Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/34302e3138332e3232342e302f31392d3234203d3e203239383032.roa
File:                     34302e3138332e3232342e302f31392d3234203d3e203239383032.roa (raw, json)
Hash identifier:          RPNEPkGLn7iIpc3nNJExt/xoocSwrPJG5qQrUw/24F8=
Subject key identifier:   AB:6A:A7:74:19:BC:8C:1C:BA:BA:89:D4:26:9A:A5:19:C1:A2:20:B0
Certificate issuer:       /CN=8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41
Certificate serial:       4ECBE6E703D5C20B827AE111AFF52306177E2671
Authority key identifier: 48:04:F8:14:D0:78:11:7A:38:1B:CE:FD:E5:1B:28:F0:53:59:52:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/34302e3138332e3232342e302f31392d3234203d3e203239383032.roa
Signing time:             Wed 16 Aug 2023 07:20:52 +0000
ROA not before:           Wed 16 Aug 2023 07:15:52 +0000
ROA not after:            Wed 14 Aug 2024 07:20:52 +0000
asID:                     29802
IP address blocks:        40.183.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:cb:e6:e7:03:d5:c2:0b:82:7a:e1:11:af:f5:23:06:17:7e:26:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41
        Validity
            Not Before: Aug 16 07:15:52 2023 GMT
            Not After : Aug 14 07:20:52 2024 GMT
        Subject: CN=AB6AA77419BC8C1CBABA89D4269AA519C1A220B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:18:30:bf:bf:48:2d:60:ec:03:88:77:99:86:
                    53:31:33:9a:af:6d:f7:39:15:de:77:6c:aa:b4:19:
                    2d:0b:39:ed:96:02:35:46:f5:18:3f:25:77:a0:fe:
                    65:1d:42:ae:25:36:ff:05:42:a4:68:7e:3e:3a:8d:
                    31:89:47:6e:de:e2:06:10:15:dd:d0:f6:66:93:ba:
                    e9:0d:b2:33:d9:1c:5c:5b:54:6e:8c:8b:6d:5b:71:
                    bc:2e:08:6f:b8:fa:e6:15:22:e8:4e:a4:5b:50:21:
                    e5:23:fa:7b:82:6d:b8:be:4d:51:13:25:b4:4e:82:
                    af:38:84:ee:04:73:46:79:e2:9d:65:2e:3e:8f:2b:
                    a7:d3:71:c0:22:27:b6:2d:90:2b:e4:d6:8e:f2:b2:
                    a4:6c:0a:d0:20:0a:a6:e0:27:08:7b:e1:96:8e:12:
                    01:45:27:d6:5b:64:4c:90:5c:65:22:6e:51:79:7c:
                    2b:92:13:cf:e5:4a:16:fe:aa:a6:7c:f9:94:b6:c3:
                    e1:b0:43:35:fd:07:d5:40:b6:7c:75:73:c2:9a:61:
                    b2:ea:46:03:4b:2a:b9:4e:2c:fa:39:75:aa:19:5a:
                    cf:80:5e:7b:a3:4e:9f:c6:9b:6e:b6:b4:78:ef:fc:
                    f8:b5:9a:ee:55:58:b4:4d:94:21:d9:c7:05:01:e1:
                    ad:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:6A:A7:74:19:BC:8C:1C:BA:BA:89:D4:26:9A:A5:19:C1:A2:20:B0
            X509v3 Authority Key Identifier:
                keyid:48:04:F8:14:D0:78:11:7A:38:1B:CE:FD:E5:1B:28:F0:53:59:52:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/4804F814D078117A381BCEFDE51B28F053595252.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93c9d10fc984641da9e50855938f5dfbc97d3e6a41.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/3/34302e3138332e3232342e302f31392d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:59:79:c5:98:54:48:f8:ed:f8:a3:89:aa:86:ee:39:e6:e7:
         17:d7:38:81:6a:99:47:a3:de:49:f3:57:b9:fb:56:00:ee:60:
         84:66:69:7d:84:b8:9f:22:9e:d5:8f:45:10:eb:ac:0e:dc:ae:
         89:d0:fe:ed:e6:79:bb:a9:b6:86:4f:23:5e:31:d1:3a:83:58:
         c9:f2:a0:00:d2:b6:87:66:02:a6:8e:43:97:6a:b2:eb:d2:e2:
         98:79:20:34:f4:af:7d:0e:a0:9d:1c:7e:30:c8:a9:70:56:ec:
         2b:c9:a7:70:ce:d3:05:94:2a:b6:f3:00:49:df:ba:1c:02:d8:
         5e:3e:36:02:4f:d4:33:02:db:cc:cd:cb:2e:7a:5c:40:db:be:
         25:12:ff:5e:24:a9:5a:42:54:17:4b:cc:29:9b:1b:3b:4a:af:
         79:21:87:8c:87:63:da:45:52:9c:53:23:d8:01:b0:cf:1d:1d:
         14:fb:25:c3:3c:b9:da:2c:76:ed:2c:fa:d4:94:a4:35:40:74:
         98:5c:72:08:5e:29:1a:2e:1e:48:8f:75:d1:b3:99:af:a5:20:
         09:95:8e:ff:2e:f8:26:92:4e:db:f6:20:94:2a:75:8a:6a:cf:
         df:46:bf:a0:b0:7c:4b:8f:04:6f:48:9a:fe:45:a1:c0:f3:f1:
         88:f8:f7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:03 2024 by rpki-client on console-fra.rpki-client.org