Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          5hvGIqTS+De/d7GUfosJLxoR+Mn0T/JVEXeZgzb8UlQ=
Subject key identifier:   FB:BF:F9:86:DB:3A:EA:33:52:78:F1:E7:53:D3:32:00:64:98:A5:DE
Certificate issuer:       /CN=fcb20f596673d76a683a52780a4c67c8bf3839359401083c80
Certificate serial:       5C6EEE5C336212F2A93AD3EAFF5C256E71479CAB
Authority key identifier: 7A:BF:EE:56:33:86:64:B9:23:FD:18:9A:BE:A8:4B:AB:F6:92:BB:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7cf1b87c-0c72-457f-a005-0d2e66e6ec87/fcb20f596673d76a683a52780a4c67c8bf3839359401083c80.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
Signing time:             Mon 23 May 2022 15:17:24 +0000
ROA not before:           Mon 23 May 2022 15:12:24 +0000
ROA not after:            Mon 22 May 2023 15:17:24 +0000
asID:                     399970
IP address blocks:        149.112.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:6e:ee:5c:33:62:12:f2:a9:3a:d3:ea:ff:5c:25:6e:71:47:9c:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596673d76a683a52780a4c67c8bf3839359401083c80
        Validity
            Not Before: May 23 15:12:24 2022 GMT
            Not After : May 22 15:17:24 2023 GMT
        Subject: CN=FBBFF986DB3AEA335278F1E753D332006498A5DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:74:1d:53:13:01:13:38:b3:15:a5:13:6d:
                    80:6f:4f:71:2f:3d:4f:b7:31:fd:fb:b5:1d:12:d7:
                    d1:b8:8f:92:d5:30:4b:db:8d:b8:4b:be:ab:8a:61:
                    51:b6:0c:0c:81:b7:3a:a7:e9:04:48:c7:1e:97:50:
                    55:1d:be:9c:1e:cf:29:9d:0d:8a:38:42:7c:94:a4:
                    38:e0:5c:1d:99:d7:db:0f:4c:95:59:88:86:2b:21:
                    d1:78:60:b0:7c:3b:6a:fd:cb:25:2d:77:b8:e0:79:
                    b4:21:8d:70:ca:89:0b:db:e2:03:57:9b:23:98:3b:
                    e2:84:71:3f:16:bc:00:5d:a8:ac:be:3d:d5:87:1b:
                    c4:4b:2c:58:7c:a7:c4:3c:e8:8a:41:c6:de:46:1d:
                    22:aa:84:4e:fb:a9:ac:0b:38:0b:9a:17:70:fc:f5:
                    b0:56:52:18:84:13:16:67:72:ab:5f:4e:ee:c9:90:
                    54:66:c4:44:df:62:9f:54:76:d6:99:78:2e:9d:44:
                    c6:5a:d2:06:06:54:27:b5:bd:68:88:5d:5b:5e:8e:
                    8f:0d:6f:95:4f:c7:95:5d:2e:aa:2a:51:6a:63:f4:
                    eb:27:8f:3c:c7:d7:dd:87:64:be:fd:b6:a1:05:12:
                    15:40:a3:93:46:05:70:57:c5:e7:29:a8:d2:4a:17:
                    c5:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BF:F9:86:DB:3A:EA:33:52:78:F1:E7:53:D3:32:00:64:98:A5:DE
            X509v3 Authority Key Identifier:
                keyid:7A:BF:EE:56:33:86:64:B9:23:FD:18:9A:BE:A8:4B:AB:F6:92:BB:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0/7ABFEE56338664B923FD189ABEA84BABF692BB07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7cf1b87c-0c72-457f-a005-0d2e66e6ec87/fcb20f596673d76a683a52780a4c67c8bf3839359401083c80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80aeb4f40180f10e030531b8/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         df:91:d9:e9:7b:87:1f:90:a4:75:b7:60:16:0c:0a:76:ab:76:
         47:9c:33:94:cf:3a:ab:0b:de:ad:91:eb:56:6b:0f:56:99:4e:
         42:49:60:78:41:7d:9e:7f:05:27:0c:50:a1:a6:a9:5c:a6:32:
         19:6c:3a:79:c0:76:56:8b:e1:03:ab:64:93:79:4f:69:e3:4f:
         b4:e2:e6:f5:89:c9:36:5d:08:9c:41:d8:4e:5a:d3:64:b3:9f:
         3a:cd:32:e7:ed:dd:0a:c6:df:ca:48:24:3b:58:1c:7e:3d:76:
         67:2a:4f:c8:42:1a:93:d1:95:36:7b:fb:7e:e3:40:57:6d:a1:
         a6:2c:ed:09:93:f6:ad:57:2e:fd:ce:c5:6c:8b:6a:d2:33:ca:
         65:29:29:10:49:cb:79:53:e1:47:a1:3c:7e:dd:50:0b:09:e6:
         fc:96:6e:d3:0d:7d:34:a3:a0:3d:53:b3:91:3e:bd:fe:e7:11:
         31:ad:5c:42:d3:fd:18:57:a2:dd:98:6f:79:06:ac:a3:df:c2:
         ad:0e:d2:3b:f6:3a:7c:5e:d7:95:50:6f:c5:63:27:94:09:ce:
         8e:9b:43:b3:53:81:18:63:ac:7c:8a:a6:03:5e:49:c5:a4:ec:
         d1:51:86:00:78:99:07:6c:65:36:2c:62:d4:5a:a7:b3:db:d6:
         67:05:47:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org