Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/32332e3133302e3133362e302f32342d3234203d3e20323132393334.roa
File:                     32332e3133302e3133362e302f32342d3234203d3e20323132393334.roa (raw, json)
Hash identifier:          IuAc0rMmv0v6/PGpiJHoVO6LwHoRLnwSUN1mHwEqFDo=
Subject key identifier:   E3:2F:04:11:67:4D:2C:F7:0B:E3:E1:D8:86:C8:62:FA:09:6D:88:33
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       6FE3457290E7526D467027C9BFD509975B178A72
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/32332e3133302e3133362e302f32342d3234203d3e20323132393334.roa
Signing time:             Fri 09 Dec 2022 16:06:42 +0000
ROA not before:           Fri 09 Dec 2022 16:01:42 +0000
ROA not after:            Fri 08 Dec 2023 16:06:42 +0000
asID:                     212934
IP address blocks:        23.130.136.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e3:45:72:90:e7:52:6d:46:70:27:c9:bf:d5:09:97:5b:17:8a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec  9 16:01:42 2022 GMT
            Not After : Dec  8 16:06:42 2023 GMT
        Subject: CN=E32F0411674D2CF70BE3E1D886C862FA096D8833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:da:46:a9:ec:ef:5d:8d:34:c5:03:54:43:87:
                    0c:bf:d5:99:df:0e:09:e8:32:96:bb:cb:c5:d0:41:
                    2b:49:60:2a:b2:aa:b6:35:c3:e2:ed:c5:15:1a:95:
                    be:32:ce:11:a8:fa:f3:10:a4:3e:58:f4:94:71:49:
                    13:b6:3e:82:06:a2:8a:ee:12:ee:7b:63:76:ba:c0:
                    1c:f7:fc:81:b0:ee:2a:18:f4:35:40:e0:56:af:cc:
                    4c:36:3c:88:f2:64:26:b1:4f:1e:29:fe:fa:d5:58:
                    64:c0:90:52:df:2f:b9:5a:cb:86:3d:ac:fc:b7:61:
                    d9:a3:09:63:be:3b:a5:6e:7e:09:7a:5d:7f:5e:13:
                    98:fe:46:ae:bf:aa:ec:20:dc:94:21:03:cb:72:5d:
                    ca:7e:4b:01:e0:3d:b9:5b:fc:7f:6a:e2:f5:ad:85:
                    06:e9:e8:fc:6a:60:28:cc:d1:a7:c7:99:9f:1b:65:
                    5f:2e:f1:0a:27:43:23:09:c3:bb:5c:ce:24:6f:8f:
                    9c:84:c5:9d:18:cc:46:15:e9:8a:fa:66:ea:d9:4c:
                    f3:05:3d:8a:4a:62:97:60:2f:87:a5:02:64:99:82:
                    e2:64:2f:ad:57:c2:0e:4d:5d:80:3c:f9:30:47:b2:
                    e3:3e:85:8a:59:c2:b8:82:c2:0d:3c:a4:63:66:6d:
                    98:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:2F:04:11:67:4D:2C:F7:0B:E3:E1:D8:86:C8:62:FA:09:6D:88:33
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/32332e3133302e3133362e302f32342d3234203d3e20323132393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:dc:9d:c5:c8:d8:a8:c3:1e:5b:88:97:00:06:e8:86:8d:1b:
         9a:32:a9:4c:af:c4:fc:e7:3f:c2:5e:39:a6:20:50:39:11:56:
         d1:03:c2:f8:6f:a0:bd:72:a7:43:a4:75:22:56:42:f1:cb:dc:
         2a:6d:44:e7:ed:d9:ee:c0:72:90:5b:f4:b9:d0:7c:e6:1f:cb:
         5a:dc:c8:6b:f1:96:d4:81:21:46:d0:4c:7f:70:c6:2e:e2:88:
         cc:96:66:b5:4e:fc:03:15:cf:aa:e9:c9:11:52:13:7f:7f:31:
         43:e5:26:2f:3a:30:74:42:9f:94:f9:87:f3:74:ba:05:f8:b5:
         82:72:30:a6:d5:33:8e:04:39:3e:6d:dd:be:df:f8:4e:76:c7:
         f1:89:e3:03:d6:52:e4:9c:24:33:27:47:d8:ac:1c:08:7b:f8:
         74:68:0f:3e:02:9f:e3:61:04:3e:f1:28:9c:51:5f:c3:05:89:
         70:28:c4:de:b3:48:18:ee:3a:0f:a6:ac:ea:24:6e:01:d0:b5:
         41:2a:be:80:45:15:0a:06:b2:3c:27:4e:12:8e:5a:4f:e9:44:
         db:1b:6f:e7:85:a7:dd:a9:32:d1:ae:5c:89:37:e0:a0:4a:02:
         fc:57:4a:4b:89:64:34:54:49:d4:26:b3:89:a8:f7:37:88:7f:
         32:5d:81:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:03 2024 by rpki-client on console-fra.rpki-client.org