Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3138312e302f32342d3234203d3e20343030363432.roa
File:                     3139392e34382e3138312e302f32342d3234203d3e20343030363432.roa (raw, json)
Hash identifier:          FR4Tbdm93Z34TQtBo+fv1QlF6czxe3XD9LlG6t5Ga8U=
Subject key identifier:   E3:BB:5B:FE:2E:75:46:61:78:48:2D:24:47:53:EC:80:4E:D4:B8:24
Certificate issuer:       /CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
Certificate serial:       34549CE04A26D65CB4AD82632DA6AE5261C91A90
Authority key identifier: 7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3138312e302f32342d3234203d3e20343030363432.roa
Signing time:             Thu 27 Jul 2023 18:48:45 +0000
ROA not before:           Thu 27 Jul 2023 18:43:45 +0000
ROA not after:            Thu 25 Jul 2024 18:48:45 +0000
asID:                     400642
IP address blocks:        199.48.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:54:9c:e0:4a:26:d6:5c:b4:ad:82:63:2d:a6:ae:52:61:c9:1a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
        Validity
            Not Before: Jul 27 18:43:45 2023 GMT
            Not After : Jul 25 18:48:45 2024 GMT
        Subject: CN=E3BB5BFE2E75466178482D244753EC804ED4B824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:7c:81:62:16:f3:e3:64:71:5f:6a:71:ed:
                    26:c3:e7:aa:2c:02:f4:a3:c1:28:69:b8:d4:6a:a4:
                    ed:6f:0b:4d:c7:da:b6:0f:0a:ec:7c:9c:60:ef:dd:
                    f6:1e:2f:2c:e2:06:c1:df:19:ba:8a:c6:11:06:cd:
                    4c:7c:6d:d4:bd:58:63:43:57:d7:38:d6:34:d6:e2:
                    81:57:ee:21:24:05:e9:a4:f8:32:7a:a3:0f:59:6d:
                    aa:d4:76:dd:39:a9:18:4f:71:f2:a9:6a:a0:c9:38:
                    82:97:7b:53:46:cd:44:c9:4e:90:cc:22:64:c6:7a:
                    90:d8:41:55:e1:93:b9:5a:1c:37:01:1a:44:a8:38:
                    b8:64:f5:d3:93:40:ec:00:f6:77:47:68:55:44:25:
                    21:e8:8d:fc:d1:73:08:c2:96:91:a0:28:d0:04:73:
                    7b:c2:5f:90:8f:c7:22:3c:b0:c4:be:6f:f6:e8:d2:
                    e1:32:82:e2:85:0f:53:83:11:58:a7:7c:bc:3b:c0:
                    e7:43:37:44:60:88:3c:fe:74:61:3b:92:b9:e0:af:
                    1c:da:60:17:f0:b3:41:0e:70:8c:5c:7b:f1:9a:28:
                    4e:9d:12:21:35:1a:7f:11:13:76:f5:d9:39:03:1c:
                    72:49:e6:c0:1d:70:9e:da:f6:22:5b:43:81:d7:ae:
                    f8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BB:5B:FE:2E:75:46:61:78:48:2D:24:47:53:EC:80:4E:D4:B8:24
            X509v3 Authority Key Identifier:
                keyid:7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/7CC8AFEDC13ED7A2E0FB10BB32E0D9FC616C6AB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3138312e302f32342d3234203d3e20343030363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:34:f8:96:d4:9e:ca:06:08:82:db:d0:99:41:32:22:02:40:
         06:6f:32:3b:5c:91:bd:98:a6:7d:33:0c:4f:02:e9:b6:bb:94:
         2a:c3:59:e2:d8:f2:86:c1:21:f4:a6:76:26:be:3a:f1:d8:d6:
         bd:c2:ee:98:47:2b:a0:95:89:ab:a6:2c:1c:85:1d:92:74:dd:
         37:29:6c:e1:4d:64:6b:b2:24:2a:91:51:0a:9b:38:e1:f5:a3:
         57:22:ee:08:a3:e3:2c:09:80:cd:c5:47:60:16:0a:e4:e4:eb:
         48:b2:21:cb:d8:26:92:02:05:0c:73:ab:3c:6d:22:b6:61:b6:
         ae:2c:53:c9:3e:aa:4b:d5:42:01:55:14:89:40:14:15:4f:55:
         51:4a:72:ff:dd:84:fc:0d:bf:94:2c:5a:2c:06:e0:42:54:01:
         91:47:45:71:23:f6:99:6d:a3:3c:4d:43:fd:21:3d:cc:5b:5d:
         ef:f0:1d:c5:43:ca:a5:9b:db:94:42:f5:4e:6f:06:3d:8f:20:
         be:ec:ed:2a:48:a4:db:b6:85:39:8c:a8:ac:ab:6f:c1:9b:a7:
         fa:57:a4:e2:ba:a2:0d:a8:87:80:70:f2:0f:2c:92:f5:ee:e3:
         25:4c:66:07:03:cd:79:23:c8:22:a8:bf:ef:29:13:33:7d:8f:
         a0:2c:b9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:44 2024 by rpki-client on console-ams.rpki-client.org