Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133352e302f32342d3234203d3e203534313130.roa
File:                     3139392e3138322e3133352e302f32342d3234203d3e203534313130.roa (raw, json)
Hash identifier:          CE656RCkaeuXJhKq1zO3rfPFl+PStVy9bno/MezGr2w=
Subject key identifier:   25:DF:44:B8:12:89:D5:17:12:57:81:15:6D:A4:A6:27:9E:A9:17:67
Certificate issuer:       /CN=69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc
Certificate serial:       097E8BAF309C1C7C15F445E22DC78EA6F403ED87
Authority key identifier: B1:B2:E0:7C:5C:25:C7:05:C8:55:3B:96:45:5E:DC:89:DC:AC:E8:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133352e302f32342d3234203d3e203534313130.roa
Signing time:             Sun 01 Jan 2023 05:01:20 +0000
ROA not before:           Sun 01 Jan 2023 04:56:20 +0000
ROA not after:            Sun 31 Dec 2023 05:01:20 +0000
asID:                     54110
IP address blocks:        199.182.135.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7e:8b:af:30:9c:1c:7c:15:f4:45:e2:2d:c7:8e:a6:f4:03:ed:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc
        Validity
            Not Before: Jan  1 04:56:20 2023 GMT
            Not After : Dec 31 05:01:20 2023 GMT
        Subject: CN=25DF44B81289D517125781156DA4A6279EA91767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:de:a8:87:53:ae:53:b0:99:f9:69:c5:10:
                    70:fe:c3:18:1d:6f:16:df:85:53:38:c9:ec:14:54:
                    16:98:fb:41:23:e1:5b:0f:b9:13:bb:33:b2:db:58:
                    40:d4:c5:87:21:01:47:3f:7d:6c:82:92:aa:d0:5c:
                    ac:81:6a:59:f0:5f:22:af:f0:0c:3d:0e:fd:1b:eb:
                    f2:4f:7c:23:10:29:bf:9d:16:bf:e6:a7:6a:d1:3c:
                    71:37:fa:3d:70:48:00:79:34:f7:1b:e2:15:e5:e9:
                    b9:84:64:9c:7a:3a:3e:3a:e1:74:65:31:76:99:cd:
                    05:7c:0a:9e:0b:85:d8:7a:45:e0:1b:b6:f0:d1:d7:
                    13:59:75:34:5a:00:a9:35:a5:da:22:56:c5:ce:74:
                    b3:b6:12:78:e2:da:96:df:e1:7c:89:8e:ff:de:bd:
                    cf:7e:8e:2b:3d:18:b9:5a:f0:b6:fb:5c:83:b1:3d:
                    a0:d3:f6:91:3c:0c:a1:62:16:05:b6:93:24:3a:7f:
                    af:52:0d:3b:6b:b2:36:06:9a:90:71:3e:45:33:2a:
                    36:bd:68:e2:0d:ef:84:37:e6:e1:df:b4:a6:90:65:
                    40:7c:3b:8c:a9:7d:f3:56:eb:9a:4d:f9:f6:60:2f:
                    ba:c7:63:48:ba:17:59:cb:fd:7b:95:3e:bf:25:c2:
                    54:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DF:44:B8:12:89:D5:17:12:57:81:15:6D:A4:A6:27:9E:A9:17:67
            X509v3 Authority Key Identifier:
                keyid:B1:B2:E0:7C:5C:25:C7:05:C8:55:3B:96:45:5E:DC:89:DC:AC:E8:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/B1B2E07C5C25C705C8553B96455EDC89DCACE85C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b402312ae378bee788087b2a2091c4a2a32960cfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133352e302f32342d3234203d3e203534313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:6c:f8:0e:f1:5b:30:b4:b8:9e:3a:9e:18:bf:a4:0a:18:91:
         01:1c:82:26:2d:38:c6:e3:79:e4:81:46:f6:0f:21:55:e6:71:
         dc:c1:a4:8c:88:75:c9:9b:8f:c8:c6:e2:80:52:d6:5c:99:22:
         c6:38:d4:12:10:09:5f:22:93:40:b9:9f:d3:64:34:53:76:c5:
         d4:e3:ed:ac:df:10:c5:bc:02:fe:6a:67:2a:ae:07:62:3f:c5:
         a9:20:64:42:84:14:f1:74:7c:02:43:de:e9:4a:8f:6a:87:fb:
         18:95:6d:b5:67:6d:2a:aa:1d:87:bc:10:39:dc:6c:58:d9:d8:
         89:3a:a2:83:a7:4f:77:06:c3:8f:ff:a7:26:bd:79:ef:10:9c:
         39:a5:32:cd:67:3c:63:0c:0c:50:b3:50:1e:bf:b2:3c:92:b9:
         23:1a:a0:55:8d:62:d6:6e:6a:64:6e:18:53:58:85:91:85:b7:
         21:ad:74:7e:76:c4:56:62:4e:fd:d9:f0:7d:18:20:82:43:1c:
         60:1f:70:fb:02:e7:f6:45:90:bd:a4:45:7c:e5:bc:9f:ab:d0:
         e1:3b:dd:75:a6:a1:d7:67:f0:e3:c0:cf:13:54:3e:29:4f:c4:
         42:51:c5:16:b7:5e:1a:fd:7b:73:aa:ca:f8:f3:9c:63:5f:b1:
         5a:0f:25:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org