Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/1/326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa
File:                     326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa (raw, json)
Hash identifier:          F4/ZhWjUuSmoGvdlfDbyoUMRSLrEThdFwnWQY24KlnY=
Subject key identifier:   AB:21:43:E1:54:9D:55:D0:F4:DC:11:A4:9E:15:BF:C0:B5:BD:18:0F
Certificate issuer:       /CN=427CBCC35076D4712F98208A6020FD536E0FB5CD
Certificate serial:       7637F7C7BC4EB2B5F688E4F78E6FF79F15A70E00
Authority key identifier: 42:7C:BC:C3:50:76:D4:71:2F:98:20:8A:60:20:FD:53:6E:0F:B5:CD
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/427CBCC35076D4712F98208A6020FD536E0FB5CD.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/1/326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa
Signing time:             Sat 21 Jan 2023 07:21:23 +0000
ROA not before:           Sat 21 Jan 2023 07:16:23 +0000
ROA not after:            Sat 20 Jan 2024 07:21:23 +0000
asID:                     52210
IP address blocks:        2a0a:6040:c500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:37:f7:c7:bc:4e:b2:b5:f6:88:e4:f7:8e:6f:f7:9f:15:a7:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=427CBCC35076D4712F98208A6020FD536E0FB5CD
        Validity
            Not Before: Jan 21 07:16:23 2023 GMT
            Not After : Jan 20 07:21:23 2024 GMT
        Subject: CN=AB2143E1549D55D0F4DC11A49E15BFC0B5BD180F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1c:ec:8a:02:20:5a:dc:59:b2:b8:f8:d5:4c:
                    1b:c5:c5:37:e3:1c:e3:06:32:96:ac:02:6a:76:d1:
                    e7:46:65:2a:96:b7:83:7a:42:53:15:7f:8d:3c:81:
                    a5:89:a2:55:ab:21:f8:6f:f1:d7:4a:c5:56:6e:d3:
                    ff:8f:bc:bb:8e:e2:ae:5a:22:d9:f5:0d:a5:e8:4c:
                    4a:7b:75:af:ce:6d:47:de:91:c8:d3:22:9e:c5:f9:
                    e4:53:c6:6c:d0:6f:e6:f6:f3:55:0f:95:82:e0:35:
                    ea:f1:3e:c0:67:a3:f3:7f:34:da:bc:ad:ba:67:3d:
                    0a:52:40:4e:28:53:c0:4f:ec:bb:1d:fd:0e:eb:8d:
                    15:2f:2c:58:82:34:19:81:72:dd:93:14:36:f5:ef:
                    f5:cf:5d:bf:8d:36:32:9e:08:62:3a:93:b4:32:f4:
                    6c:5b:70:40:a7:f5:a6:3c:23:30:d0:ed:48:24:41:
                    b0:a9:99:e9:d0:f7:d5:e1:a6:19:06:86:76:25:36:
                    9f:27:70:be:ec:6b:f5:9c:ec:9b:7d:d1:17:9c:7d:
                    1b:f9:39:a9:4f:2e:1d:c7:04:f0:2f:a4:82:06:8c:
                    79:53:db:2f:09:32:ca:73:b5:85:a7:ea:3a:24:1f:
                    7c:9b:72:cd:cb:5d:86:a0:cc:af:73:f4:af:3f:bc:
                    8a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:21:43:E1:54:9D:55:D0:F4:DC:11:A4:9E:15:BF:C0:B5:BD:18:0F
            X509v3 Authority Key Identifier:
                keyid:42:7C:BC:C3:50:76:D4:71:2F:98:20:8A:60:20:FD:53:6E:0F:B5:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/1/427CBCC35076D4712F98208A6020FD536E0FB5CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/427CBCC35076D4712F98208A6020FD536E0FB5CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/1/326130613a363034303a633530303a3a2f34302d3430203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:c500::/40

    Signature Algorithm: sha256WithRSAEncryption
         89:d5:62:18:5f:c9:14:d3:ce:ee:8c:1d:61:74:1c:1b:7b:2a:
         c9:1c:23:87:63:ac:ec:8b:6d:46:e4:be:a8:25:b8:56:2f:91:
         99:25:40:4b:3b:08:64:b3:4f:21:4c:41:fd:a5:90:63:99:90:
         9c:8c:bc:b0:89:31:f6:fd:9c:3e:fc:0c:36:17:02:a2:e2:df:
         9d:4d:fe:99:67:68:ca:8a:96:79:11:56:6a:f6:7f:78:15:bc:
         a7:37:14:81:3f:23:5e:91:61:8a:bd:3d:56:c5:23:d4:d8:07:
         f3:73:cc:89:1c:a2:bf:26:cc:0b:b7:0a:f9:20:40:ba:4f:7b:
         3f:16:49:3d:b4:a4:a2:15:20:43:22:42:27:41:c0:30:66:44:
         0e:e5:15:8f:ad:65:3b:68:05:18:86:4c:17:f2:84:04:c1:60:
         99:96:8e:1b:06:d7:38:fa:e5:6b:71:f7:77:8e:28:1b:21:9d:
         f4:ff:8a:66:9d:11:2d:fe:ad:31:be:a2:1b:1b:1e:59:55:c3:
         cd:36:f0:4f:71:1a:99:3a:90:3d:f7:79:0e:eb:c0:f7:eb:32:
         43:5a:5d:bd:7c:4e:19:4e:f4:b9:83:d7:c4:92:93:18:d7:2a:
         bc:27:af:c5:08:31:cb:b0:e7:c3:61:e4:78:88:de:be:73:fe:
         40:f9:eb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:33 2024 by rpki-client on console-ams.rpki-client.org