Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa
File:                     3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa (raw, json)
Hash identifier:          HHwtHU6H7QX3E0hjB6OgCchtMaaJJ2j2Fynnum65naI=
Subject key identifier:   5C:BA:AD:86:EC:B7:F1:44:D0:FC:FD:19:B7:EF:8C:B2:7F:48:60:2E
Certificate issuer:       /CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
Certificate serial:       198AC3CD654D2200D5AC5AACB443AE7D36F55079
Authority key identifier: 2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa
Signing time:             Tue 31 May 2022 14:03:16 +0000
ROA not before:           Tue 31 May 2022 13:58:16 +0000
ROA not after:            Tue 30 May 2023 14:03:16 +0000
asID:                     399970
IP address blocks:        149.112.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8a:c3:cd:65:4d:22:00:d5:ac:5a:ac:b4:43:ae:7d:36:f5:50:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d
        Validity
            Not Before: May 31 13:58:16 2022 GMT
            Not After : May 30 14:03:16 2023 GMT
        Subject: CN=5CBAAD86ECB7F144D0FCFD19B7EF8CB27F48602E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b3:93:af:80:b7:4b:8c:94:8e:57:2f:41:79:
                    60:96:57:da:aa:73:25:6d:39:dd:bd:ef:33:25:b4:
                    cd:6f:21:11:8a:5f:60:97:76:bf:fd:fa:a7:f2:a6:
                    45:71:2e:b3:70:14:5d:0e:83:e3:4e:98:10:91:e9:
                    9b:c3:6e:8b:8d:9a:94:13:36:74:09:7e:fe:56:47:
                    32:85:6e:ce:50:6b:6f:78:84:a1:be:96:a7:78:95:
                    13:ac:89:0a:36:27:fa:fe:8d:51:50:5b:fc:33:12:
                    ba:eb:09:14:d6:f0:6e:13:25:27:fd:2a:10:3b:93:
                    3c:1b:3b:83:2b:71:dc:21:fb:ec:76:dc:6f:6c:89:
                    36:e7:82:32:4d:8e:39:71:3d:e0:2c:a5:b5:20:16:
                    29:1a:ef:1a:be:26:e3:f2:0a:33:ed:37:84:8f:89:
                    f0:b4:85:d8:e5:d6:75:40:44:f9:e3:ce:4c:53:b9:
                    06:33:14:a3:7a:38:75:83:97:c7:e2:27:d5:e0:a7:
                    41:d8:a0:d1:e3:8d:12:85:d5:9b:b9:42:04:f0:55:
                    0c:1a:18:76:ed:9a:11:f5:da:5b:40:55:42:0d:81:
                    a7:7e:ed:65:6c:91:e0:a4:80:e3:ee:da:3a:32:8d:
                    d6:d7:9f:8d:01:26:d6:f4:ff:c3:2c:16:51:66:90:
                    d8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:BA:AD:86:EC:B7:F1:44:D0:FC:FD:19:B7:EF:8C:B2:7F:48:60:2E
            X509v3 Authority Key Identifier:
                keyid:2F:73:A9:9B:8E:85:5F:24:56:A2:8F:97:3B:21:ED:7C:86:0B:E7:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/2F73A99B8E855F2456A28F973B21ED7C860BE7AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/11be392c-082c-49f9-bb64-29171ecbf815/fcb20f59664cb55ae6b083c7ebca26dad7f61e4a07baeb501d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca55401811a62cf970d86/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:cf:0f:ea:a1:d2:9c:d6:11:95:65:7d:d3:7f:9e:bb:92:8d:
         e3:d7:cc:99:62:50:bf:d6:09:a0:b3:23:5f:1b:8d:58:45:91:
         e5:ac:32:45:01:03:c3:cd:a6:29:fe:14:e4:1a:18:2d:ab:5f:
         60:b2:0b:74:84:c2:3d:c6:98:3e:c4:13:01:a8:82:4e:59:94:
         85:4f:53:9b:ad:54:fc:b9:0d:3d:60:02:c7:d2:16:fd:e2:e8:
         0f:de:b8:36:1e:aa:13:1a:82:7e:4b:78:76:44:08:08:5e:ef:
         0d:5a:04:71:c3:f8:30:87:d6:0a:50:98:0e:4c:22:73:ae:f0:
         50:bb:91:6a:da:20:31:ef:bf:da:a0:fa:44:fb:75:45:b5:76:
         71:fe:c0:5d:ff:b0:b2:0d:67:61:30:ee:d8:6d:3d:88:f2:57:
         07:18:21:6b:f4:86:ab:1a:7e:fa:a3:9a:f2:95:4e:32:83:ce:
         41:4f:13:d7:89:35:69:5c:12:88:6e:bf:fc:2c:5d:f5:5a:93:
         6a:77:30:8d:60:53:72:2b:5e:ab:00:33:19:55:84:c7:7b:b7:
         4a:dc:72:76:9e:9b:d3:b9:62:8f:86:20:9a:5e:29:b5:11:7f:
         69:f7:b5:7d:f2:4e:7f:89:9d:82:5c:6e:98:77:87:39:27:28:
         b2:dc:4c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:39 2024 by rpki-client on console-ams.rpki-client.org