Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/38392e33352e39322e302f32332d3234203d3e2037303138.roa
File:                     38392e33352e39322e302f32332d3234203d3e2037303138.roa (raw, json)
Hash identifier:          R59KBGJpsRBD41pUA9WMK/EhaG6TTJqXuHEQGjkRcl0=
Subject key identifier:   F9:A1:25:CD:BE:50:A4:8A:75:53:A9:2D:5C:2A:43:DC:9A:A9:73:48
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       34F6FD2E4009415AB4B1256111E79624125DE66F
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/38392e33352e39322e302f32332d3234203d3e2037303138.roa
Signing time:             Mon 18 Jul 2022 14:10:06 +0000
ROA not before:           Mon 18 Jul 2022 14:05:06 +0000
ROA not after:            Mon 17 Jul 2023 14:10:06 +0000
asID:                     7018
IP address blocks:        89.35.92.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f6:fd:2e:40:09:41:5a:b4:b1:25:61:11:e7:96:24:12:5d:e6:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:05:06 2022 GMT
            Not After : Jul 17 14:10:06 2023 GMT
        Subject: CN=F9A125CDBE50A48A7553A92D5C2A43DC9AA97348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:bd:37:27:61:f8:c4:6e:ba:38:51:91:3c:
                    61:d9:e7:be:54:32:ae:fe:54:1f:50:e6:e3:0d:54:
                    98:6c:ec:82:6c:1f:2b:bc:a6:00:22:c9:a2:df:a4:
                    5d:8b:92:44:47:c1:5d:5b:37:d4:f9:16:cc:54:32:
                    65:7e:e0:14:c2:8f:5d:2d:63:62:8e:a8:e3:b6:a5:
                    a8:e6:21:f1:cb:59:3c:bd:f7:41:e2:c8:f2:6b:b7:
                    9b:8a:04:c7:f2:7e:ff:3a:32:da:2e:c3:a4:ff:f0:
                    71:20:f5:4a:2c:28:53:92:96:02:0e:db:9b:f4:6a:
                    e6:63:67:7f:21:49:09:dc:5e:bb:01:e4:3f:4a:a0:
                    27:a3:50:53:ab:ea:01:45:f8:f3:1a:c5:97:e4:06:
                    85:15:9e:29:7d:37:00:cd:08:3d:95:77:a9:57:be:
                    54:e9:d4:c3:1c:b0:f5:24:18:30:43:55:ec:25:33:
                    b1:6c:a8:3d:45:75:29:90:12:1d:8c:f0:2a:40:f3:
                    e1:77:19:5f:2d:50:c4:4f:f4:25:78:68:c0:38:6d:
                    85:48:c7:6e:6b:01:d9:95:14:a3:87:e4:c7:60:c9:
                    c1:e0:b7:b2:45:8c:5b:74:c2:ab:7a:b7:ba:e1:48:
                    20:54:8a:7d:a9:2a:8b:4a:04:08:d4:9c:d1:c9:02:
                    d3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A1:25:CD:BE:50:A4:8A:75:53:A9:2D:5C:2A:43:DC:9A:A9:73:48
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/38392e33352e39322e302f32332d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.35.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:4f:3a:47:db:67:ae:2a:ec:dd:23:12:e5:0a:a4:b8:be:2f:
         2f:93:88:40:87:3a:05:be:0f:6a:86:88:17:d3:65:5e:e1:aa:
         9d:83:ce:44:6e:1c:26:5e:07:e6:f3:7e:5f:fd:96:ed:17:6f:
         96:58:ee:22:74:25:df:d6:94:35:0e:9b:8e:32:f0:2f:c6:50:
         36:e5:cd:8e:0a:cb:c4:b2:eb:d7:6f:2f:67:d5:43:88:41:e2:
         ef:5e:f6:0a:f8:2a:6f:36:d6:99:1c:12:ea:7d:95:73:8b:19:
         ef:cb:e8:ff:f5:b9:90:a0:1e:c0:fd:dc:38:74:c0:26:10:65:
         97:7d:82:0d:ea:57:e4:5a:11:f5:76:14:19:a3:7f:e0:66:08:
         bd:2e:71:b0:0a:14:ea:26:c1:99:d6:29:dc:47:c5:33:12:6e:
         32:40:49:da:d0:27:39:54:c3:52:f1:39:d5:53:6a:8e:c0:01:
         50:71:d1:04:b2:69:28:85:05:4e:a4:f0:c9:92:4e:15:b1:59:
         9e:cb:0a:25:d3:cb:1b:d2:57:a4:0a:22:a1:4d:ec:ac:94:53:
         70:12:d1:a1:bd:9d:91:1b:9a:46:3f:64:73:46:17:91:5f:14:
         e6:7b:80:51:41:22:a7:ef:9c:ab:65:e3:f8:bf:2c:17:06:7e:
         26:67:04:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:22 2023 by rpki-client on console-fra.rpki-client.org