Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137362e302f32342d3234203d3e20323132333834.roa
File:                     3139392e34382e3137362e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          ADg0KVD+ywUbdzO8SOvxxwwbqGp67eHcr15VKkz4Vwo=
Subject key identifier:   E9:2D:9A:DC:E6:21:E2:51:BE:5D:2C:CD:CB:40:21:C1:F1:3A:B4:E8
Certificate issuer:       /CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
Certificate serial:       5D973AC2B0E1DA82C582E196891678F40CE07FC8
Authority key identifier: 7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137362e302f32342d3234203d3e20323132333834.roa
Signing time:             Wed 13 Sep 2023 08:12:19 +0000
ROA not before:           Wed 13 Sep 2023 08:07:19 +0000
ROA not after:            Wed 11 Sep 2024 08:12:19 +0000
asID:                     212384
IP address blocks:        199.48.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:97:3a:c2:b0:e1:da:82:c5:82:e1:96:89:16:78:f4:0c:e0:7f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
        Validity
            Not Before: Sep 13 08:07:19 2023 GMT
            Not After : Sep 11 08:12:19 2024 GMT
        Subject: CN=E92D9ADCE621E251BE5D2CCDCB4021C1F13AB4E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d9:c9:c4:29:89:01:6d:63:ea:57:ee:4b:fe:
                    f2:ff:cb:9f:39:60:95:17:0d:32:cd:84:77:74:f8:
                    bd:fd:ac:9f:26:0d:fc:7a:b5:25:e3:ca:c1:67:59:
                    74:64:af:69:1e:8e:f5:9a:78:0d:3e:8f:5e:90:8b:
                    83:81:6f:9b:eb:5d:84:8a:eb:25:4d:d3:4a:c3:70:
                    24:9e:7c:bd:95:01:82:12:63:1c:3d:77:89:f6:27:
                    64:e2:ac:4e:81:2b:7d:14:0e:5c:82:2c:e8:1c:a9:
                    b7:6c:fd:a1:b5:fe:6a:0b:5b:71:96:34:81:27:d6:
                    db:1d:50:e3:09:7d:6c:31:c9:9f:0e:91:36:22:6a:
                    5d:e7:d8:c4:9c:45:f9:a1:61:1c:97:33:9a:7e:00:
                    48:9b:1d:09:9b:d4:e1:d3:ad:30:6f:7b:de:23:6a:
                    56:f1:64:b6:a5:f8:a5:b6:e1:73:cd:d3:70:1d:e4:
                    73:0a:c9:53:42:93:af:e4:19:f2:1a:0d:27:93:0c:
                    bb:ef:f8:db:bd:9c:69:d8:7d:be:c2:5d:d5:44:b1:
                    20:87:8a:73:51:58:9c:b7:68:d9:78:11:79:94:6d:
                    ab:af:2a:a8:01:02:ee:0e:9f:77:10:e2:7d:6a:57:
                    95:fd:11:2e:d2:93:69:bc:1d:66:35:82:f8:08:f4:
                    d2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2D:9A:DC:E6:21:E2:51:BE:5D:2C:CD:CB:40:21:C1:F1:3A:B4:E8
            X509v3 Authority Key Identifier:
                keyid:7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/7CC8AFEDC13ED7A2E0FB10BB32E0D9FC616C6AB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137362e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:83:d2:d1:42:62:06:45:a9:cd:27:9f:1e:d2:7e:1a:83:4b:
         0a:59:83:9e:7c:57:85:aa:72:6b:92:23:50:ae:4e:c0:20:4f:
         83:39:31:ff:17:c1:0f:0d:fb:31:f8:fd:61:fa:fb:53:04:b8:
         16:39:2b:50:74:10:84:47:7e:ad:de:be:37:97:e7:56:c6:fd:
         e7:7f:74:f2:f3:22:2c:7f:53:72:8b:8e:63:43:0f:c4:05:c1:
         97:5a:e5:ef:43:14:e4:3d:76:bb:1a:c7:6e:92:10:ce:33:63:
         0e:07:35:2f:9d:4e:01:3c:36:45:fb:86:b6:ff:1c:5d:8e:04:
         e8:1d:e9:e2:8e:f1:45:d0:11:ed:37:96:79:d5:a0:c4:41:54:
         cc:bb:58:21:7b:8a:e2:71:5b:a5:90:9e:10:93:25:71:59:2b:
         dc:2e:de:65:b1:7f:40:79:88:3f:46:de:73:cd:ef:81:0f:bc:
         72:38:83:f8:c7:09:8b:7b:b8:97:fb:19:4a:e4:45:25:31:af:
         65:d7:45:fb:78:5b:d2:3a:a4:57:d5:83:93:61:e9:af:30:ce:
         36:f4:c7:7a:d2:e4:ba:c6:4e:16:5a:89:a5:cf:88:db:fd:93:
         83:5d:db:46:03:7c:af:9c:e4:73:2c:93:23:0b:cf:7e:da:11:
         38:8c:73:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:44 2024 by rpki-client on console-ams.rpki-client.org