Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137382e302f32342d3234203d3e20323035323230.roa
File:                     3139392e34382e3137382e302f32342d3234203d3e20323035323230.roa (raw, json)
Hash identifier:          ZTDKV0djkMk/N+Djf8qtewwAWnH0cnPhL/++w/9fFQc=
Subject key identifier:   AF:8B:60:F8:5C:6F:15:7C:81:A0:A6:8E:37:72:89:EB:34:59:65:1D
Certificate issuer:       /CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
Certificate serial:       638C52D9FB088FEA88E0A4BA38E09E5743CE5990
Authority key identifier: 7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137382e302f32342d3234203d3e20323035323230.roa
Signing time:             Fri 13 Oct 2023 23:42:28 +0000
ROA not before:           Fri 13 Oct 2023 23:37:28 +0000
ROA not after:            Fri 11 Oct 2024 23:42:28 +0000
asID:                     205220
IP address blocks:        199.48.178.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:8c:52:d9:fb:08:8f:ea:88:e0:a4:ba:38:e0:9e:57:43:ce:59:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
        Validity
            Not Before: Oct 13 23:37:28 2023 GMT
            Not After : Oct 11 23:42:28 2024 GMT
        Subject: CN=AF8B60F85C6F157C81A0A68E377289EB3459651D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:a5:ec:11:22:79:95:31:14:2a:82:c9:09:cf:
                    cd:fb:31:cd:e4:fd:63:62:08:46:e9:dd:77:cb:f6:
                    64:46:94:a9:4e:6a:e2:f1:aa:ed:55:49:fe:c5:05:
                    a5:b7:7f:17:03:61:6a:99:d1:a8:30:d6:85:5a:ce:
                    98:bd:03:01:e9:08:dd:c9:2e:c7:df:b1:d6:10:8f:
                    8d:66:f7:0b:20:28:5e:73:ee:0e:33:bd:94:29:51:
                    9a:4c:ac:af:41:93:8d:d5:52:bc:59:61:5a:ee:53:
                    de:4b:69:52:d7:84:9c:9e:e9:a0:ee:05:16:29:db:
                    d4:5e:a4:34:70:72:b4:a1:f7:22:4d:bc:f0:0a:02:
                    77:bc:08:98:a8:1d:84:d8:a6:cd:c0:55:c6:ef:8c:
                    23:47:da:51:59:a8:11:dc:8e:d0:55:81:3a:45:3c:
                    06:69:34:e4:8f:ad:bc:71:05:d4:61:06:91:c5:33:
                    52:2a:7a:0c:a4:28:31:30:49:7a:0f:ac:95:f3:ce:
                    ee:a6:d3:7a:97:eb:dd:49:4d:00:e5:c9:d9:e8:41:
                    0e:71:a1:10:f7:69:ca:03:61:75:d3:f0:20:39:aa:
                    ac:72:b5:80:64:af:2f:4a:23:5d:df:4b:ff:55:c7:
                    77:42:c5:4f:ae:cd:95:2f:b8:e3:7a:af:83:1b:94:
                    6d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:8B:60:F8:5C:6F:15:7C:81:A0:A6:8E:37:72:89:EB:34:59:65:1D
            X509v3 Authority Key Identifier:
                keyid:7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/7CC8AFEDC13ED7A2E0FB10BB32E0D9FC616C6AB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3137382e302f32342d3234203d3e20323035323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:2f:57:d4:04:99:12:01:58:1c:3e:5f:25:3e:63:65:87:74:
         09:ab:c1:9b:79:1c:d5:76:26:f4:ce:4b:fc:92:d9:21:1f:45:
         19:30:97:13:97:40:bd:9c:c7:dd:13:be:4e:07:49:44:a0:5c:
         15:5f:1f:ae:f8:2c:0d:e5:1b:f0:c5:c8:1e:4d:a9:76:15:e4:
         20:4e:e4:f4:8e:46:8e:1a:e5:ce:4f:1e:a4:42:fc:82:a8:cb:
         ea:6d:7e:63:29:98:23:89:c9:83:cb:c0:d5:f2:75:0a:a1:7e:
         01:df:96:7f:5a:0a:8b:2f:b5:83:02:9c:ec:50:7b:3c:41:e8:
         df:93:45:af:66:ea:44:65:8b:b8:62:a9:53:2c:a2:e4:4f:dc:
         25:5e:80:41:6a:0f:73:07:0a:5f:c1:1a:ea:36:18:51:d6:33:
         59:b4:69:de:e8:7c:33:57:c6:0d:f7:2c:67:97:9d:ef:e2:89:
         80:9b:e7:55:69:ac:dc:c2:cc:f5:14:ec:96:09:56:2d:e3:0b:
         74:1a:ec:4c:80:17:9d:1c:72:1f:bc:c5:1a:ab:1e:63:1e:3e:
         f5:4d:95:92:3d:e7:bd:05:ba:1b:bf:01:34:e7:cb:f4:15:78:
         85:fd:49:b7:d5:41:fc:3f:3b:db:64:b2:71:21:e0:ce:01:af:
         72:83:a8:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:09 2024 by rpki-client on console-fra.rpki-client.org