Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3234362e302f32342d3234203d3e203630373231.roa
File:                     3230392e3230302e3234362e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          teG0bhVGY8vNClIXnJdcQsa00GFlnCVqcfyFIvnyPSM=
Subject key identifier:   DB:3B:90:C6:63:16:9E:08:27:0E:29:0A:D8:0F:19:E7:2F:39:FF:BD
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       6823233183C604C454BF62A430E6CBBA3A24F9A8
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3234362e302f32342d3234203d3e203630373231.roa
Signing time:             Fri 25 Nov 2022 04:13:53 +0000
ROA not before:           Fri 25 Nov 2022 04:08:53 +0000
ROA not after:            Fri 24 Nov 2023 04:13:53 +0000
asID:                     60721
IP address blocks:        209.200.246.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:23:23:31:83:c6:04:c4:54:bf:62:a4:30:e6:cb:ba:3a:24:f9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 25 04:08:53 2022 GMT
            Not After : Nov 24 04:13:53 2023 GMT
        Subject: CN=DB3B90C663169E08270E290AD80F19E72F39FFBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:de:ba:04:df:b3:a5:6c:d8:34:0c:d6:20:7a:
                    20:db:1e:1c:e0:6c:48:cf:8a:70:22:40:bb:df:cd:
                    5e:58:ef:18:b4:27:ea:a0:e8:95:26:cb:98:05:b3:
                    4c:f4:6b:83:a4:3a:2a:6b:1b:7d:65:a9:ca:18:b0:
                    8e:95:8b:94:dd:2f:36:8d:44:50:5a:b0:ab:cb:33:
                    2f:e6:9e:05:01:0f:35:47:61:61:b7:2d:48:e4:6f:
                    ef:d6:92:c0:f0:c2:0e:99:2d:65:db:b2:2b:f5:17:
                    dd:1a:dd:c7:d0:51:76:b9:4e:30:a0:e6:6a:f0:3d:
                    59:72:eb:24:d6:5d:9f:ca:ee:34:d1:70:d6:94:a9:
                    04:f4:1c:a4:a0:28:9f:de:ac:37:50:9a:3d:4c:f9:
                    1a:17:a5:2d:b8:67:ee:f1:36:5d:c7:81:33:4b:07:
                    df:e5:dc:ba:81:b6:1b:f4:39:8d:98:dc:f9:b8:16:
                    dc:92:a6:76:6b:88:fe:02:be:8c:61:4d:0e:9e:43:
                    b6:3c:bd:bb:ac:02:bc:dc:65:2e:33:77:57:39:64:
                    ee:39:b1:a4:60:9c:74:68:19:95:29:b5:1d:28:c9:
                    84:b2:08:80:79:65:1d:04:74:67:30:43:1a:87:1c:
                    05:00:0a:b9:89:d9:d9:7c:75:ff:47:c3:a1:2f:0c:
                    41:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:3B:90:C6:63:16:9E:08:27:0E:29:0A:D8:0F:19:E7:2F:39:FF:BD
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3234362e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:ee:1f:68:89:f7:dd:9b:89:f1:e1:9a:ba:43:f3:af:38:a5:
         cd:8b:47:64:2b:46:25:15:95:d3:19:53:a6:d3:3e:dd:7d:0f:
         6e:b9:5f:d3:fc:1e:0b:50:7d:a8:61:ef:1a:49:8b:78:e2:81:
         60:69:80:42:72:79:2b:97:15:05:20:a4:f5:b0:8d:3d:13:03:
         81:80:04:cf:39:20:06:40:c7:ba:8b:93:51:f3:bd:04:3e:73:
         95:09:01:3d:3d:84:9b:40:af:f1:d9:91:58:4e:4a:0f:13:55:
         cf:f0:8d:78:b7:2c:c5:66:88:1a:dc:ba:8e:ad:93:d3:8e:c2:
         cc:f0:42:56:37:8e:cf:03:60:96:84:a3:ff:71:46:ab:66:e9:
         2b:9f:14:79:1d:14:f2:4d:57:96:b7:ce:96:de:89:dc:17:f4:
         16:fb:f9:3d:b6:bb:85:b2:2e:1b:54:d6:07:c1:9f:03:8b:68:
         79:af:dd:38:16:64:8f:81:cd:09:bc:48:c0:88:9d:6a:47:f1:
         d9:64:bb:c1:35:3a:03:d5:05:fa:c1:b1:4b:45:49:3c:40:98:
         58:b9:4e:d6:3d:b5:6a:1b:9d:c1:e9:32:65:af:30:0d:fe:06:
         53:65:3c:06:47:fe:0d:33:d0:2f:03:8a:e9:87:8d:3c:d8:8e:
         3a:80:cb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:25 2023 by rpki-client on console-ams.rpki-client.org