Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135342e302f32332d3233203d3e20333939393730.roa
File:                     3134392e3131322e3135342e302f32332d3233203d3e20333939393730.roa (raw, json)
Hash identifier:          g1ovZPGUNGD9iJkSqCUZbEWHSC7Beo+UMM7f/DwsH+Q=
Subject key identifier:   D0:5F:95:97:78:E5:DC:36:70:C6:1E:25:08:3B:A1:52:A2:2D:5A:C6
Certificate issuer:       /CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
Certificate serial:       0177AF245DA6BC29DCFF7D67E3EC2E7063EA0C5A
Authority key identifier: F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135342e302f32332d3233203d3e20333939393730.roa
Signing time:             Wed 01 Jun 2022 18:50:48 +0000
ROA not before:           Wed 01 Jun 2022 18:45:48 +0000
ROA not after:            Wed 31 May 2023 18:50:48 +0000
asID:                     399970
IP address blocks:        149.112.154.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:77:af:24:5d:a6:bc:29:dc:ff:7d:67:e3:ec:2e:70:63:ea:0c:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64
        Validity
            Not Before: Jun  1 18:45:48 2022 GMT
            Not After : May 31 18:50:48 2023 GMT
        Subject: CN=D05F959778E5DC3670C61E25083BA152A22D5AC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:7c:f0:e0:ed:01:5e:0f:d9:14:b6:9c:7d:
                    27:f6:6d:6b:40:54:cb:24:6b:5d:ac:5e:17:78:91:
                    67:8b:79:9d:7d:be:06:55:35:14:b3:50:8d:ab:3b:
                    a5:d9:90:58:3f:30:39:e4:1d:8a:61:4f:56:87:e8:
                    01:75:e4:2c:75:26:1d:54:ff:ef:52:39:67:76:82:
                    01:50:29:c3:36:82:04:eb:1c:54:a8:c3:35:31:a5:
                    bf:a5:49:e3:45:cb:a8:5e:a5:62:67:da:3e:2d:18:
                    05:c3:df:8a:05:f8:0b:53:c6:bd:fc:ac:eb:70:6b:
                    d9:6d:46:8b:d4:41:f0:c5:d6:6d:68:82:14:35:70:
                    8a:12:22:3c:07:ce:07:81:72:28:fb:21:cd:af:21:
                    68:39:8a:a9:91:dd:7b:65:25:4e:58:9f:8d:c7:b7:
                    6c:ca:68:6d:30:61:75:85:5b:be:cd:cf:11:81:52:
                    9b:61:9a:f2:7e:b6:b5:42:e3:c4:02:60:be:fe:0c:
                    63:06:f5:da:5e:1f:83:08:53:9e:5f:09:b3:60:75:
                    9f:07:cc:12:2b:78:7e:db:bb:04:f2:e9:fa:db:46:
                    c0:30:c5:33:3a:7f:50:1f:a1:86:50:f6:a9:73:95:
                    9c:9f:74:32:9c:c0:07:ae:bb:fb:5e:37:cd:66:e0:
                    8a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5F:95:97:78:E5:DC:36:70:C6:1E:25:08:3B:A1:52:A2:2D:5A:C6
            X509v3 Authority Key Identifier:
                keyid:F4:A4:FB:0F:BD:32:9C:DF:C5:65:46:49:66:CF:13:19:46:9E:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/F4A4FB0FBD329CDFC565464966CF1319469E33B5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8d421ac-3103-47a1-91ac-ed4e287bc3c8/fcb20f596649f6f99762669922d3a91c5a15e31d08b352fb64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf80fca554018120985eeb17ca/0/3134392e3131322e3135342e302f32332d3233203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:54:c0:d9:88:ec:36:e3:c9:32:4b:2a:65:8f:8c:6a:c6:63:
         85:46:86:f7:dc:bf:9f:b0:3d:8c:e3:8e:49:bf:86:73:ac:af:
         7b:3a:17:1a:01:d8:34:fd:b6:bc:e8:a6:27:49:b1:61:80:5f:
         9a:dd:d7:b2:d3:77:f9:10:04:42:e5:b0:40:72:f2:b0:f2:86:
         b8:f5:b7:f1:bd:66:2c:05:50:3f:e0:ab:57:df:9b:fe:04:79:
         6e:83:dc:b7:9b:20:ba:b4:a6:27:1c:59:20:8f:e4:6c:7f:c0:
         0d:a1:3d:62:a5:51:1c:17:47:17:6b:2b:eb:c5:d0:81:fe:51:
         c2:91:b5:95:68:fd:27:7f:c3:87:ac:09:2e:ad:27:aa:03:b8:
         5a:8c:d5:59:28:d5:aa:67:ec:7e:71:61:9d:db:38:a3:f6:38:
         eb:21:66:78:6d:76:a6:62:30:8a:74:9f:d4:0b:bd:0e:3c:0f:
         df:85:81:65:b5:94:81:13:6e:dc:3a:43:32:38:22:11:4f:24:
         81:60:8d:97:2b:54:aa:44:a6:ff:a4:ed:ed:99:87:3e:5d:e2:
         4f:85:82:04:cf:b7:a1:29:3d:1c:cc:7a:17:74:37:85:32:f4:
         40:88:d2:46:5f:db:71:72:96:99:4d:ba:2c:41:7d:70:b2:35:
         06:54:23:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:39 2024 by rpki-client on console-ams.rpki-client.org