Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/3133342e3139352e37372e302f32342d3234203d3e203534363133.roa
File:                     3133342e3139352e37372e302f32342d3234203d3e203534363133.roa (raw, json)
Hash identifier:          XITrM4rvj+F/CG3juFHxLuxuYl3mcFAuAhc9mdvFSnc=
Subject key identifier:   DC:61:8B:D3:06:E6:F8:80:F9:E5:A3:54:58:02:B0:47:40:8B:54:BD
Certificate issuer:       /CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
Certificate serial:       1978F1E71DDB0FCEFD5E2BBB62EC02DB9C3058CA
Authority key identifier: 79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/3133342e3139352e37372e302f32342d3234203d3e203534363133.roa
Signing time:             Thu 10 Nov 2022 23:55:54 +0000
ROA not before:           Thu 10 Nov 2022 23:50:54 +0000
ROA not after:            Thu 09 Nov 2023 23:55:54 +0000
asID:                     54613
IP address blocks:        134.195.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:78:f1:e7:1d:db:0f:ce:fd:5e:2b:bb:62:ec:02:db:9c:30:58:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
        Validity
            Not Before: Nov 10 23:50:54 2022 GMT
            Not After : Nov  9 23:55:54 2023 GMT
        Subject: CN=DC618BD306E6F880F9E5A3545802B047408B54BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:55:84:a3:d6:1f:ec:b0:36:9c:9b:1c:26:8f:
                    9b:d9:18:65:86:a4:a9:b3:15:44:ad:41:36:09:14:
                    62:3e:7e:8d:6c:9a:28:3c:e2:10:a0:38:eb:22:20:
                    2e:f4:fb:a0:bd:5d:41:58:bc:59:28:da:ba:ff:aa:
                    a6:cb:ac:5c:f3:73:ec:c6:25:73:2a:9b:7c:35:81:
                    61:db:71:e5:ac:cb:71:ca:43:85:52:f4:b7:9b:a6:
                    75:a0:18:c3:53:45:ae:17:b8:5b:6a:1a:76:fc:29:
                    c3:b9:0c:95:bd:e2:a3:e5:00:40:54:16:81:e9:9d:
                    99:18:2c:a5:86:42:5f:4f:81:15:b0:dd:44:68:a3:
                    22:a3:e1:3c:4a:a8:26:59:84:9f:56:b9:25:70:d4:
                    cc:3f:be:7c:86:64:d6:8e:5a:0a:8c:63:67:3f:f4:
                    82:7d:69:b9:d8:b0:ae:4a:de:39:3c:39:ae:2a:25:
                    55:52:46:89:8f:4a:c8:a8:7b:f0:aa:d3:1d:80:67:
                    90:d6:7d:70:e6:83:4e:d0:3d:22:33:3a:8a:d3:9e:
                    59:f0:f3:c0:7d:0c:4a:5c:75:4d:8d:de:d0:52:82:
                    29:7b:d6:c4:8b:3d:a0:03:e2:6f:2a:51:b1:aa:ac:
                    50:f7:c0:fe:97:d0:91:40:85:05:0b:1d:ce:62:05:
                    6c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:61:8B:D3:06:E6:F8:80:F9:E5:A3:54:58:02:B0:47:40:8B:54:BD
            X509v3 Authority Key Identifier:
                keyid:79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/79F0185CBC9DEB7BA5237F58391A27697CFB54ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/3133342e3139352e37372e302f32342d3234203d3e203534363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:49:bc:f7:50:db:5b:c3:ef:63:4e:e7:5e:d1:13:61:8d:33:
