Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3137322e39392e3233332e302f32342d3234203d3e203133383330.roa
File:                     3137322e39392e3233332e302f32342d3234203d3e203133383330.roa (raw, json)
Hash identifier:          zjGeNFzdmw0VbjTVBrrHJg6ybQt/Hew4TSdNQWf1sOw=
Subject key identifier:   86:6C:9D:54:2F:79:90:B4:87:C5:51:44:DF:1A:ED:11:8C:79:F8:7F
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       38AFAD989E21B1F1434AEEA30F3C696FB29E0CB2
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3137322e39392e3233332e302f32342d3234203d3e203133383330.roa
Signing time:             Fri 09 Dec 2022 16:06:57 +0000
ROA not before:           Fri 09 Dec 2022 16:01:57 +0000
ROA not after:            Fri 08 Dec 2023 16:06:57 +0000
asID:                     13830
IP address blocks:        172.99.233.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:af:ad:98:9e:21:b1:f1:43:4a:ee:a3:0f:3c:69:6f:b2:9e:0c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec  9 16:01:57 2022 GMT
            Not After : Dec  8 16:06:57 2023 GMT
        Subject: CN=866C9D542F7990B487C55144DF1AED118C79F87F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b1:83:37:62:b9:e5:d5:e9:d8:62:d4:b4:37:
                    0d:ca:f4:0a:f8:5d:0b:6d:44:40:73:17:ba:b5:ff:
                    f3:6a:0b:83:af:6e:21:0e:28:01:1b:b1:21:80:49:
                    88:f2:01:81:53:d8:2b:77:3b:55:be:e1:6d:ff:8e:
                    db:83:57:ff:be:1d:45:57:4a:47:25:04:4a:20:4b:
                    68:fd:26:d9:59:a3:f8:38:29:a4:7b:d4:f0:3f:bc:
                    91:0d:05:0d:c6:8c:fb:96:e8:4b:ea:bf:8d:c5:47:
                    66:88:4b:1a:28:23:26:67:77:02:ef:34:eb:a0:23:
                    2d:b2:6e:c8:e2:6d:10:81:72:c6:9a:e0:a1:61:65:
                    31:f2:02:86:0b:64:24:bf:aa:e0:b6:7b:d9:89:39:
                    cb:01:45:ce:db:43:38:90:a3:11:be:54:7b:c3:47:
                    c9:5e:a3:3a:31:3b:d1:d8:2f:97:67:7b:f1:80:35:
                    7a:17:25:b0:e7:28:aa:6d:13:91:18:62:51:fa:21:
                    55:fb:32:b1:5a:38:05:14:1c:3f:c0:45:12:4b:f1:
                    94:a3:01:9e:17:90:43:32:df:ab:13:42:3a:74:97:
                    be:37:2c:8c:7c:2a:5a:a4:a3:4b:41:e9:e5:f9:69:
                    df:15:3f:cc:63:52:f9:f9:b7:84:64:69:3a:84:4c:
                    d1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6C:9D:54:2F:79:90:B4:87:C5:51:44:DF:1A:ED:11:8C:79:F8:7F
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3137322e39392e3233332e302f32342d3234203d3e203133383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:aa:0b:d5:f1:98:82:50:f0:c6:60:c5:8b:61:fd:59:43:a7:
         c5:54:23:bb:4c:eb:d1:24:d5:27:0d:74:3b:4c:5a:d2:b6:5e:
         2c:98:64:aa:e9:95:37:6c:81:af:b1:26:65:43:4c:13:71:c6:
         33:d5:04:91:79:0a:a6:65:6e:54:f5:92:f5:17:cf:a1:f6:17:
         bf:ab:42:e6:0f:c0:1c:8a:87:09:71:d7:ec:b9:7a:54:fb:0a:
         e1:be:b9:c3:7d:29:e0:45:f7:6e:86:c0:c3:d6:e2:30:01:39:
         1f:1f:b5:31:17:c2:f3:98:a9:5c:40:18:55:e2:a1:b1:ba:36:
         81:7a:e8:ba:d6:f4:e2:00:47:cf:c5:e4:33:cf:88:3b:e1:7e:
         03:f7:99:f2:c9:56:45:d0:17:69:e4:4b:ce:06:5a:f9:d4:75:
         e2:36:66:8e:e5:95:68:72:01:2b:68:4d:5e:2f:63:1f:2a:2a:
         70:34:24:74:29:20:f3:88:6a:ed:92:50:48:15:83:08:6f:6f:
         0d:24:67:bb:fe:f1:21:2f:48:10:1b:c4:f9:f6:d2:08:32:c3:
         2f:a1:eb:04:60:09:c8:d0:9f:b8:38:e5:5a:11:96:79:0b:42:
         ab:28:0f:bc:e0:71:9b:83:9d:34:02:1d:ca:8d:e0:16:ac:ff:
         04:77:e5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:03 2024 by rpki-client on console-fra.rpki-client.org