Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3139322e302f32332d3233203d3e203632323430.roa
File:                     36392e3136362e3139322e302f32332d3233203d3e203632323430.roa (raw, json)
Hash identifier:          MHSSl9CknXmluTwFJ4ynAxsLXz07h/OjZeZX6OZvDQY=
Subject key identifier:   B5:96:B8:5D:6E:36:32:20:B2:03:50:97:4C:6E:D1:BF:22:C0:AE:B4
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       17FBF201F31F0103DBE0EBDB6A488E94F5DC4CC1
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3139322e302f32332d3233203d3e203632323430.roa
Signing time:             Wed 18 Dec 2024 06:41:15 +0000
ROA not before:           Wed 18 Dec 2024 06:36:15 +0000
ROA not after:            Wed 17 Dec 2025 06:41:15 +0000
asID:                     62240
IP address blocks:        69.166.192.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:fb:f2:01:f3:1f:01:03:db:e0:eb:db:6a:48:8e:94:f5:dc:4c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Dec 18 06:36:15 2024 GMT
            Not After : Dec 17 06:41:15 2025 GMT
        Subject: CN=B596B85D6E363220B20350974C6ED1BF22C0AEB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ad:07:fc:d0:b4:07:6c:b8:21:d3:91:58:64:
                    bb:42:1e:15:d9:9a:a3:fd:a8:ac:2c:47:24:f4:6e:
                    c1:1c:75:3c:a2:04:e8:09:35:05:a6:53:dc:9b:38:
                    8f:24:42:d4:b4:23:98:c7:15:d2:b0:b3:4a:83:2a:
                    d1:b2:01:35:d7:a5:8f:9d:04:f6:6f:ab:f0:88:b4:
                    b8:6a:65:7f:68:83:03:33:dc:87:95:c5:82:d2:2b:
                    7b:a4:6e:e3:0f:9a:a1:13:0e:fd:e3:62:df:9f:ec:
                    fa:6b:72:b7:51:95:db:bf:b5:02:c2:2c:a1:37:02:
                    c2:77:31:b2:2b:06:cc:6b:88:0c:90:75:1f:fc:2f:
                    f8:eb:1c:d6:3a:46:f7:10:3e:c3:4b:72:bb:61:e2:
                    85:95:df:ce:6c:a3:2c:c1:a6:53:3f:e1:86:95:96:
                    14:7b:8b:05:24:48:fc:ee:81:0b:d7:95:6f:c6:e0:
                    69:aa:ff:47:40:e3:76:94:a2:36:a3:46:65:7d:2c:
                    58:3a:01:2c:90:30:2a:65:ae:38:ab:ab:8a:7b:72:
                    21:57:16:06:1f:a7:60:0e:62:97:f9:9e:4c:b1:b1:
                    99:94:c8:88:02:fb:d8:58:4e:9d:11:ad:67:a4:0c:
                    af:ec:63:cd:3b:ab:75:17:e2:e3:24:87:99:d5:ba:
                    17:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:96:B8:5D:6E:36:32:20:B2:03:50:97:4C:6E:D1:BF:22:C0:AE:B4
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3139322e302f32332d3233203d3e203632323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         55:4a:5e:8f:57:56:77:0a:df:51:27:fe:a4:a6:71:cf:51:e9:
         dc:4f:d4:ee:53:b8:09:fc:9c:a4:0b:c2:0a:03:16:eb:74:60:
         2a:50:de:f6:66:d2:37:01:eb:33:79:bc:37:21:95:51:0c:48:
         ab:dd:53:9c:ee:ba:2e:eb:9a:9a:5e:42:6e:67:b4:78:e8:08:
         c6:a6:b8:a4:41:bc:f5:b1:4d:79:2d:5f:e1:c1:a7:81:2b:cc:
         f5:05:e3:8a:1e:a4:19:52:2f:db:ae:8a:dd:62:1f:d8:19:18:
         f0:17:9f:b4:f5:be:2b:f8:65:57:93:c6:5e:1f:9f:77:53:4c:
         ee:32:99:c8:71:43:72:98:e3:ab:90:41:86:59:2c:cf:16:f3:
         cc:78:20:18:11:44:99:72:32:3b:f6:a2:4e:7f:60:14:6d:22:
         86:15:be:cc:94:ab:fa:cb:b3:c3:fc:ed:5f:f8:30:6a:cf:67:
         99:75:9a:d7:0a:ff:42:9f:52:0d:1c:78:fb:50:8c:6e:a3:71:
         ed:b6:91:ab:d3:9b:51:f6:7f:58:39:a9:d5:37:53:86:99:8b:
         00:5f:2a:24:3d:55:db:07:f7:79:00:2b:7f:b0:d8:c4:7e:83:
         82:81:5c:4c:31:f8:63:f7:04:e9:f7:25:9e:56:0f:c1:99:7a:
         21:2f:b8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:16:04 2025 by rpki-client