Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa
File:                     3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa (raw, json)
Hash identifier:          MJzB40PQ1Kx2VmxAq5CBPIgcqA7klbnTdKnmSSKvWJs=
Subject key identifier:   A8:39:B9:4B:8E:12:EE:1D:99:2B:8F:A8:18:9B:6C:01:15:86:9D:91
Certificate issuer:       /CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Certificate serial:       6CD4D360C1744717E2C179A40EF47E20E2B9AB07
Authority key identifier: F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa
Signing time:             Wed 01 Jun 2022 18:51:02 +0000
ROA not before:           Wed 01 Jun 2022 18:46:02 +0000
ROA not after:            Wed 31 May 2023 18:51:02 +0000
asID:                     399970
IP address blocks:        149.112.152.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:d4:d3:60:c1:74:47:17:e2:c1:79:a4:0e:f4:7e:20:e2:b9:ab:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
        Validity
            Not Before: Jun  1 18:46:02 2022 GMT
            Not After : May 31 18:51:02 2023 GMT
        Subject: CN=A839B94B8E12EE1D992B8FA8189B6C0115869D91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:2c:a9:cd:64:3d:b6:0b:ff:03:50:0e:02:
                    7a:07:43:3f:56:72:9d:de:bf:a0:13:08:0a:7b:35:
                    85:19:34:e0:76:f0:cf:4e:62:82:2a:60:87:c7:20:
                    41:6f:8b:05:29:46:86:4a:d2:cf:bf:30:2b:bb:bd:
                    f9:77:7b:4c:c0:63:86:c9:66:dd:ec:f8:7a:76:d8:
                    cb:45:49:49:10:cd:63:46:0a:f4:4f:b7:47:aa:42:
                    3c:e4:c3:3f:b7:73:38:1f:8d:ff:5e:f3:4b:c3:15:
                    f0:06:fb:06:62:80:fe:6e:84:ee:e7:51:cc:d4:31:
                    e4:b4:67:df:f9:1c:17:09:57:a0:5a:e2:3c:1f:21:
                    a0:19:7f:c0:0f:a2:e1:c1:4b:fb:45:e8:89:7e:b5:
                    1d:43:58:14:30:33:cb:57:bf:2b:9a:94:2e:c3:09:
                    e9:17:cc:d7:24:d1:8c:e4:0e:7b:b1:3d:52:f3:da:
                    b2:bf:21:05:46:de:98:ef:9b:c0:a8:0f:32:6b:4a:
                    1a:1b:29:b0:8d:75:e9:98:be:c5:6a:09:31:40:9f:
                    57:64:05:00:7e:57:54:1d:31:6c:8f:94:d7:5b:38:
                    78:c6:4a:ee:a4:0b:ad:5d:01:84:14:f0:77:c6:db:
                    6a:0b:81:90:38:89:e4:0f:8f:10:99:41:f0:56:37:
                    df:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:39:B9:4B:8E:12:EE:1D:99:2B:8F:A8:18:9B:6C:01:15:86:9D:91
            X509v3 Authority Key Identifier:
                keyid:F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135322e302f32332d3233203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:97:9c:66:44:6c:13:09:4e:00:b8:36:ce:6d:e3:60:ab:92:
         d1:56:76:62:c5:d1:61:7e:69:3b:14:30:b6:b2:48:c2:11:90:
         8a:1d:a9:76:6b:5e:09:08:69:a8:db:0c:a6:e5:f1:b2:b1:65:
         41:c1:51:9e:3b:3d:a2:24:71:75:04:11:18:f9:53:ee:f3:c5:
         e7:c6:02:37:15:e4:d1:59:15:f7:a9:99:ad:16:90:30:db:aa:
         02:7e:a5:4b:68:a0:20:10:d2:a1:db:60:58:be:72:a3:65:fe:
         5f:09:b3:d8:fe:12:6d:34:31:81:81:d4:5d:7c:bd:40:f0:d8:
         7c:58:0c:86:0a:f7:28:14:f4:5e:e5:00:83:87:3f:f9:bc:52:
         da:71:0d:c3:46:db:7e:66:44:9d:42:4d:ef:39:6a:08:c7:87:
         48:4d:5e:ed:30:1b:26:3c:c9:c1:a0:37:c1:29:99:36:03:b5:
         8b:e9:cc:90:35:8c:2e:1f:5e:8d:5d:5e:bb:9e:70:19:33:7f:
         96:24:03:32:c5:9b:42:a9:cc:5b:bf:d2:7d:fb:e3:74:31:7f:
         10:b0:38:e5:62:b5:eb:be:b0:88:c1:38:d4:9a:9f:39:dc:f1:
         1f:d2:0e:bd:a9:66:8b:27:fb:9b:f1:fe:9f:22:75:bd:1d:eb:
         b2:32:a1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org