Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa
File:                     3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa (raw, json)
Hash identifier:          aAR4vod1TEUbv+n8txReJzHXTIwsyB0N3LqhcTo6bdY=
Subject key identifier:   53:2A:AF:B6:92:55:30:11:52:3B:CB:EB:86:64:EC:E7:44:67:29:F6
Certificate issuer:       /CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
Certificate serial:       6E57DA10E9BD3DABCE6777AC7B59C5F3F2FB226C
Authority key identifier: A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa
Signing time:             Tue 14 Feb 2023 14:25:18 +0000
ROA not before:           Tue 14 Feb 2023 14:20:18 +0000
ROA not after:            Tue 13 Feb 2024 14:25:18 +0000
asID:                     399970
IP address blocks:        149.112.152.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:57:da:10:e9:bd:3d:ab:ce:67:77:ac:7b:59:c5:f3:f2:fb:22:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
        Validity
            Not Before: Feb 14 14:20:18 2023 GMT
            Not After : Feb 13 14:25:18 2024 GMT
        Subject: CN=532AAFB692553011523BCBEB8664ECE7446729F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0e:7f:1e:78:1c:ae:0c:c4:a0:c1:50:b1:30:
                    ac:ad:31:49:a5:72:33:02:9e:83:8a:5a:86:26:dd:
                    f5:7c:6d:4a:43:49:cc:b4:4e:41:8f:ae:4d:60:77:
                    85:15:77:20:da:f4:50:0d:ed:76:f3:5b:3e:76:f4:
                    41:3c:e5:4c:a9:0e:b8:d7:b4:7f:88:2b:00:ee:de:
                    4f:7b:d6:50:2d:6b:4a:7f:93:79:53:11:47:63:dd:
                    b6:37:4d:cd:64:a5:e7:34:e9:e5:38:4e:69:62:3b:
                    e5:36:94:61:e5:24:c0:07:7f:8d:73:7e:62:de:f4:
                    0e:52:a5:e6:ff:9d:47:05:cf:af:2e:aa:b1:52:64:
                    6f:93:cd:df:46:83:79:a8:b4:bb:aa:df:0f:32:19:
                    3e:35:1d:ca:a6:67:99:30:cd:97:71:ad:36:8f:29:
                    3c:29:10:3a:68:5b:2b:04:01:51:64:a5:99:10:b3:
                    05:92:41:1a:b9:03:4f:bc:e2:a9:33:f8:c6:e0:7a:
                    e7:c3:5d:90:94:b7:3a:3d:d9:3f:f1:9e:5c:40:2c:
                    4a:85:f5:5b:00:c7:80:33:c8:3c:70:09:0f:1f:fb:
                    87:fb:22:98:4d:b4:b9:e8:ac:70:94:c7:e4:ef:e2:
                    51:29:fd:85:fa:a0:32:c4:80:9d:49:ae:71:64:88:
                    bf:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2A:AF:B6:92:55:30:11:52:3B:CB:EB:86:64:EC:E7:44:67:29:F6
            X509v3 Authority Key Identifier:
                keyid:A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/A68174723274C8DA48591312CBC369FBB7390A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:4f:7c:52:2d:71:08:73:b3:37:db:e9:d5:f2:74:4b:8e:d3:
         e3:3f:08:4f:ba:94:cd:1b:33:bb:0b:3a:5c:14:90:87:df:12:
         dc:21:e0:aa:c2:0d:cd:52:04:ed:79:68:07:b3:b9:6a:ca:bb:
         c6:f9:4d:1b:15:23:bb:68:64:4d:73:3c:6a:f6:2a:b9:65:c2:
         c2:68:12:d7:5c:d2:85:cd:bc:d0:10:6a:15:a4:71:3c:e8:9e:
         85:99:51:bd:5a:41:af:8e:d5:ef:27:c5:a1:97:dd:0d:2b:1a:
         1a:95:b5:93:4d:db:e0:c0:a0:dc:20:6c:6c:5f:31:93:45:4b:
         c3:bc:e6:99:7b:3e:93:f2:c4:99:ab:fa:1a:0a:e7:28:e1:37:
         a4:1c:7a:d6:e7:e6:24:5c:32:78:f6:b5:77:ea:31:4a:1a:e0:
         26:17:38:e9:d0:e8:7e:6a:e4:d9:d5:4e:5e:be:23:bf:24:67:
         b1:99:37:28:0f:54:7b:5e:0b:fa:ee:13:82:c8:ef:b1:78:a7:
         58:dd:0a:21:26:8c:82:41:fd:fb:99:ee:09:a3:bb:ce:9f:e7:
         71:35:fc:84:98:f8:a1:18:33:e0:0c:ec:b0:cd:9e:3d:b6:ec:
         bb:26:98:72:88:f3:eb:4b:69:a1:3b:ac:c8:08:92:bb:e2:c5:
         41:d4:92:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:46:09 2025 by rpki-client