Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          ORihfAp7KZ5RvCelmCkpt3CRoHl/oW+IaD7QKyVSUx0=
Subject key identifier:   F6:DC:00:2A:C5:3F:89:10:10:4F:BA:AB:2A:24:B3:48:F9:EC:FF:0C
Certificate issuer:       /CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
Certificate serial:       1E31B339F3ACBA166AC6CB6115C1DD29FF481480
Authority key identifier: 67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa
Signing time:             Mon 05 Jun 2023 18:32:43 +0000
ROA not before:           Mon 05 Jun 2023 18:27:43 +0000
ROA not after:            Mon 03 Jun 2024 18:32:43 +0000
asID:                     399970
IP address blocks:        149.112.154.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:31:b3:39:f3:ac:ba:16:6a:c6:cb:61:15:c1:dd:29:ff:48:14:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59662570328eeca880dbfb21032b337009b96a21aeda
        Validity
            Not Before: Jun  5 18:27:43 2023 GMT
            Not After : Jun  3 18:32:43 2024 GMT
        Subject: CN=F6DC002AC53F8910104FBAAB2A24B348F9ECFF0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ac:44:37:9d:6c:ba:10:0d:ae:a4:75:ee:29:
                    03:20:88:78:f6:cb:86:9f:54:28:cd:c3:49:7f:5d:
                    47:e6:4b:6f:d1:cf:10:04:01:9f:5c:1a:cc:9f:4a:
                    88:20:3c:fa:c4:0e:c5:13:04:6c:9e:0c:9b:8f:1b:
                    60:de:2e:3c:c2:43:e3:ac:b5:2a:48:0d:cc:82:07:
                    7b:d2:2c:05:7c:ce:6e:41:65:4f:7c:bc:c8:ec:fb:
                    54:ce:46:39:94:e3:a6:b9:7d:3e:4c:52:7d:01:60:
                    65:6a:22:26:e1:94:3d:4e:9f:26:9d:d2:1e:55:ae:
                    f2:fd:45:e2:ce:a9:ad:45:d3:44:57:56:13:2e:85:
                    c7:93:7d:2d:e6:ec:8f:29:6a:86:5d:8d:58:9c:90:
                    96:2f:d9:af:da:16:ae:e3:f0:af:a1:9d:18:92:9a:
                    ed:26:1a:84:f5:43:2f:8c:59:80:fc:fc:0d:de:fe:
                    e5:97:db:60:9f:0a:18:28:98:51:dd:06:bc:73:fe:
                    bb:4f:52:db:36:bb:3d:f3:67:4e:9f:82:3f:26:2e:
                    29:01:56:91:7b:d7:e1:bf:cb:59:39:57:5c:79:04:
                    f3:e8:31:d2:a0:22:4e:74:2f:b4:48:b5:22:b0:16:
                    31:a0:f6:95:fc:7b:c4:cd:33:c3:a3:4f:e0:d2:3c:
                    57:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DC:00:2A:C5:3F:89:10:10:4F:BA:AB:2A:24:B3:48:F9:EC:FF:0C
            X509v3 Authority Key Identifier:
                keyid:67:2D:64:79:95:C0:3D:BE:7B:4C:A7:C4:D7:48:DA:13:4F:07:70:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/672D647995C03DBE7B4CA7C4D748DA134F077026.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86ca186f-7f9b-47a9-b621-3d583ee8498c/fcb20f59662570328eeca880dbfb21032b337009b96a21aeda.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade885433ac01888ccb7e153126/0/3134392e3131322e3135342e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:c9:00:ec:79:07:11:e1:8e:f8:ad:64:4e:e4:7a:7e:20:05:
         e4:7b:c7:42:20:0a:87:83:3f:ff:c1:8c:08:2e:1e:57:c9:83:
         7b:12:18:8b:7d:65:05:6f:6c:3a:09:d9:e3:9a:f2:e0:89:04:
         d4:16:66:86:97:2e:d7:7e:c2:cf:6a:df:1d:3d:26:7a:03:90:
         cb:20:c9:ae:79:d7:8d:5c:e4:6a:86:26:09:0a:0c:ca:cf:70:
         a2:c9:25:84:14:a8:77:ec:d5:80:59:99:25:dd:06:9c:69:8c:
         e1:b4:7a:6e:a0:52:cf:ae:81:de:98:fa:c3:92:6a:2b:62:7e:
         f2:c6:60:9d:d5:cb:14:5b:38:3a:b4:a9:c6:91:4f:ce:30:65:
         04:f1:a7:d3:05:8b:da:4c:0e:b3:84:fc:c3:ce:74:50:19:98:
         45:0b:34:16:9d:9e:e4:3b:3d:2f:aa:be:f5:60:0c:0a:51:84:
         e7:96:06:a9:49:12:18:33:a2:63:76:bf:c0:89:d3:9e:8f:da:
         ee:5a:3f:2b:04:07:bb:b8:68:b1:7d:ce:d0:ce:f9:02:8c:e0:
         e4:79:db:34:51:2e:00:aa:0e:f4:7c:1f:91:96:b3:58:a9:25:
         63:38:90:27:a6:1f:92:d6:fa:a5:4b:23:2a:cb:44:1d:2a:c7:
         3b:91:78:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:38 2024 by rpki-client on console-ams.rpki-client.org