Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3234382e302f32322d3234203d3e2031323339.roa
File:                     3230392e3230302e3234382e302f32322d3234203d3e2031323339.roa (raw, json)
Hash identifier:          9E3U9pvg5KRvV26JNTzdC6wXUhex59GoFA6H9/JLC6o=
Subject key identifier:   E7:A0:1F:02:A5:EE:7F:03:FF:93:BE:B2:27:CE:FD:43:6A:16:93:83
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       37D1ED43345501C455D403D83DD8B06000250C91
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3234382e302f32322d3234203d3e2031323339.roa
Signing time:             Mon 18 Jul 2022 14:09:52 +0000
ROA not before:           Mon 18 Jul 2022 14:04:52 +0000
ROA not after:            Mon 17 Jul 2023 14:09:52 +0000
asID:                     1239
IP address blocks:        209.200.248.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:d1:ed:43:34:55:01:c4:55:d4:03:d8:3d:d8:b0:60:00:25:0c:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:52 2022 GMT
            Not After : Jul 17 14:09:52 2023 GMT
        Subject: CN=E7A01F02A5EE7F03FF93BEB227CEFD436A169383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b4:6f:14:01:56:44:14:0e:e8:70:1d:64:df:
                    ed:1b:12:fd:49:57:1b:6b:bd:d6:14:4d:71:ad:42:
                    b0:bc:9e:dc:0c:32:8c:8d:08:ef:14:da:08:e7:0d:
                    f0:75:81:97:f6:7d:7b:ed:30:56:d1:4e:77:fb:bd:
                    83:79:53:1a:81:ac:35:95:4f:be:01:68:61:50:51:
                    4f:8f:1a:15:8e:af:4b:2f:e5:f4:33:fb:07:89:a2:
                    49:34:b3:9d:cd:9e:63:53:61:8a:62:00:07:06:6a:
                    1c:62:65:21:00:c7:e5:cf:fd:c7:c0:59:a0:39:9c:
                    76:f1:48:1b:f4:59:cc:3a:f7:a4:f8:a7:a3:5b:53:
                    e9:a2:30:88:03:7f:03:c5:df:3c:61:b6:b0:00:e9:
                    aa:99:03:27:54:a7:c3:11:95:09:4b:df:62:7a:41:
                    a3:d2:59:ea:09:6e:f4:2a:71:bf:29:46:76:62:1d:
                    82:45:a7:32:27:79:37:91:8d:ef:28:53:7d:6a:b0:
                    df:af:46:0c:2b:57:fc:ea:fb:86:89:f8:7f:fb:23:
                    90:bf:eb:24:bc:f6:6e:90:af:ef:f8:03:08:72:d1:
                    9d:61:92:20:c7:cb:5f:eb:68:10:7b:94:27:0f:e2:
                    6d:60:85:36:6d:ad:5d:c3:b4:a9:42:81:b3:8f:2d:
                    40:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A0:1F:02:A5:EE:7F:03:FF:93:BE:B2:27:CE:FD:43:6A:16:93:83
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3234382e302f32322d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:2a:76:18:4e:09:30:a3:d3:9f:8b:3f:27:a3:e3:84:61:46:
         75:a1:0f:de:d5:7d:4d:6a:9e:b8:0d:dc:29:03:8a:7a:ff:36:
         e4:d9:ac:b0:48:be:09:34:91:56:60:67:ce:77:6d:71:6f:48:
         c1:7c:3a:e0:40:ae:f3:92:bb:c6:17:eb:45:8d:c7:29:0c:fb:
         37:8b:2e:19:e1:2c:e3:5c:b1:a3:46:24:f4:a2:f9:5e:05:64:
         6f:7a:d4:ce:a3:65:ad:c6:eb:73:6b:06:2a:3f:1e:4b:57:c0:
         19:60:70:37:a1:d4:32:b4:4b:21:ab:46:4f:e7:a1:c8:d8:31:
         06:42:83:00:db:ab:c3:ce:a5:94:a5:33:bf:49:1a:96:01:ec:
         bd:03:a4:74:96:ec:e0:4b:69:5a:06:61:d7:14:80:21:01:0f:
         03:f0:b6:2f:05:a9:11:41:23:77:87:38:b1:68:4c:bf:b5:cf:
         12:6d:7e:56:26:3b:14:58:07:04:65:30:e6:79:f3:51:7e:d8:
         66:94:d9:0d:76:70:83:32:53:b0:89:ae:15:56:65:a7:fb:35:
         a3:e3:33:da:35:63:ce:81:bd:da:f3:68:76:f5:14:b4:9f:c7:
         10:34:d3:e3:56:8e:0d:66:9f:6e:35:02:6b:32:a4:f9:4f:14:
         63:80:a9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:25 2023 by rpki-client on console-ams.rpki-client.org