Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          +8iBUZcMP538Q+ljcXibrIL1E94IZcOESmYDlrc6QXY=
Subject key identifier:   A9:6B:86:03:73:C6:9E:67:97:F4:89:EF:F9:56:B4:72:27:2B:79:36
Certificate issuer:       /CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
Certificate serial:       2E168909FC7438E56688CFEC686DF34F5CF58ADE
Authority key identifier: A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
Signing time:             Tue 14 Feb 2023 14:24:58 +0000
ROA not before:           Tue 14 Feb 2023 14:19:58 +0000
ROA not after:            Tue 13 Feb 2024 14:24:58 +0000
asID:                     399970
IP address blocks:        149.112.155.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:16:89:09:fc:74:38:e5:66:88:cf:ec:68:6d:f3:4f:5c:f5:8a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3
        Validity
            Not Before: Feb 14 14:19:58 2023 GMT
            Not After : Feb 13 14:24:58 2024 GMT
        Subject: CN=A96B860373C69E6797F489EFF956B472272B7936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d6:39:60:8c:b7:77:98:b6:e0:aa:16:6b:f5:
                    f5:e4:74:14:8e:dc:bf:e2:51:75:64:0c:ed:d6:4d:
                    9d:c5:b5:1b:ba:3b:bc:e1:b2:64:49:18:35:6c:71:
                    8d:d8:9c:55:bc:77:64:ba:04:b5:01:9e:61:cd:11:
                    a4:ef:bd:db:7a:46:31:62:40:e1:de:11:b2:8b:a4:
                    48:ef:b2:20:9a:91:b6:02:62:c4:b2:fd:bd:67:11:
                    65:f5:51:d0:42:1e:ef:0f:bc:07:9d:80:ee:6a:16:
                    c4:ce:2a:b9:f7:ba:40:20:65:bd:4c:9d:86:62:5d:
                    2c:b4:3a:06:73:9d:76:5e:38:32:15:a5:44:f2:52:
                    11:f0:7c:2c:be:89:50:41:8a:87:c7:e9:82:12:03:
                    5b:e2:a5:93:55:39:6b:ed:10:ce:02:c2:83:81:ff:
                    aa:3c:90:d6:83:6d:42:f8:a6:8a:db:50:b4:65:a7:
                    d7:f8:a8:49:aa:2e:f9:4e:d9:db:fd:8b:0a:4d:b5:
                    91:b4:5e:3d:c5:aa:3e:5b:b1:f1:49:35:90:2b:d7:
                    1b:a4:73:3b:46:31:48:11:52:1e:00:fb:8c:b4:12:
                    81:93:d4:b0:7c:0f:97:9f:47:d5:fa:e2:39:93:c1:
                    66:42:16:bf:a0:3b:bc:4d:aa:8c:91:3e:97:c5:8a:
                    32:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:6B:86:03:73:C6:9E:67:97:F4:89:EF:F9:56:B4:72:27:2B:79:36
            X509v3 Authority Key Identifier:
                keyid:A6:81:74:72:32:74:C8:DA:48:59:13:12:CB:C3:69:FB:B7:39:0A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/A68174723274C8DA48591312CBC369FBB7390A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/44e03c61-6e39-49a5-bb22-77cc5b0ab06f/fcb20f59664159e8a32b5fd67af8a0740916b056218620b8f3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade860446e401863cf949535720/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:06:9d:bc:fc:53:fb:58:d7:91:de:de:61:08:95:66:ba:85:
