Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235332e302f32342d3234203d3e2037303138.roa
File:                     3230392e3230302e3235332e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          U1cnoaEpbVwoUyLuejHQWywPo+hN76S8JJ/l+gMdqbI=
Subject key identifier:   C6:41:9D:BD:12:2C:E5:0B:A4:1A:2E:DB:00:3B:65:CC:38:AA:72:53
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       1E99248531D66BEF9E82CA653506F77AE16AC99A
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235332e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 18 Jul 2022 14:09:58 +0000
ROA not before:           Mon 18 Jul 2022 14:04:58 +0000
ROA not after:            Mon 17 Jul 2023 14:09:58 +0000
asID:                     7018
IP address blocks:        209.200.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:99:24:85:31:d6:6b:ef:9e:82:ca:65:35:06:f7:7a:e1:6a:c9:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:58 2022 GMT
            Not After : Jul 17 14:09:58 2023 GMT
        Subject: CN=C6419DBD122CE50BA41A2EDB003B65CC38AA7253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:89:18:e7:ec:1f:97:73:98:e1:49:e6:f5:98:
                    ff:4a:dc:1d:62:f0:73:71:0c:4d:07:b9:46:ea:d3:
                    48:72:ac:ca:71:d4:a8:b0:59:bf:19:68:c7:89:7f:
                    4e:e4:0d:ad:32:e4:4b:aa:d0:a5:89:69:05:6c:4a:
                    67:ed:c1:b0:cb:9a:f1:9c:46:3d:90:6d:3d:37:0b:
                    aa:b8:d3:8e:79:10:45:39:e0:0e:fd:7a:18:b7:08:
                    41:47:52:73:0c:7e:54:75:3a:91:7b:a1:97:8e:7b:
                    43:e1:fd:0c:83:8b:7d:d7:9e:7e:1d:28:a4:8a:5f:
                    cd:9a:a6:cb:3a:93:db:c3:99:97:65:5c:de:0a:01:
                    dc:60:0d:87:a1:6b:81:9c:df:c3:b8:ce:48:c9:88:
                    27:4d:31:53:49:49:ec:96:e2:14:52:39:b8:f2:c0:
                    42:88:54:1f:51:78:a7:ae:e1:01:5e:7b:ef:40:05:
                    ea:0e:e1:cb:f1:42:37:1b:e1:b2:c5:d3:42:af:4f:
                    ae:ba:2b:ed:8f:9e:74:c7:66:81:80:64:f2:48:fa:
                    86:83:20:fd:28:7c:01:01:c1:88:22:87:4d:94:41:
                    f5:61:fb:bf:e5:11:07:ea:7c:7c:c6:a3:f8:f0:a0:
                    24:b5:2d:97:d2:77:55:27:9c:dd:98:11:02:55:0e:
                    1e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:41:9D:BD:12:2C:E5:0B:A4:1A:2E:DB:00:3B:65:CC:38:AA:72:53
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3235332e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:43:fd:e0:0e:fa:8d:fe:0e:11:ab:20:7e:32:05:85:9e:8b:
         0f:a2:cb:78:58:0c:02:38:cf:b6:22:85:58:1b:52:b9:59:cc:
         fe:69:d7:e2:94:b1:60:fb:46:10:85:3a:48:e7:69:b7:71:ee:
         54:d8:14:85:54:c3:15:1b:13:1c:08:19:28:98:28:d1:65:0b:
         d1:05:76:8a:a8:cb:29:60:3a:2e:8e:ba:e6:75:f5:c1:7a:5f:
         ea:04:c0:da:10:45:cc:74:e0:b9:95:45:c8:20:e0:e0:58:46:
         d6:27:85:8e:fd:e7:4a:22:fb:3e:ef:29:b7:94:d3:6d:57:5c:
         4b:5a:0b:e0:64:d5:6f:35:7c:38:9c:ce:2a:3e:a6:56:9e:32:
         f3:fe:fa:29:dd:4e:4d:8f:07:3f:e7:7f:3f:83:85:66:87:cf:
         bf:8f:75:1e:ff:f9:5b:e2:7b:28:ea:58:80:cd:d0:cb:7b:e9:
         73:1c:3c:07:b4:96:d1:72:40:f0:dc:8d:5b:ca:66:8f:5d:ce:
         0b:20:ba:00:16:31:14:59:6b:23:bc:b0:a1:98:37:b1:50:77:
         9d:9f:6f:09:ea:99:bd:2f:37:24:e9:89:ed:d1:be:17:d2:94:
         e3:6d:7e:ef:11:d9:ec:f4:bd:29:6c:6f:8a:af:75:be:4b:85:
         ca:04:ed:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:25 2023 by rpki-client on console-ams.rpki-client.org