Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230302e302f32342d3234203d3e203630373231.roa
File:                     3231362e3138352e3230302e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          +SH+9kjpwv73/TPKiaqRq3kIaQ58AcK/ENoMsKcM0F8=
Subject key identifier:   C5:88:17:8E:5E:31:2C:32:C4:35:4E:3C:A7:9F:15:EF:00:54:BA:1E
Certificate issuer:       /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial:       226B69CA0C6CD3072E8D2B2E7B1B56E8606CF5B8
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230302e302f32342d3234203d3e203630373231.roa
Signing time:             Thu 26 Jan 2023 06:30:32 +0000
ROA not before:           Thu 26 Jan 2023 06:25:32 +0000
ROA not after:            Thu 25 Jan 2024 06:30:32 +0000
asID:                     60721
IP address blocks:        216.185.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:6b:69:ca:0c:6c:d3:07:2e:8d:2b:2e:7b:1b:56:e8:60:6c:f5:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
        Validity
            Not Before: Jan 26 06:25:32 2023 GMT
            Not After : Jan 25 06:30:32 2024 GMT
        Subject: CN=C588178E5E312C32C4354E3CA79F15EF0054BA1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:23:1c:6b:93:d6:8e:15:26:27:91:cd:6e:d8:
                    35:97:44:f7:3b:7f:8c:69:bb:c1:91:68:5a:ed:38:
                    ae:c7:d2:bf:60:73:75:c4:0e:63:24:be:16:b1:b5:
                    ac:d6:dd:55:19:f6:15:0e:0e:2e:c7:8f:d0:7a:26:
                    fe:07:d4:9d:61:23:2c:33:f2:22:b7:e2:ca:57:06:
                    53:82:ed:5a:cf:69:b3:25:b0:34:ae:dc:51:6b:40:
                    09:ba:32:d4:45:3d:aa:28:51:c6:4d:ab:ac:cb:a1:
                    56:d5:ec:73:9c:1c:4d:7b:3c:36:58:0d:28:61:b3:
                    55:4b:8f:4a:58:58:f7:74:d6:6d:ed:85:1a:8a:77:
                    29:9a:8e:4e:c3:d4:0e:3a:8e:d1:77:89:36:7d:53:
                    88:94:e2:c7:91:09:32:a9:05:31:55:44:a2:bb:d8:
                    c5:09:bf:15:8c:0e:c4:81:fe:2a:eb:5a:1a:f6:14:
                    19:14:b2:c5:56:cb:71:86:04:09:56:51:c4:95:5f:
                    86:42:ed:ee:83:10:fc:c2:d6:cd:66:0c:3a:54:e7:
                    5e:b9:5e:12:37:3d:41:64:7b:52:fd:93:9a:97:8c:
                    d2:61:eb:aa:c4:a9:75:ea:8a:b3:46:58:6b:15:d0:
                    32:33:b6:7f:d0:b1:18:b7:f6:43:c2:b5:9d:d1:af:
                    f1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:88:17:8E:5E:31:2C:32:C4:35:4E:3C:A7:9F:15:EF:00:54:BA:1E
            X509v3 Authority Key Identifier:
                keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230302e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:b7:e2:cf:a5:6e:56:e4:9b:46:ff:47:9d:45:cd:23:c9:3f:
         07:94:f3:7d:89:83:5f:52:12:6c:5e:c3:d7:87:2b:26:c0:df:
         58:b9:e2:32:ee:69:c1:0c:3b:77:84:22:8c:0c:71:66:5a:a0:
         57:a0:55:90:a8:45:f8:6e:91:40:cd:40:5a:1b:da:bd:44:dc:
         3f:f4:27:ca:02:de:6d:89:5d:ec:cc:6c:00:04:a9:40:af:9a:
         b9:3c:62:a8:e9:26:42:ba:09:77:09:0f:74:35:58:de:fa:94:
         04:ca:7b:4a:ac:61:10:90:8a:11:e5:5e:ba:62:ea:71:99:ec:
         53:bf:7b:55:33:7e:f7:f8:4c:8a:1d:39:b5:33:3b:71:fe:b8:
         61:0c:fa:a8:e7:9d:f9:7a:11:b1:c9:05:8e:b5:1d:14:02:07:
         54:bd:20:f0:f4:b3:80:0a:0d:16:40:ae:bc:49:e4:9a:08:5c:
         16:0e:20:d7:70:79:f8:5c:8e:c5:eb:1a:93:56:46:49:76:91:
         75:7c:68:41:ae:db:be:1b:2b:a3:89:9a:67:e6:2e:99:d5:ac:
         17:62:7e:a1:84:f1:13:dd:48:ef:29:65:4b:74:b5:74:e7:c2:
         e7:a9:e0:68:ee:70:35:f8:fa:25:51:9f:d3:fd:64:de:41:20:
         ca:c9:d9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:34 2024 by rpki-client on console-ams.rpki-client.org