Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/32332e3137352e3139322e302f32342d3235203d3e203534343736.roa
File:                     32332e3137352e3139322e302f32342d3235203d3e203534343736.roa (raw, json)
Hash identifier:          QEeEGBcW72xDl1D4PSHySCSqmWJ9JF8hfcLFte9wK+I=
Subject key identifier:   75:42:A1:7F:5A:EA:E6:57:F1:05:1F:BA:8C:86:E3:31:9D:41:2E:6E
Certificate issuer:       /CN=63ef6ba7c76b37479a1443f2722df1b18015d7215cb64c93c6
Certificate serial:       0347D9FDFB1AAE750704F6AF03721C46F9AC0754
Authority key identifier: 53:9C:2C:38:92:8E:8E:63:12:F7:BB:09:19:EC:F9:FA:DB:50:C2:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/63ef6ba7c76b37479a1443f2722df1b18015d7215cb64c93c6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/32332e3137352e3139322e302f32342d3235203d3e203534343736.roa
Signing time:             Tue 09 Jul 2024 14:07:54 +0000
ROA not before:           Tue 09 Jul 2024 14:02:54 +0000
ROA not after:            Tue 08 Jul 2025 14:07:54 +0000
asID:                     54476
IP address blocks:        23.175.192.0/24 maxlen: 25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:47:d9:fd:fb:1a:ae:75:07:04:f6:af:03:72:1c:46:f9:ac:07:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63ef6ba7c76b37479a1443f2722df1b18015d7215cb64c93c6
        Validity
            Not Before: Jul  9 14:02:54 2024 GMT
            Not After : Jul  8 14:07:54 2025 GMT
        Subject: CN=7542A17F5AEAE657F1051FBA8C86E3319D412E6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:17:83:78:28:90:ba:6d:43:06:8a:47:85:
                    aa:aa:3e:6e:91:c6:07:f1:77:72:c9:e4:d8:54:16:
                    15:e8:79:e5:2d:70:e3:71:24:06:20:1c:ce:ab:be:
                    3e:00:2a:df:15:c0:73:d0:38:bf:f0:c7:98:48:ab:
                    4f:60:52:88:9a:14:25:37:ae:a5:c3:6d:01:ef:b6:
                    07:e1:09:ce:2f:d5:42:21:d2:57:e2:c2:e8:96:43:
                    fe:d6:c8:84:16:5f:21:42:70:f2:a8:d1:60:07:fe:
                    41:67:f3:c3:71:58:b2:e7:3b:5b:e6:94:9b:f9:a8:
                    eb:86:37:0f:ec:46:bb:cc:b4:83:fe:02:a2:89:ad:
                    42:e7:0a:db:d7:02:8e:f5:f6:b9:72:f1:38:8c:f7:
                    6f:1a:33:8c:8c:cc:8f:f3:44:9c:93:3d:91:b5:50:
                    1f:52:7e:ed:42:e6:54:04:0d:c7:e1:1c:89:2d:b5:
                    a3:f3:bc:22:04:1c:dd:53:5b:83:0c:6f:52:3e:3b:
                    73:d0:81:a0:a4:8b:58:e1:9c:95:e9:6b:99:2a:a7:
                    a9:3d:3c:1a:49:35:3d:ee:ef:aa:a3:7d:ea:83:93:
                    b3:95:a7:2c:08:bf:f2:5d:81:45:51:40:72:d5:cd:
                    38:d4:0f:89:3e:87:54:17:98:91:66:2d:0a:a3:99:
                    50:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:42:A1:7F:5A:EA:E6:57:F1:05:1F:BA:8C:86:E3:31:9D:41:2E:6E
            X509v3 Authority Key Identifier:
                keyid:53:9C:2C:38:92:8E:8E:63:12:F7:BB:09:19:EC:F9:FA:DB:50:C2:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/539C2C38928E8E6312F7BB0919ECF9FADB50C2B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d7e20303-2390-47a7-b89c-842367be4584/63ef6ba7c76b37479a1443f2722df1b18015d7215cb64c93c6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf7f518c5d017f949e0c8c42f5/0/32332e3137352e3139322e302f32342d3235203d3e203534343736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.175.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:12:cc:4c:0c:aa:01:a0:0d:ce:90:da:4f:b6:40:2a:91:90:
         1a:3c:41:e6:be:ec:58:7d:82:0c:32:90:6a:0f:7f:35:d4:cd:
         88:ed:06:34:74:ea:aa:16:01:6e:e8:05:22:a3:08:6a:09:8e:
         3b:c7:50:fd:84:ed:69:7b:06:da:a4:b9:d1:df:da:6e:90:16:
         6a:8d:e1:55:55:3f:b6:4a:5c:e0:bf:69:24:5e:d5:0e:e0:13:
         54:23:66:80:d2:a9:8f:9d:2a:bb:2b:5c:7c:9f:bb:cb:fa:da:
         32:87:10:1c:31:2b:10:7e:fa:71:c3:b4:4b:c1:dc:d0:04:f7:
         e0:ec:0c:16:b8:9e:fb:fa:e5:46:4d:03:d2:4f:08:20:33:ee:
         3b:08:f3:91:fa:42:e0:45:f7:ae:e4:46:af:ca:b4:a6:4e:8c:
         f2:f2:09:89:54:21:ec:ea:b4:ea:d8:31:0c:fe:c4:c2:65:41:
         cb:02:eb:3c:90:2a:0f:b0:e3:a7:c0:8f:bd:30:e6:8d:db:fd:
         b0:9c:8f:21:21:64:ad:c0:5f:4e:a3:c6:11:93:79:dc:30:a2:
         f1:97:11:c2:a3:2f:30:6c:8b:27:ad:f9:3e:f7:57:24:e2:92:
         58:20:d4:2d:46:39:0d:58:49:a8:7c:fb:3b:0c:a9:b8:1b:58:
         6a:58:06:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 1 16:20:17 2024 by rpki-client on console-fra.rpki-client.org