         46:70:b1:a5:0b:04:e0:ca:b2:7c:b6:ad:a8:ed:ca:f1:d2:da:
         3e:02:ee:85:e9:be:75:d3:0a:68:f4:90:82:27:89:cd:fb:a4:
         47:94:fb:56:45:93:fa:1c:58:05:71:2a:b5:21:30:db:6e:b6:
         32:41:b9:c2:0e:fb:8b:b9:87:00:27:38:4e:a3:b8:a5:3b:80:
         17:d3:f0:82:49:52:7e:69:16:c2:d0:41:0c:aa:b0:d4:df:8d:
         cd:38:8b:50:72:52:3b:1f:49:cd:b3:9c:d6:2b:e2:84:bc:d5:
         bb:29:36:0f:ba:36:0c:f7:3a:cc:96:71:49:06:ad:97:6f:35:
         c5:a8:5a:ff:cb:8d:ab:a8:28:ff:e8:98:9c:d3:e1:9b:b3:81:
         77:f4:e0:69:02:91:12:b1:d6:58:64:ef:5d:2c:5d:03:09:2c:
         c9:29:9a:f9:cf:1a:db:0b:dc:d9:47:e7:77:48:df:d7:78:0c:
         c9:5b:4c:5c:1e:98:c6:4b:7b:9a:87:73:0f:b0:4b:31:99:aa:
         e4:07:2d:e9:35:80:0e:cb:d7:6d:1e:c2:8f:d4:56:9a:7c:16:
         83:eb:e6:40:e5:34:d8:b1:c9:94:5b:82:92:bf:bc:42:43:33:
         81:ec:22:09
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUGXjx5x3bD879Xiu7YuwC25wwWMowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRmNjc3NDkxZjVjZDBmOTU2NjQyZDEyNjM0NDk5YTAx
ZmYxZDhjYzkzZDhiZDAxMjQwHhcNMjIxMTEwMjM1MDU0WhcNMjMxMTA5MjM1NTU0
WjAzMTEwLwYDVQQDEyhEQzYxOEJEMzA2RTZGODgwRjlFNUEzNTQ1ODAyQjA0NzQw
OEI1NEJEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlWEo9Yf7LA2
nJscJo+b2RhlhqSpsxVErUE2CRRiPn6NbJooPOIQoDjrIiAu9PugvV1BWLxZKNq6
/6qmy6xc83PsxiVzKpt8NYFh23HlrMtxykOFUvS3m6Z1oBjDU0WuF7hbahp2/CnD
uQyVveKj5QBAVBaB6Z2ZGCylhkJfT4EVsN1EaKMio+E8SqgmWYSfVrklcNTMP758
hmTWjloKjGNnP/SCfWm52LCuSt45PDmuKiVVUkaJj0rIqHvwqtMdgGeQ1n1w5oNO
0D0iMzqK055Z8PPAfQxKXHVNjd7QUoIpe9bEiz2gA+JvKlGxqqxQ98D+l9CRQIUF
Cx3OYgVsAQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFNxhi9MG5viA+eWjVFgCsEdA
i1S9MB8GA1UdIwQYMBaAFHnwGFy8net7pSN/WDkaJ2l8+1TtMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODJkNWU1MjEwMTgzZWM0Y2U5ZjY0YmMzLzAv
NzlGMDE4NUNCQzlERUI3QkE1MjM3RjU4MzkxQTI3Njk3Q0ZCNTRFRC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzQwMGJmNjE0LTJiMzEtNGFiNi04NmI0LTY1NjI1OTgyNTliNy80NGY2
Nzc0OTFmNWNkMGY5NTY2NDJkMTI2MzQ0OTlhMDFmZjFkOGNjOTNkOGJkMDEyNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgyZDVlNTIxMDE4M2Vj
NGNlOWY2NGJjMy8wLzMxMzMzNDJlMzEzOTM1MmUzNzM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzUzNDM2MzEzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIbDTTANBgkqhkiG9w0BAQsF
AAOCAQEANkm891DbW8PvY07nXtETYY0zRnCxpQsE4MqyfLatqO3K8dLaPgLuhem+
ddMKaPSQgieJzfukR5T7VkWT+hxYBXEqtSEw2262MkG5wg77i7mHACc4TqO4pTuA
F9PwgklSfmkWwtBBDKqw1N+NzTiLUHJSOx9JzbOc1ivihLzVuyk2D7o2DPc6zJZx
SQatl281xaha/8uNq6go/+iYnNPhm7OBd/TgaQKRErHWWGTvXSxdAwksySma+c8a
2wvc2Ufnd0jf13gMyVtMXB6Yxkt7modzD7BLMZmq5Act6TWADsvXbR7Cj9RWmnwW
g+vmQOU02LHJlFuCkr+8QkMzgewiCQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org