Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3231362e302f32322d3234203d3e2031323339.roa
File:                     3231362e3232372e3231362e302f32322d3234203d3e2031323339.roa (raw, json)
Hash identifier:          ktE4334m2x3Yu0p1NZCfnvGMC+Ek9bGaxeJuw3DIJlM=
Subject key identifier:   16:BE:00:D4:96:55:6F:D4:F7:F4:E2:F6:28:F0:C7:81:35:1A:53:CF
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       504FA7D087CA4AF92B4E3A40CB69F2E724F31EE9
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3231362e302f32322d3234203d3e2031323339.roa
Signing time:             Mon 18 Jul 2022 14:10:03 +0000
ROA not before:           Mon 18 Jul 2022 14:05:03 +0000
ROA not after:            Mon 17 Jul 2023 14:10:03 +0000
asID:                     1239
IP address blocks:        216.227.216.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4f:a7:d0:87:ca:4a:f9:2b:4e:3a:40:cb:69:f2:e7:24:f3:1e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:05:03 2022 GMT
            Not After : Jul 17 14:10:03 2023 GMT
        Subject: CN=16BE00D496556FD4F7F4E2F628F0C781351A53CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:33:63:91:43:42:f2:56:45:bc:16:4c:16:18:
                    b1:40:bb:51:78:33:7d:35:dd:50:f3:17:b1:81:c6:
                    3b:09:c0:4b:a2:45:e0:8b:0d:85:72:d7:67:a0:ae:
                    9f:af:b4:d4:0e:d5:37:8b:f5:22:eb:a5:e2:50:20:
                    99:a8:7c:e4:dd:f7:c1:e7:f5:16:cf:ed:df:20:6a:
                    d8:4f:16:41:37:6f:e2:20:3e:53:91:e6:b8:f3:e5:
                    88:09:dc:5d:a1:4d:e2:1f:3a:2f:e1:10:59:e6:50:
                    7c:e8:9d:04:3e:fa:3f:2c:91:e6:76:0e:30:e0:9f:
                    a1:36:b1:4b:76:7b:01:83:38:50:bb:02:8b:84:77:
                    7e:e7:e5:ff:1a:73:5f:46:b1:b8:72:0e:b7:e6:96:
                    ca:f1:50:f2:56:1a:bf:60:5e:e2:8e:d9:67:24:07:
                    39:3a:9d:97:26:72:6a:2c:39:31:7e:a4:49:2e:87:
                    6e:66:48:66:95:dd:9d:5d:2c:44:28:b3:0c:90:25:
                    d3:e5:77:7b:fd:33:f0:89:3f:be:46:96:f2:40:e0:
                    f6:a0:d3:32:75:45:bd:ae:83:47:1f:ea:de:e4:9d:
                    ac:84:f0:67:69:02:06:54:44:3c:9e:45:f5:b3:cc:
                    d5:05:64:64:15:bd:a2:bc:9c:40:17:52:cd:82:da:
                    85:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BE:00:D4:96:55:6F:D4:F7:F4:E2:F6:28:F0:C7:81:35:1A:53:CF
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3231362e3232372e3231362e302f32322d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5c:7b:4c:87:05:11:ff:8b:ec:f6:a1:96:b9:2a:95:a0:75:9e:
         ba:1f:64:26:42:3f:af:43:83:d4:2c:04:a7:0d:96:f6:57:22:
         81:f5:3c:cb:73:15:fb:cb:4a:09:9a:08:1f:1e:87:a4:36:11:
         61:e9:8d:73:30:fc:bf:21:7d:f2:d4:ea:f6:f5:35:ff:7d:64:
         54:4b:2e:5d:ce:5d:08:df:02:7a:a4:0b:00:f5:50:50:1e:48:
         dd:00:17:f4:b2:a5:8f:8c:b5:4c:6d:90:f6:79:00:ab:14:40:
         df:b3:41:ad:24:d1:4e:03:bb:dd:b9:54:a9:87:6e:81:9d:a4:
         59:e4:b6:08:34:21:31:04:c8:a5:5e:2c:4b:8a:57:e6:b2:39:
         39:5d:cd:6c:25:2e:37:eb:ab:12:d9:29:45:89:b5:16:8a:56:
         51:1d:55:d4:81:89:e7:50:64:a2:9e:40:fd:d8:57:1c:71:52:
         7e:e3:ed:b3:5d:87:74:13:2c:60:6a:2b:af:63:5d:3e:56:6e:
         f6:9b:81:28:6f:53:8d:ea:51:db:2d:3b:a5:07:c1:67:d4:1b:
         d1:9d:80:4f:bd:cc:46:cc:d9:ec:73:9a:8e:68:b7:00:f8:49:
         7d:63:66:a5:64:8d:02:59:75:4e:c3:94:54:df:08:2e:ae:99:
         40:c0:71:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:25 2023 by rpki-client on console-ams.rpki-client.org