Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139372e302f32342d3234203d3e203631333137.roa
File:                     3231362e3138352e3139372e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          rHzxwW9m1lsP78zqyi0XDpL6ohyGoHmDw0Eh4qAPpIA=
Subject key identifier:   DA:20:00:2E:3F:E1:CC:03:A5:96:FF:2A:C4:38:69:13:9F:7C:E1:75
Certificate issuer:       /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial:       70D44CDCDB54380C6EB7B2A592AC4D8ADBCA457D
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139372e302f32342d3234203d3e203631333137.roa
Signing time:             Thu 26 Jan 2023 15:41:27 +0000
ROA not before:           Thu 26 Jan 2023 15:36:27 +0000
ROA not after:            Thu 25 Jan 2024 15:41:27 +0000
asID:                     61317
IP address blocks:        216.185.197.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:d4:4c:dc:db:54:38:0c:6e:b7:b2:a5:92:ac:4d:8a:db:ca:45:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
        Validity
            Not Before: Jan 26 15:36:27 2023 GMT
            Not After : Jan 25 15:41:27 2024 GMT
        Subject: CN=DA20002E3FE1CC03A596FF2AC43869139F7CE175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fd:aa:fb:0d:2d:3b:3e:dc:10:ca:35:b7:93:
                    13:c1:d3:4a:b5:1a:e8:a3:eb:a1:75:f9:b5:5f:8f:
                    ec:ae:ed:b4:81:72:d4:ec:45:35:50:c9:85:36:79:
                    98:b9:94:ac:e0:6c:29:d3:d5:2e:81:54:07:1e:c8:
                    c3:e6:4c:7e:fd:f5:e1:4d:4d:83:b8:71:9c:cc:4f:
                    44:4b:cc:1c:a8:f9:3f:45:c1:c9:58:6f:54:71:37:
                    47:49:12:f4:20:e3:21:d5:ff:9a:37:ac:d7:9d:48:
                    5f:df:b1:30:cb:be:62:91:d8:36:49:61:63:73:4c:
                    00:5c:2b:e1:d0:5d:64:36:a9:48:19:67:2c:fd:98:
                    17:48:a0:74:57:ec:7d:95:a1:71:66:0e:50:fd:f6:
                    82:da:d8:99:b4:da:17:c9:b7:c1:61:e3:bd:44:46:
                    71:cd:10:03:c8:61:a1:90:81:2c:01:f2:f9:1f:8a:
                    cd:55:cc:b7:4e:48:5a:a6:f5:48:2a:de:46:2b:38:
                    d9:17:15:a3:3c:64:34:91:e7:99:69:f4:e8:9d:b7:
                    8c:4e:af:a2:91:de:5e:e8:c0:9f:2f:50:bf:93:e0:
                    a1:41:7e:e4:8f:9c:26:e3:5f:44:1d:9f:27:7b:50:
                    b0:6e:a2:8c:33:da:6d:b8:bd:a9:7a:37:a2:8a:e6:
                    c1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:20:00:2E:3F:E1:CC:03:A5:96:FF:2A:C4:38:69:13:9F:7C:E1:75
            X509v3 Authority Key Identifier:
                keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139372e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:ba:80:50:03:3d:ab:2d:ff:3a:b4:bf:e1:19:bb:c9:f3:db:
         01:31:65:98:00:79:1f:13:07:26:a5:69:59:2f:8d:ae:1e:ed:
         ad:e7:a6:3a:b3:cb:f1:bf:be:00:3f:b9:bc:88:3c:95:1b:70:
         de:da:32:80:b2:83:ce:14:6d:02:0f:0c:4f:4e:03:8f:5a:04:
         87:00:29:21:3d:da:53:a2:d3:ad:6e:f6:7c:e9:3f:c4:48:83:
         8b:4c:cb:16:82:74:06:d0:da:3e:9b:9e:bd:7e:1c:04:5b:04:
         a1:39:03:c4:0f:4d:34:2d:e8:a5:39:94:07:20:7c:9b:ae:94:
         3a:2d:90:03:bd:71:bb:59:f0:54:f5:cf:5e:b6:ed:1d:5b:83:
         76:fe:5b:e9:71:c5:09:09:21:f2:fa:e3:19:f9:8e:41:16:2e:
         1b:f9:ad:af:2a:e7:3f:ea:e8:78:3f:8d:5b:20:92:91:f2:f3:
         7b:cb:1e:9f:d9:f0:04:00:8e:5c:27:68:99:81:03:f3:be:7a:
         c7:82:e1:32:bd:cd:74:d9:72:d7:07:b3:de:89:a5:45:c7:14:
         74:4a:eb:6d:20:b2:a8:21:f3:72:e0:94:c5:ca:26:45:28:64:
         2f:38:ef:b6:7a:7c:56:38:3b:c6:07:5c:16:c6:c5:38:ea:f5:
         38:32:cd:57
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUcNRM3NtUOAxut7KlkqxNitvKRX0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTZhY2M3YWU3ZGFhMjFlNjBiMjMwNDRhNmIwZDU2ZTkw
MTE0MjAyM2ExNWI0ODgxZWQwHhcNMjMwMTI2MTUzNjI3WhcNMjQwMTI1MTU0MTI3
WjAzMTEwLwYDVQQDEyhEQTIwMDAyRTNGRTFDQzAzQTU5NkZGMkFDNDM4NjkxMzlG
N0NFMTc1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAof2q+w0tOz7c
EMo1t5MTwdNKtRroo+uhdfm1X4/sru20gXLU7EU1UMmFNnmYuZSs4Gwp09UugVQH
HsjD5kx+/fXhTU2DuHGczE9ES8wcqPk/RcHJWG9UcTdHSRL0IOMh1f+aN6zXnUhf
37Ewy75ikdg2SWFjc0wAXCvh0F1kNqlIGWcs/ZgXSKB0V+x9laFxZg5Q/faC2tiZ
tNoXybfBYeO9REZxzRADyGGhkIEsAfL5H4rNVcy3TkhapvVIKt5GKzjZFxWjPGQ0
keeZafTonbeMTq+ikd5e6MCfL1C/k+ChQX7kj5wm419EHZ8ne1CwbqKMM9ptuL2p
ejeiiubBswIDAQABo4ICtDCCArAwHQYDVR0OBBYEFNogAC4/4cwDpZb/KsQ4aROf
fOF1MB8GA1UdIwQYMBaAFHIdV4TcRiXmpdk5pvl3+8ihJCdWMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODU4N2ZhMjAwMTg1ZWNjMGJjYTU0Y2NmLzAv
NzIxRDU3ODREQzQ2MjVFNkE1RDkzOUE2Rjk3N0ZCQzhBMTI0Mjc1Ni5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2Y1ZjU1MzBjLWIwZTgtNGY4OS1hYjYyLWRiODcwY2I2NjgwZS8xNmFj
YzdhZTdkYWEyMWU2MGIyMzA0NGE2YjBkNTZlOTAxMTQyMDIzYTE1YjQ4ODFlZC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg1ODdmYTIwMDE4NWVj
YzBiY2E1NGNjZi8wLzMyMzEzNjJlMzEzODM1MmUzMTM5MzcyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNjMxMzMzMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LnFMA0GCSqGSIb3DQEB
CwUAA4IBAQC0uoBQAz2rLf86tL/hGbvJ89sBMWWYAHkfEwcmpWlZL42uHu2t56Y6
s8vxv74AP7m8iDyVG3De2jKAsoPOFG0CDwxPTgOPWgSHACkhPdpTotOtbvZ86T/E
SIOLTMsWgnQG0No+m569fhwEWwShOQPED000LeilOZQHIHybrpQ6LZADvXG7WfBU
9c9etu0dW4N2/lvpccUJCSHy+uMZ+Y5BFi4b+a2vKuc/6uh4P41bIJKR8vN7yx6f
2fAEAI5cJ2iZgQPzvnrHguEyvc102XLXB7PeiaVFxxR0SuttILKoIfNy4JTFyiZF
KGQvOO+2enxWODvGB1wWxsU46vU4Ms1X
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:04 2024 by rpki-client on console-fra.rpki-client.org