         4b:f7:7c:2a:dc:e0:96:1d:5c:2a:c6:55:18:b7:35:15:70:10:
         e6:2a:d1:26:1b:4e:8b:e1:36:28:09:d5:d1:36:93:bf:fe:4f:
         b1:98:c1:ff:cc:8d:4c:c6:f4:f0:1b:d9:6d:a7:eb:b7:fd:7a:
         fc:cf:e5:6d:3c:73:85:a3:1d:d2:55:b4:3b:d5:87:50:04:a0:
         9d:04:e7:ed:b4:ec:2a:a6:f3:00:75:43:a4:8e:82:ca:4a:27:
         88:93:d0:be:b9:4b:40:36:11:05:84:14:3c:7d:84:49:a9:4c:
         72:f6:25:80:6d:15:a2:4f:79:01:03:f2:23:b5:69:f4:5d:36:
         18:2e:6a:6c:82:12:fc:24:be:c3:70:4c:13:30:24:b6:89:c0:
         e2:b2:3c:37:ca:1f:7b:b1:56:07:77:cb:ef:a7:b7:1e:5a:9f:
         51:f7:b4:92:25:9e:41:31:19:e2:9b:f6:54:fc:56:ca:d0:f3:
         7e:51:86:af:13:2e:af:e1:ab:29:d0:37:f7:c7:32:2a:79:dc:
         a0:44:7b:d9:95:b6:9b:40:01:7c:76:03:6f:5e:98:54:62:59:
         43:26:b2:92:24:ae:4c:e0:3b:67:e6:4c:6f:92:a0:ab:83:1d:
         0a:fe:03:ad
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIULhaJCfx0OOVmiM/saG3zT1z1it4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmNiMjBmNTk2NjQxNTllOGEzMmI1ZmQ2N2FmOGEwNzQw
OTE2YjA1NjIxODYyMGI4ZjMwHhcNMjMwMjE0MTQxOTU4WhcNMjQwMjEzMTQyNDU4
WjAzMTEwLwYDVQQDEyhBOTZCODYwMzczQzY5RTY3OTdGNDg5RUZGOTU2QjQ3MjI3
MkI3OTM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNY5YIy3d5i2
4KoWa/X15HQUjty/4lF1ZAzt1k2dxbUbuju84bJkSRg1bHGN2JxVvHdkugS1AZ5h
zRGk773bekYxYkDh3hGyi6RI77IgmpG2AmLEsv29ZxFl9VHQQh7vD7wHnYDuahbE
ziq597pAIGW9TJ2GYl0stDoGc512XjgyFaVE8lIR8HwsvolQQYqHx+mCEgNb4qWT
VTlr7RDOAsKDgf+qPJDWg21C+KaK21C0ZafX+KhJqi75Ttnb/YsKTbWRtF49xao+
W7HxSTWQK9cbpHM7RjFIEVIeAPuMtBKBk9SwfA+Xn0fV+uI5k8FmQha/oDu8TaqM
kT6XxYoyVQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFKlrhgNzxp5nl/SJ7/lWtHIn
K3k2MB8GA1UdIwQYMBaAFKaBdHIydMjaSFkTEsvDafu3OQprMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODYwNDQ2ZTQwMTg2M2NmOTQ5NTM1NzIwLzAv
QTY4MTc0NzIzMjc0QzhEQTQ4NTkxMzEyQ0JDMzY5RkJCNzM5MEE2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMmEyNDY5NDctMmQ2Mi00YTZjLWJhMDUtODcxODdm
MDA5OWIyLzQ0ZTAzYzYxLTZlMzktNDlhNS1iYjIyLTc3Y2M1YjBhYjA2Zi9mY2Iy
MGY1OTY2NDE1OWU4YTMyYjVmZDY3YWY4YTA3NDA5MTZiMDU2MjE4NjIwYjhmMy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg2MDQ0NmU0MDE4NjNj
Zjk0OTUzNTcyMC8wLzMxMzQzOTJlMzEzMTMyMmUzMTM1MzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzM5MzkzOTM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACVcJswDQYJKoZIhvcN
AQELBQADggEBAMsGnbz8U/tY15He3mEIlWa6hUv3fCrc4JYdXCrGVRi3NRVwEOYq
0SYbTovhNigJ1dE2k7/+T7GYwf/MjUzG9PAb2W2n67f9evzP5W08c4WjHdJVtDvV
h1AEoJ0E5+207Cqm8wB1Q6SOgspKJ4iT0L65S0A2EQWEFDx9hEmpTHL2JYBtFaJP
eQED8iO1afRdNhguamyCEvwkvsNwTBMwJLaJwOKyPDfKH3uxVgd3y++ntx5an1H3
tJIlnkExGeKb9lT8VsrQ835Rhq8TLq/hqynQN/fHMip53KBEe9mVtptAAXx2A29e
mFRiWUMmspIkrkzgO2fmTG+SoKuDHQr+A60=
-----END CERTIFICATE-----
Generated at Fri Feb 21 10:48:11 2025 by rpki-client