Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/3139392e3138322e3133322e302f32322d3232203d3e203534313130.roa
File:                     3139392e3138322e3133322e302f32322d3232203d3e203534313130.roa (raw, json)
Hash identifier:          fcF++qrx9V8pi3JBYINhXLNm7pyxcxz9QOYILVDMoRo=
Subject key identifier:   63:EB:8C:BF:85:9D:9C:69:1A:7C:31:81:5A:2A:9F:66:73:C6:40:0F
Certificate issuer:       /CN=69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078
Certificate serial:       7309193911C8DF87CC51A838D992F7C79DB36CAD
Authority key identifier: 47:55:58:BF:6C:C8:31:10:14:1F:03:25:D9:12:A8:69:EB:23:4A:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/3139392e3138322e3133322e302f32322d3232203d3e203534313130.roa
Signing time:             Tue 03 Jan 2023 20:26:57 +0000
ROA not before:           Tue 03 Jan 2023 20:21:57 +0000
ROA not after:            Tue 02 Jan 2024 20:26:57 +0000
asID:                     54110
IP address blocks:        199.182.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:09:19:39:11:c8:df:87:cc:51:a8:38:d9:92:f7:c7:9d:b3:6c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078
        Validity
            Not Before: Jan  3 20:21:57 2023 GMT
            Not After : Jan  2 20:26:57 2024 GMT
        Subject: CN=63EB8CBF859D9C691A7C31815A2A9F6673C6400F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c0:40:c3:b0:9d:f3:a8:7e:68:1c:16:d4:4f:
                    78:8b:b2:99:e4:b2:37:55:2f:54:ac:c9:51:6a:75:
                    e3:0f:46:8f:97:e7:aa:21:c0:0f:33:4b:42:a1:21:
                    2d:ab:c8:05:53:e6:c1:e0:80:0e:d7:01:00:dc:42:
                    25:d8:1d:44:20:73:20:c8:b2:d1:e4:6d:85:05:a7:
                    f4:28:a8:e9:18:7b:2f:e2:0a:80:c8:0e:0c:32:b2:
                    d0:ac:90:54:41:2e:ed:b9:cb:f9:ff:ff:f4:d9:df:
                    ee:4f:7a:02:e9:dd:94:b6:20:56:a8:a4:17:2f:cf:
                    21:8e:4e:ea:c9:03:fe:ec:98:96:08:3b:f7:30:2e:
                    83:4d:2e:ae:22:1e:d5:92:e9:7e:6c:e7:48:08:58:
                    92:8d:70:4c:52:15:4f:69:e4:dc:3c:76:68:b7:40:
                    1c:88:21:06:cc:4e:f2:bb:71:ce:ae:67:58:4b:cc:
                    b8:86:dc:95:9f:1a:62:5a:75:43:46:e2:99:7d:fe:
                    d5:ae:32:96:d9:31:0f:c0:66:60:90:9f:96:d3:71:
                    b6:cf:db:9a:28:2f:3a:27:91:b6:62:e2:28:ab:69:
                    12:4b:5f:cd:03:60:cd:d1:59:68:96:11:82:89:76:
                    b5:e8:a5:fd:5e:6d:ac:ca:ba:60:e6:b9:f5:f9:ed:
                    31:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EB:8C:BF:85:9D:9C:69:1A:7C:31:81:5A:2A:9F:66:73:C6:40:0F
            X509v3 Authority Key Identifier:
