Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139322e302f32342d3234203d3e20383334.roa
File:                     3231362e3138352e3139322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          fXToiQl6vVbHEvkOuS5uYDKaD1CNlFzQteU39g7GmPQ=
Subject key identifier:   44:30:D0:0D:AA:4F:BB:3B:61:6D:35:96:24:44:52:27:A5:16:FD:C9
Certificate issuer:       /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial:       3D5865A3A5E509D5ACFD879C69F25D0E62C93853
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139322e302f32342d3234203d3e20383334.roa
Signing time:             Wed 03 May 2023 00:00:12 +0000
ROA not before:           Tue 02 May 2023 23:55:12 +0000
ROA not after:            Wed 01 May 2024 00:00:12 +0000
asID:                     834
IP address blocks:        216.185.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:58:65:a3:a5:e5:09:d5:ac:fd:87:9c:69:f2:5d:0e:62:c9:38:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
        Validity
            Not Before: May  2 23:55:12 2023 GMT
            Not After : May  1 00:00:12 2024 GMT
        Subject: CN=4430D00DAA4FBB3B616D359624445227A516FDC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e3:80:ca:9c:cf:c5:82:15:a0:f9:dd:e1:13:
                    fe:57:78:09:5f:8a:d2:b2:da:d8:8f:07:e6:f2:84:
                    ed:d6:7f:a8:f4:19:ba:4d:83:a1:1d:87:8c:0a:c7:
                    05:82:c1:12:39:a8:58:9f:60:68:a9:05:d5:b8:05:
                    48:78:c4:a1:45:8f:d5:20:02:90:c9:1a:82:2d:74:
                    1d:5b:18:eb:63:64:e5:21:41:f3:16:02:a8:8b:5b:
                    6d:fc:df:dd:9c:25:2a:7b:03:b5:45:1e:2d:2a:aa:
                    7b:92:82:e7:89:2a:8d:50:a2:a2:ed:48:53:bb:c0:
                    f5:69:ff:c1:5f:36:33:b7:56:10:42:32:74:c7:d8:
                    04:3c:b6:ad:f6:37:25:e2:20:1a:88:f9:62:00:aa:
                    da:05:87:bf:0e:09:63:fa:b9:62:ff:dc:96:5a:70:
                    0a:4e:7e:96:ec:c7:20:ef:58:4f:a6:1e:76:f9:f0:
                    d6:2a:3b:f0:a2:87:33:18:cb:71:0d:0d:e9:6d:1a:
                    16:b7:96:a4:ec:7e:3b:79:cb:77:48:b0:c4:90:b5:
                    25:7e:a6:79:9c:64:22:28:84:27:85:c7:23:85:e4:
                    8d:0b:de:5a:f9:4f:6f:8c:f0:b9:5f:ff:d4:02:07:
                    df:0f:84:84:10:13:69:7e:59:26:3a:96:36:df:97:
                    44:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:30:D0:0D:AA:4F:BB:3B:61:6D:35:96:24:44:52:27:A5:16:FD:C9
            X509v3 Authority Key Identifier:
                keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:70:4b:78:e9:93:be:5d:7b:a0:56:30:18:82:f6:0d:ae:9c:
         92:b8:3c:5c:7e:c9:c4:0c:f5:8e:b5:76:a5:5c:f9:36:ac:b1:
         a3:06:98:0c:e1:9a:85:6f:1a:14:8d:d9:a4:a7:f9:d5:db:eb:
         e0:7c:36:ca:52:43:d0:c7:d3:fc:9c:3c:19:6a:71:3d:04:05:
         d3:f5:ee:ae:ec:c6:a2:93:86:a4:4f:ae:88:0f:e6:ab:f7:24:
         f8:18:47:1d:41:79:64:4e:97:1b:aa:3d:fd:65:1e:05:f4:64:
         65:e2:62:65:8f:15:72:55:b4:75:36:61:39:96:28:56:b2:95:
         23:d2:9b:fa:e8:7c:42:a6:4e:63:94:d7:43:46:8b:ce:93:32:
         31:f1:b9:d7:3a:c7:8b:a2:3f:af:51:41:0e:3b:fa:32:24:1f:
         9f:b3:86:a1:3b:d9:c0:2d:fc:be:42:71:be:a5:de:87:4d:88:
         b9:0b:ac:4c:e2:fb:f7:23:fd:8f:ca:50:7b:2b:9c:12:69:fd:
         3e:3b:a8:16:13:55:79:0b:1f:82:bc:6c:c6:55:b3:39:f8:46:
         a8:56:55:15:99:b5:c5:5f:5a:25:41:2f:b7:c0:69:d5:7c:9e:
         0c:d3:63:88:71:7a:50:a7:88:06:b3:08:aa:68:47:34:18:c2:
         98:4d:3b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org