Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/32332e3133302e3133392e302f32342d3234203d3e20323132393334.roa
File:                     32332e3133302e3133392e302f32342d3234203d3e20323132393334.roa (raw, json)
Hash identifier:          ru09J92FcEcSDhCXdFy3bp8hz5IbrCuaO0o+P85Vtlw=
Subject key identifier:   CC:6B:FB:33:E6:41:00:7A:4B:8D:59:07:1F:43:28:75:EB:D9:4B:C4
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       33396F29824AE8E63E37624C122A686F575CEE01
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/32332e3133302e3133392e302f32342d3234203d3e20323132393334.roa
Signing time:             Fri 09 Dec 2022 16:06:36 +0000
ROA not before:           Fri 09 Dec 2022 16:01:36 +0000
ROA not after:            Fri 08 Dec 2023 16:06:36 +0000
asID:                     212934
IP address blocks:        23.130.139.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:39:6f:29:82:4a:e8:e6:3e:37:62:4c:12:2a:68:6f:57:5c:ee:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec  9 16:01:36 2022 GMT
            Not After : Dec  8 16:06:36 2023 GMT
        Subject: CN=CC6BFB33E641007A4B8D59071F432875EBD94BC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:15:03:49:16:2f:b9:3f:36:04:bd:7c:29:71:
                    6d:84:2b:bf:6d:75:e3:be:94:cf:6f:26:58:4e:40:
                    2c:ac:3e:b9:e1:c0:79:ac:ba:ec:5c:34:d5:99:67:
                    fe:16:36:68:ec:65:9e:06:3a:f8:79:aa:d4:97:80:
                    fa:5d:3a:b9:e5:fb:ae:54:1a:7c:ef:93:c6:0f:d6:
                    46:34:3a:e1:ff:43:cf:a9:67:fd:21:74:dc:8f:68:
                    99:14:2c:ef:58:85:ad:91:4e:48:d9:02:f4:3e:ce:
                    0a:37:88:57:f4:16:e9:3b:ed:26:cc:0f:0d:20:66:
                    f8:46:cc:c9:b9:4a:73:80:d6:7b:1d:17:92:1e:80:
                    eb:9e:5a:f6:51:9c:22:0e:d1:cc:c3:bf:8d:3f:87:
                    81:e3:96:15:d3:20:41:5f:2e:47:9f:76:f1:70:f3:
                    3a:3a:89:a3:7e:f6:c3:eb:9c:f0:88:43:c0:a2:88:
                    44:ae:fa:d3:19:38:23:92:c3:6e:cc:04:86:bb:f2:
                    ae:4b:f9:b7:d8:35:80:d2:36:1c:54:24:06:11:b4:
                    4f:4d:fe:a2:4a:42:92:0d:19:0c:92:ed:de:7a:18:
                    b8:db:fe:85:4a:32:4d:f9:7d:79:d4:de:ad:be:39:
                    50:da:e0:ae:fe:81:e1:08:83:a0:6f:dc:de:f2:d2:
                    a6:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6B:FB:33:E6:41:00:7A:4B:8D:59:07:1F:43:28:75:EB:D9:4B:C4
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/32332e3133302e3133392e302f32342d3234203d3e20323132393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:a2:ff:d3:14:fa:e6:b9:24:4b:4a:04:bf:f4:dd:b2:20:e8:
         58:0e:47:9c:64:ad:2b:5e:81:68:50:20:e0:9e:5c:2c:01:1c:
         2f:e8:ae:a2:a5:75:22:26:27:56:07:c9:d1:0f:c9:da:89:7b:
         99:63:ab:05:52:d1:c2:60:a6:26:9c:7e:b8:d1:b0:e0:71:c9:
         55:a6:b3:b8:e8:6a:38:f3:57:fd:5f:25:14:23:03:a2:4a:eb:
         45:ee:79:15:fe:04:4a:ff:f0:76:f1:59:25:39:e1:9f:2e:de:
         88:01:d0:51:61:9b:37:0d:0f:5a:e3:8a:61:c1:f5:af:6c:84:
         ef:e7:99:64:67:63:ff:62:f5:5e:8e:66:62:98:64:93:9d:ab:
         af:87:08:ca:4e:38:1d:8a:3e:48:59:74:f7:9b:ab:f3:d9:d0:
         81:8a:ee:d7:d3:87:66:4f:b9:38:33:d8:42:bd:c3:fb:97:a5:
         5c:0f:1e:a1:f5:e8:6b:57:db:b2:87:0b:ab:ec:21:66:8b:15:
         a9:e3:17:64:0d:a1:89:47:f8:53:62:2e:92:c6:b0:b5:70:d6:
         d9:bc:ba:72:c5:53:30:59:76:cd:ae:70:3f:7b:0c:93:46:e2:
         df:66:b7:53:e5:e4:cc:d1:fe:a0:27:58:3f:13:cc:c3:f7:9d:
         42:ba:34:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:03 2024 by rpki-client on console-fra.rpki-client.org