Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139352e302f32342d3234203d3e203630373231.roa
File:                     3231362e3138352e3139352e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          uLOhjyG5OuXLa59iwocyx6nQ/38GrDqCIF49JbqBViU=
Subject key identifier:   7F:84:B8:E9:DA:60:7F:2F:33:20:A3:63:4A:4D:BA:9A:41:DC:CC:3D
Certificate issuer:       /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial:       1C3A3234FDF9480C7F968F5A5F89E79D94AD6A6C
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139352e302f32342d3234203d3e203630373231.roa
Signing time:             Thu 26 Jan 2023 06:29:33 +0000
ROA not before:           Thu 26 Jan 2023 06:24:33 +0000
ROA not after:            Thu 25 Jan 2024 06:29:33 +0000
asID:                     60721
IP address blocks:        216.185.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3a:32:34:fd:f9:48:0c:7f:96:8f:5a:5f:89:e7:9d:94:ad:6a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
        Validity
            Not Before: Jan 26 06:24:33 2023 GMT
            Not After : Jan 25 06:29:33 2024 GMT
        Subject: CN=7F84B8E9DA607F2F3320A3634A4DBA9A41DCCC3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:69:24:10:77:4e:ea:e6:2a:5a:c0:28:57:f0:
                    78:f6:d6:9b:53:38:e9:42:36:ee:90:73:34:61:35:
                    8d:a6:d3:2b:0f:92:80:f6:e9:2e:92:5b:da:05:66:
                    22:c4:d0:5b:f8:93:7d:83:58:ec:f0:f0:18:fb:93:
                    0e:5f:96:d6:6d:7e:bf:43:3a:bf:45:e4:30:cb:0a:
                    21:69:32:e5:f2:53:a6:df:ca:cb:a9:ba:14:e9:a9:
                    0d:87:7f:df:e5:29:92:d3:89:47:9c:c7:d0:4c:6d:
                    aa:ac:32:5f:51:8e:60:b5:78:46:f2:ee:c6:a8:51:
                    50:1b:d4:c1:8e:1e:5c:f6:63:47:61:2e:57:59:db:
                    56:58:49:5f:a3:79:80:8e:ea:89:f8:50:9e:51:c4:
                    1d:29:0c:9d:ac:f4:d0:3f:51:69:f2:94:f5:06:04:
                    b2:82:46:bb:9a:eb:49:34:64:27:b9:12:c6:ae:48:
                    60:ba:25:d8:61:85:90:cc:53:bf:c8:ac:ed:cc:f6:
                    6f:dd:39:2e:d3:58:89:25:0b:eb:6c:ca:c1:ca:a7:
                    5f:cf:41:c7:e5:bf:4c:5e:fa:a9:f5:a5:66:4e:99:
                    3a:91:3c:d3:94:8e:63:10:bc:c5:0b:a5:a5:b3:28:
                    10:2d:b3:03:a5:1c:ec:bd:74:2e:14:dc:88:df:9c:
                    fc:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:84:B8:E9:DA:60:7F:2F:33:20:A3:63:4A:4D:BA:9A:41:DC:CC:3D
            X509v3 Authority Key Identifier:
                keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139352e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:d5:c5:bf:a0:11:b7:b2:d4:cd:af:46:fc:65:07:14:73:4d:
         b2:4b:ed:a1:41:91:e5:ab:60:a5:ae:16:be:e3:2d:eb:a7:aa:
         a5:27:49:63:9c:94:50:95:84:72:a3:85:58:ef:c8:d1:4a:2b:
         fe:1f:90:72:ba:63:f3:b7:c0:83:0f:ac:d0:20:28:17:0c:39:
         43:82:a1:cc:48:3c:1f:ee:5a:de:01:66:5d:e7:8a:69:fa:83:
         1e:20:9c:ef:de:9c:83:d9:06:f3:2c:9b:60:16:0d:4a:56:13:
         97:40:ec:10:78:de:93:17:18:32:1c:fc:c0:b4:90:1d:4b:2a:
         81:be:5e:d4:59:ab:f9:9f:16:64:d1:19:9b:a9:0e:2d:c8:d7:
         6e:ba:a0:74:93:74:c1:b6:a4:4f:93:dd:0e:c9:f7:58:59:64:
         f9:d5:1a:94:35:d9:77:c8:9d:2a:fc:51:0c:a2:75:0c:78:29:
         bb:f6:60:6c:d5:b0:25:58:a1:b4:3c:41:31:9c:bb:ee:0c:f9:
         d5:70:0c:0e:f8:3c:9f:2c:28:48:91:b8:58:db:36:50:55:fe:
         1a:12:b7:07:15:ae:19:32:0b:ae:e2:d1:fb:7e:de:ae:94:61:
         9e:05:23:bc:70:ab:f4:61:e1:23:ef:80:76:99:d6:0e:d3:85:
         f1:e9:5e:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:34 2024 by rpki-client on console-ams.rpki-client.org