Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3230342e31302e3139342e302f32342d3234203d3e20323036323136.roa
File:                     3230342e31302e3139342e302f32342d3234203d3e20323036323136.roa (raw, json)
Hash identifier:          V9lt7IaeT3BM4MApKtsEYTH8iT2rTzmI4oZQKOFGuPg=
Subject key identifier:   CA:40:E6:A2:88:35:C1:4E:3B:0A:FF:10:A8:67:95:97:98:A7:1C:32
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       6B05129FA20557F06BE48C12C6FA7093F1327BAE
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3230342e31302e3139342e302f32342d3234203d3e20323036323136.roa
Signing time:             Fri 09 Dec 2022 16:07:47 +0000
ROA not before:           Fri 09 Dec 2022 16:02:47 +0000
ROA not after:            Fri 08 Dec 2023 16:07:47 +0000
asID:                     206216
IP address blocks:        204.10.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:05:12:9f:a2:05:57:f0:6b:e4:8c:12:c6:fa:70:93:f1:32:7b:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec  9 16:02:47 2022 GMT
            Not After : Dec  8 16:07:47 2023 GMT
        Subject: CN=CA40E6A28835C14E3B0AFF10A867959798A71C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:1d:6d:c0:8a:2c:7f:02:76:80:ee:b2:23:fc:
                    38:02:5c:36:21:96:a5:f3:03:5c:8c:30:84:fd:ea:
                    75:e3:92:56:d8:90:73:3a:91:de:d1:19:a2:9d:98:
                    72:c7:b9:0b:11:87:9f:7b:da:b0:33:f9:7e:87:46:
                    1f:83:79:e4:95:4a:3f:43:8c:f8:fa:a2:5d:cd:33:
                    f7:15:b4:8c:ae:c8:7b:e3:49:5f:90:72:35:02:b9:
                    1b:68:cb:34:13:ba:34:21:9b:a7:fa:37:01:6c:2a:
                    7d:fd:e7:90:3e:66:96:3a:74:38:e8:bc:23:fb:a8:
                    bf:cc:ad:53:46:3b:6d:aa:3e:53:2f:e0:1a:58:c1:
                    e1:76:12:5a:2a:d9:a9:69:a1:39:12:09:25:0d:15:
                    b6:a1:34:b3:81:af:a1:ae:ab:77:08:42:16:3a:ee:
                    e9:94:5a:89:26:33:67:81:00:5b:2c:a4:b5:73:c4:
                    c4:14:e0:a8:47:d8:d6:8a:46:ed:a8:02:f9:33:d9:
                    3b:7c:1a:49:00:b5:cc:d9:09:10:4c:d0:3d:23:fd:
                    7c:bf:04:d1:02:99:81:95:bb:93:fd:ec:98:4f:0c:
                    af:64:1b:71:87:05:31:06:a0:e2:ff:f2:41:b7:ec:
                    6a:ea:9d:83:9b:1e:99:7e:96:af:8f:c1:e4:e4:12:
                    cb:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:40:E6:A2:88:35:C1:4E:3B:0A:FF:10:A8:67:95:97:98:A7:1C:32
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3230342e31302e3139342e302f32342d3234203d3e20323036323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:53:2f:cc:34:a7:a3:21:25:56:ee:53:84:1b:80:17:d4:e5:
         c8:a5:01:53:c7:de:d6:b2:77:87:af:78:40:42:08:bf:15:d6:
         18:4b:13:8f:e5:dc:3d:53:c3:e9:e6:68:59:c2:3c:83:01:73:
         e1:e8:c8:af:aa:44:39:da:30:f2:e1:5c:81:b8:8b:a1:34:34:
         f8:7c:fc:c9:47:86:04:80:31:a5:c7:81:72:6d:f9:c7:2c:e4:
         e5:06:cb:7d:fb:ba:ec:38:35:cb:29:61:be:d3:51:08:0c:16:
         2c:a8:5d:11:90:77:00:bc:05:3a:10:e4:f0:0e:a0:7c:79:b5:
         15:4f:53:d7:f6:8d:34:c2:33:14:38:d2:cc:63:c5:2b:a6:4a:
         11:ef:40:dd:7a:f2:92:0a:8d:95:fe:74:5f:ac:f7:49:ba:0c:
         98:a7:81:b9:c5:67:2b:53:21:87:d8:48:2b:bd:b9:64:1c:06:
         ab:1d:6f:75:5c:51:54:c4:a5:3b:d0:4e:85:4e:6c:25:34:86:
         8a:08:cd:b9:16:eb:30:a0:2d:8a:99:c0:e4:e3:bd:21:6e:b0:
         4c:79:59:7b:ff:4f:5a:2b:ea:31:60:c1:25:36:82:22:3a:63:
         8d:ae:ab:dc:0f:c3:35:a4:bd:2e:2e:4d:9c:22:bf:97:f2:42:
         60:f6:0d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:20 2023 by rpki-client on console-fra.rpki-client.org