1:a9:da:6f:d8:d2:91:36:
         cd:f2:96:2a:3b:a6:44:fd:4c:4c:dc:cc:4f:1d:2a:16:46:4b:
         ab:9b:c5:e2:1c:31:6f:d5:03:a5:b8:96:7f:d7:e9:c7:d3:45:
         53:1f:ab:d4:ab:89:5c:d9:37:49:dc:d1:2a:c4:90:3f:1d:0f:
         f0:8a:f3:a8:fa:2f:b6:50:55:92:49:00:42:01:d4:33:a8:aa:
         c3:b0:02:4a:14:57:b1:58:bb:d8:15:37:22:14:b5:ae:91:af:
         96:d2:df:90:cd:49:10:56:0b:ab:ff:a1:19:bf:9f:0c:57:22:
         36:ae:20:00:fc:f8:a4:bf:5e:fa:67:1d:86:9a:98:1b:eb:26:
         1c:9c:9c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:03 2024 by rpki-client on console-fra.rpki-client.org