Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          s6k0Bn//aQ9zXWNuWeYKdJ7Kkoh8vvpgS0muxzI8uhk=
Subject key identifier:   EA:1C:43:E1:B9:31:B0:F0:DF:60:C3:FA:E1:CF:93:31:18:00:3F:9C
Certificate issuer:       /CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
Certificate serial:       500CF2496EEA17E4C2CF857890658D58AD109542
Authority key identifier: A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa
Signing time:             Tue 14 Feb 2023 14:25:06 +0000
ROA not before:           Tue 14 Feb 2023 14:20:06 +0000
ROA not after:            Tue 13 Feb 2024 14:25:06 +0000
asID:                     399970
IP address blocks:        149.112.153.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:0c:f2:49:6e:ea:17:e4:c2:cf:85:78:90:65:8d:58:ad:10:95:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
        Validity
            Not Before: Feb 14 14:20:06 2023 GMT
            Not After : Feb 13 14:25:06 2024 GMT
        Subject: CN=EA1C43E1B931B0F0DF60C3FAE1CF933118003F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:8a:f7:4d:c3:11:62:f2:47:91:26:06:5b:
                    89:cf:ce:8a:ca:9d:ff:8c:68:91:4c:42:90:35:32:
                    89:ac:e3:ea:53:6f:54:0a:a1:49:07:db:13:6d:c9:
                    5d:aa:a4:da:3c:27:f1:00:e6:95:67:58:f3:16:9e:
                    0b:ed:28:db:a1:07:b8:18:d4:8b:e3:b6:80:ae:11:
                    98:33:77:b2:1f:db:ff:fc:c8:8b:49:e5:59:c0:17:
                    8a:a5:df:88:e3:a0:1d:85:4b:2e:bc:17:e9:fa:cc:
                    44:62:86:dc:e6:36:aa:1d:c5:7c:da:47:a1:d6:8d:
                    12:17:98:bd:f2:c1:49:3b:a5:b9:0c:a8:a2:6b:b1:
                    a8:5b:b9:8e:7d:1c:f7:bd:83:99:83:8e:ea:66:8d:
                    7f:6b:c0:0d:ce:e0:29:65:93:3a:04:64:14:b3:2f:
                    a5:2e:e9:2f:ca:3e:f9:87:3e:69:b5:89:ea:46:a2:
                    f8:58:64:3e:98:d8:fa:22:13:f9:6d:0d:3d:9b:9d:
                    c6:25:74:f9:77:b7:81:c3:8f:60:3c:f7:42:be:73:
                    57:bd:bf:c1:74:e2:07:a2:d6:a5:46:fe:1d:b0:8a:
                    af:65:2f:94:c6:0e:aa:a5:a7:b9:9d:25:fc:0b:ca:
                    1b:8c:3a:5a:1c:5f:6c:93:68:fe:2e:1a:c4:19:91:
                    64:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1C:43:E1:B9:31:B0:F0:DF:60:C3:FA:E1:CF:93:31:18:00:3F:9C
            X509v3 Authority Key Identifier:
                keyid:A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/A68174723274C8DA48591312CBC369FBB7390A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/3134392e3131322e3135332e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:99:ad:16:ad:2c:af:94:7f:89:6c:3b:17:23:9c:44:30:1a:
         0c:a5:3f:58:e4:e2:23:04:2b:20:3d:30:cf:a9:35:1f:27:b0:
         4f:a1:fd:43:0e:2a:0f:b7:f4:37:11:c8:4d:23:de:bc:b1:a0:
         41:dc:ab:1b:45:1e:5d:51:f4:84:19:dc:0c:50:ff:cd:32:bf:
         7f:83:84:4a:df:9a:34:45:ed:04:41:06:5a:3b:b5:6a:38:f7:
         a1:93:3e:49:36:ed:a6:13:08:8d:c4:04:87:b5:5e:8f:a8:8d:
         55:8c:8f:67:3e:69:20:a6:93:0b:60:af:81:66:62:bc:42:19:
         14:b5:13:04:4e:ae:95:85:2b:47:42:b3:4c:31:11:43:9a:fe:
         53:a1:ca:aa:04:08:1e:3e:1c:3c:f2:b4:96:88:67:ca:e8:41:
         59:7d:4c:6c:a6:3b:87:1c:18:8c:16:cd:8d:87:89:47:db:f3:
         6a:50:07:85:1c:da:ff:bd:5f:af:3e:ac:94:bc:df:3c:04:e3:
         99:f7:fb:c5:34:01:46:5f:13:4b:4f:23:e5:87:e6:cc:69:63:
         90:2f:75:26:57:7d:f6:fb:c0:cc:57:85:0a:b6:69:0d:f4:22:
         83:90:35:e2:c9:0b:aa:a5:ae:82:36:35:55:70:28:73:ec:41:
         14:93:1f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:54:59 2025 by rpki-client