Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/3133342e3139352e37362e302f32342d3234203d3e203534363133.roa
File:                     3133342e3139352e37362e302f32342d3234203d3e203534363133.roa (raw, json)
Hash identifier:          y+uSrC4eVP0iUOeDlhqV1TCztdIZ+U8m60zf0cDDp88=
Subject key identifier:   7B:D0:78:B8:45:99:89:A3:37:29:AC:CB:A9:AE:E1:96:53:DF:A1:A2
Certificate issuer:       /CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
Certificate serial:       1F568FF676CC27E942AC4C7C961E0EE97657067B
Authority key identifier: 79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/3133342e3139352e37362e302f32342d3234203d3e203534363133.roa
Signing time:             Thu 10 Nov 2022 23:55:51 +0000
ROA not before:           Thu 10 Nov 2022 23:50:51 +0000
ROA not after:            Thu 09 Nov 2023 23:55:51 +0000
asID:                     54613
IP address blocks:        134.195.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:56:8f:f6:76:cc:27:e9:42:ac:4c:7c:96:1e:0e:e9:76:57:06:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
        Validity
            Not Before: Nov 10 23:50:51 2022 GMT
            Not After : Nov  9 23:55:51 2023 GMT
        Subject: CN=7BD078B8459989A33729ACCBA9AEE19653DFA1A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:10:73:73:ac:f9:4e:42:42:d6:22:1e:d7:23:
                    96:ed:ef:71:1e:13:9b:a5:cd:48:04:c9:4b:36:44:
                    5c:c5:55:f6:94:a0:1d:0e:b3:98:f6:94:d9:b4:a4:
                    40:c4:6d:d4:6b:14:88:db:6a:ea:55:3c:1f:b5:c6:
                    d8:91:85:0d:b4:2c:70:48:3d:5d:a9:48:da:d8:34:
                    d1:e9:6d:78:01:96:40:f7:54:11:75:23:2d:00:6b:
                    a5:0f:86:ca:97:34:36:25:97:9f:a5:4d:c6:59:19:
                    a9:c7:35:d0:48:a1:6f:78:c8:8b:5a:bd:32:02:ab:
                    58:86:4a:fa:43:97:e7:ec:eb:50:5a:3d:f2:15:e7:
                    c9:1b:33:8b:4e:d2:83:ad:cc:c7:ab:4c:c9:ff:66:
                    a4:78:1d:d9:80:f8:6b:bc:ad:63:3c:2c:4c:c1:2d:
                    52:f7:ad:ca:66:39:de:c0:11:b5:9d:d7:5a:f5:cc:
                    b6:73:d7:92:fe:6b:ab:e9:2d:45:55:b7:85:68:b0:
                    b8:9c:77:cc:8e:6f:34:96:5a:f0:81:19:f3:aa:55:
                    18:2f:7c:83:c9:e8:a8:22:90:86:9a:11:f9:35:96:
                    f3:8c:bd:bc:c1:46:31:89:fd:30:6d:31:3b:29:7d:
                    7c:1f:09:e4:1d:b0:f9:50:de:e5:7d:ff:ff:c4:21:
                    1f:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:D0:78:B8:45:99:89:A3:37:29:AC:CB:A9:AE:E1:96:53:DF:A1:A2
            X509v3 Authority Key Identifier:
                keyid:79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/79F0185CBC9DEB7BA5237F58391A27697CFB54ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/3133342e3139352e37362e302f32342d3234203d3e203534363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:fc:56:65:e7:0f:d3:49:14:b6:52:6d:a6:ef:47:aa:1d:d3:
         ed:93:a2:b4:6c:68:04:d3:b2:ec:ff:4f:a9:ff:da:66:f9:e0:
         70:91:1c:43:e4:07:36:30:6e:8c:55:3d:a3:e6:d6:d7:93:ab:
         c1:bd:5e:40:ec:54:8f:f4:36:39:34:58:48:3d:03:3b:01:39:
         93:ae:3a:93:5d:8e:38:35:6a:e3:5b:67:d8:e8:fd:58:13:5d:
         37:96:65:c2:04:e7:1c:1e:8c:6f:94:6a:93:21:9e:54:90:73:
         cc:09:b4:cf:b1:24:ea:6a:10:27:00:57:23:15:21:1c:1a:1b:
         82:b3:ed:7f:84:22:52:7d:e1:29:46:65:28:f7:5c:67:bf:6e:
         09:a9:78:1d:ee:6f:8e:66:2a:05:37:11:46:e5:51:4b:18:3f:
         12:b3:ab:89:1c:e4:79:fb:8c:fd:e3:21:ab:bd:75:2f:97:c0:
         c5:fe:c9:2d:0d:fa:4a:fa:46:39:e6:0b:f2:99:fb:2e:53:42:
         2d:ee:a1:2f:3c:38:32:58:8a:c4:3b:57:34:f2:d6:95:c4:8c:
         94:cb:4d:00:89:0f:b2:65:5e:57:67:d7:52:09:64:45:10:45:
         51:c8:b7:4a:78:c2:57:88:7f:2a:f3:4c:ec:b2:24:a6:93:ab:
         b4:64:a0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org