                keyid:47:55:58:BF:6C:C8:31:10:14:1F:03:25:D9:12:A8:69:EB:23:4A:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/475558BF6CC83110141F0325D912A869EB234A9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9bfc26fed6f2ce38a676478decdf76ee81802fb078.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/1/3139392e3138322e3133322e302f32322d3232203d3e203534313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:91:95:3e:fe:23:45:2d:c6:a8:6c:38:2a:78:95:99:f1:76:
         59:79:be:e7:48:66:bd:be:90:8d:97:ba:9d:85:60:70:0b:1f:
         84:ae:51:5e:00:0d:e2:54:87:18:28:f5:3f:13:4e:fb:1e:f5:
         24:93:3e:4e:7f:08:5e:1d:9d:00:a9:9d:22:32:b8:8c:bf:7c:
         53:6c:6d:8a:dc:33:9d:6b:fb:59:8f:67:fc:ce:e5:6b:ab:d9:
         38:9a:a9:a5:9d:51:05:7c:36:9d:d5:1c:0a:37:b5:26:5e:72:
         6d:51:be:43:79:e0:97:50:6c:4f:1a:e9:d6:91:b0:da:5d:ef:
         07:5c:9b:8d:6a:cf:ca:a7:8a:e2:08:f7:eb:e8:70:d7:89:71:
         dd:99:a0:5c:61:b0:f0:a6:02:09:2c:36:e2:01:b9:f1:c5:65:
         73:18:53:85:48:db:5d:9a:ed:c9:9e:34:79:5e:04:64:9b:91:
         fb:67:07:8b:dc:22:7a:15:7c:80:11:c4:bb:c2:ed:80:36:08:
         8d:3b:29:3f:d4:ca:7f:9f:ea:b4:3d:fc:cc:6c:42:aa:6a:1d:
         cf:f2:57:bb:3f:3d:63:5b:13:0a:4a:f3:8d:06:da:2a:aa:6a:
         fc:85:27:65:77:44:22:a5:f4:3c:30:df:ad:ee:e1:40:4b:05:
         70:77:9e:c8
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUcwkZORHI34fMUag42ZL3x52zbK0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjkyNzdkMGE5YmZjMjZmZWQ2ZjJjZTM4YTY3NjQ3OGRl
Y2RmNzZlZTgxODAyZmIwNzgwHhcNMjMwMTAzMjAyMTU3WhcNMjQwMTAyMjAyNjU3
WjAzMTEwLwYDVQQDEyg2M0VCOENCRjg1OUQ5QzY5MUE3QzMxODE1QTJBOUY2Njcz
QzY0MDBGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMBAw7Cd86h+
aBwW1E94i7KZ5LI3VS9UrMlRanXjD0aPl+eqIcAPM0tCoSEtq8gFU+bB4IAO1wEA
3EIl2B1EIHMgyLLR5G2FBaf0KKjpGHsv4gqAyA4MMrLQrJBUQS7tucv5///02d/u
T3oC6d2UtiBWqKQXL88hjk7qyQP+7JiWCDv3MC6DTS6uIh7Vkul+bOdICFiSjXBM
UhVPaeTcPHZot0AciCEGzE7yu3HOrmdYS8y4htyVnxpiWnVDRuKZff7VrjKW2TEP
wGZgkJ+W03G2z9uaKC86J5G2YuIoq2kSS1/NA2DN0VlolhGCiXa16KX9Xm2syrpg
5rn1+e0x3QIDAQABo4ICtDCCArAwHQYDVR0OBBYEFGPrjL+FnZxpGnwxgVoqn2Zz
xkAPMB8GA1UdIwQYMBaAFEdVWL9syDEQFB8DJdkSqGnrI0qcMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NmJhM2JkZDQzZDNjLzEv
NDc1NTU4QkY2Q0M4MzExMDE0MUYwMzI1RDkxMkE4NjlFQjIzNEE5Qy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2E4MTZlOGFkLTliY2MtNDZkYS1hZmQ4LTcwZGQ5N2JkMDIzMi82OTI3
N2QwYTliZmMyNmZlZDZmMmNlMzhhNjc2NDc4ZGVjZGY3NmVlODE4MDJmYjA3OC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTZi
YTNiZGQ0M2QzYy8xLzMxMzkzOTJlMzEzODMyMmUzMTMzMzIyZTMwMmYzMjMyMmQz
MjMyMjAzZDNlMjAzNTM0MzEzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7aEMA0GCSqGSIb3DQEB
CwUAA4IBAQCPkZU+/iNFLcaobDgqeJWZ8XZZeb7nSGa9vpCNl7qdhWBwCx+ErlFe
AA3iVIcYKPU/E077HvUkkz5OfwheHZ0AqZ0iMriMv3xTbG2K3DOda/tZj2f8zuVr
q9k4mqmlnVEFfDad1RwKN7UmXnJtUb5DeeCXUGxPGunWkbDaXe8HXJuNas/Kp4ri
CPfr6HDXiXHdmaBcYbDwpgIJLDbiAbnxxWVzGFOFSNtdmu3JnjR5XgRkm5H7ZweL
3CJ6FXyAEcS7wu2ANgiNOyk/1Mp/n+q0PfzMbEKqah3P8le7Pz1jWxMKSvONBtoq
qmr8hSdld0QipfQ8MN+t7uFASwVwd57I
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org