Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/3134322e3230322e38322e302f32332d3233203d3e203534363133.roa
File:                     3134322e3230322e38322e302f32332d3233203d3e203534363133.roa (raw, json)
Hash identifier:          sCkreIpXabjCBYDEhWlTmDcELFXhv3VMIRKzcx+UtbA=
Subject key identifier:   C9:CD:41:E0:BB:59:EB:B7:7C:D5:07:AF:D6:88:2C:DE:B0:C7:3E:36
Certificate issuer:       /CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
Certificate serial:       28FB4E8A246D3775CFA19CFAF63CC8650AB52F9C
Authority key identifier: 79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/3134322e3230322e38322e302f32332d3233203d3e203534363133.roa
Signing time:             Tue 18 Oct 2022 18:15:20 +0000
ROA not before:           Tue 18 Oct 2022 18:10:20 +0000
ROA not after:            Tue 17 Oct 2023 18:15:20 +0000
asID:                     54613
IP address blocks:        142.202.82.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:fb:4e:8a:24:6d:37:75:cf:a1:9c:fa:f6:3c:c8:65:0a:b5:2f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
        Validity
            Not Before: Oct 18 18:10:20 2022 GMT
            Not After : Oct 17 18:15:20 2023 GMT
        Subject: CN=C9CD41E0BB59EBB77CD507AFD6882CDEB0C73E36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:12:42:89:1a:93:be:51:40:54:f0:15:eb:80:
                    fa:ad:8f:43:6b:22:1d:74:bb:43:3b:0b:31:cc:14:
                    26:6c:9d:e9:40:40:4e:9f:12:09:8d:1b:23:43:09:
                    7b:26:ad:d1:48:0f:ea:f2:28:1e:14:b4:65:38:10:
                    50:a2:3b:a7:f9:90:79:9c:78:1e:43:73:5c:f3:3d:
                    32:9b:be:54:fe:27:78:7f:93:e2:b7:68:9e:18:f5:
                    fd:39:87:5c:d5:92:48:0c:72:ae:0a:62:42:3d:cd:
                    81:9e:c0:0a:9d:79:a7:b9:b1:88:4b:51:a3:5a:fa:
                    96:5f:02:6b:22:0d:e2:8e:08:09:91:9b:ce:a7:20:
                    6d:b0:51:b1:37:59:c4:e8:e8:9f:5f:39:00:9a:36:
                    ae:f2:7e:b2:17:ff:e7:f2:b0:cb:e3:14:bb:a4:12:
                    67:f6:24:48:98:5b:ba:bf:ea:d0:3b:e4:8f:72:14:
                    82:0c:bc:f8:b0:56:89:5c:b5:02:7c:b5:93:a1:91:
                    69:84:ee:d4:fe:01:54:ac:3f:d2:6b:fb:6c:39:ff:
                    0e:c2:eb:01:5d:9e:3d:4e:d1:02:41:17:6d:44:41:
                    22:38:1a:31:1e:bd:bf:b5:b0:97:d6:08:00:3b:1b:
                    93:2f:f7:5c:ca:31:2c:5d:b0:c5:53:e1:6d:59:c3:
                    73:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:CD:41:E0:BB:59:EB:B7:7C:D5:07:AF:D6:88:2C:DE:B0:C7:3E:36
            X509v3 Authority Key Identifier:
                keyid:79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/79F0185CBC9DEB7BA5237F58391A27697CFB54ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/3134322e3230322e38322e302f32332d3233203d3e203534363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:8f:34:70:2e:1c:8a:6d:97:23:4b:8d:e6:c0:9f:c7:c3:73:
         35:01:52:83:11:09:0a:13:1b:6a:72:7a:d5:86:20:60:56:38:
         b3:c0:e6:1a:30:74:ae:db:f3:d2:65:53:76:c6:ac:20:a3:b9:
         38:ee:23:67:f4:a0:31:6d:26:86:d0:b4:27:a0:ac:70:05:82:
         71:6e:0f:e6:81:d2:56:2a:5c:79:7c:dd:fe:57:0e:4f:5e:1f:
         74:ac:2a:c8:cc:ff:3f:5d:b2:2f:4d:8e:51:4a:5a:fa:20:e2:
         68:70:79:b2:58:86:06:a8:f5:6c:7c:8f:ee:7d:0f:b7:14:29:
         ce:ac:e0:fa:3f:51:1e:ac:00:ad:1b:ce:9a:31:f1:5e:8b:cb:
         76:70:d8:ef:9b:97:1b:25:93:6d:55:22:e9:f7:a8:f8:d8:56:
         13:18:f3:61:c6:db:ba:0f:60:30:94:3e:1f:53:b9:cd:4f:ff:
         9e:d5:ea:e4:45:cd:e0:bd:b0:bb:92:6d:72:8b:ea:24:05:b2:
         b9:77:e7:e7:ad:f1:81:d9:8f:e7:a1:a9:de:eb:2c:d5:d5:98:
         5a:e6:12:81:a6:d5:31:78:41:fa:71:3d:8e:71:53:6a:e6:9a:
         b1:45:3d:90:21:76:77:5e:e7:77:30:ce:cc:97:53:10:6a:b2:
         80:c3:0e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org