Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3138332e302f32342d3234203d3e20323132303237.roa
File:                     3139392e34382e3138332e302f32342d3234203d3e20323132303237.roa (raw, json)
Hash identifier:          Rk79S5l8HSbsaNC4LXlaY4SNiKbUUInZwO/HWwkZqjo=
Subject key identifier:   96:3E:64:BD:67:8C:B5:6B:7D:88:84:27:E5:32:7D:21:B6:7E:DA:42
Certificate issuer:       /CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
Certificate serial:       D723918E7ADF8C122A197884C68DDCD5EE5052
Authority key identifier: 7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3138332e302f32342d3234203d3e20323132303237.roa
Signing time:             Fri 06 Oct 2023 15:14:51 +0000
ROA not before:           Fri 06 Oct 2023 15:09:51 +0000
ROA not after:            Fri 04 Oct 2024 15:14:51 +0000
asID:                     212027
IP address blocks:        199.48.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            d7:23:91:8e:7a:df:8c:12:2a:19:78:84:c6:8d:dc:d5:ee:50:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a
        Validity
            Not Before: Oct  6 15:09:51 2023 GMT
            Not After : Oct  4 15:14:51 2024 GMT
        Subject: CN=963E64BD678CB56B7D888427E5327D21B67EDA42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:14:88:af:08:a0:3e:f2:35:10:a3:a9:01:fd:
                    84:ec:ca:9d:ab:db:61:27:1a:53:23:c3:dc:49:a1:
                    f0:84:1f:a1:48:00:72:0d:2b:76:a2:a2:d3:76:24:
                    3b:ca:c5:11:64:cc:1e:f0:fa:05:60:b8:92:aa:b8:
                    d1:9e:82:39:55:67:6c:65:64:37:81:b1:88:21:db:
                    d4:fd:e8:7f:13:85:94:fa:8c:77:31:f1:f1:3f:3c:
                    66:db:bc:d9:e5:64:30:00:bb:60:b1:17:cf:10:59:
                    8b:bf:98:78:e0:b6:3b:b1:11:22:9b:59:de:c1:10:
                    82:52:d7:18:30:8e:07:f5:1e:a0:d4:67:ad:4a:fc:
                    eb:ca:1d:d6:1c:a2:12:50:dc:30:f9:44:4b:c6:90:
                    f4:fe:38:a6:9d:76:44:64:89:e1:75:c3:fb:be:2b:
                    0c:05:5d:fe:ae:c1:6c:44:0b:86:aa:e0:95:e0:c9:
                    76:b3:55:8a:23:39:93:24:5f:82:7a:20:de:db:72:
                    84:5b:33:5a:4b:35:af:01:2c:23:cb:d5:7d:38:d6:
                    0c:7f:b6:46:f1:ac:d4:e2:e5:02:ae:1a:1b:aa:b7:
                    7c:ab:72:0f:1f:38:23:c4:f7:c6:b2:b7:2e:ad:a0:
                    f7:ea:98:28:9b:97:31:a0:f3:d0:03:e1:fc:75:0d:
                    07:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:3E:64:BD:67:8C:B5:6B:7D:88:84:27:E5:32:7D:21:B6:7E:DA:42
            X509v3 Authority Key Identifier:
                keyid:7C:C8:AF:ED:C1:3E:D7:A2:E0:FB:10:BB:32:E0:D9:FC:61:6C:6A:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/7CC8AFEDC13ED7A2E0FB10BB32E0D9FC616C6AB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b685cc2d-e74d-4908-8af0-8f3ee48d8d20/6dabd51a4b9f9e8d06f3d7dedd63c5f49c920c843b2a379d2a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b907018998ad8dc23005/0/3139392e34382e3138332e302f32342d3234203d3e20323132303237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:48:12:96:5b:49:a8:00:0f:43:da:6b:ea:28:e0:cb:c5:16:
         38:80:b3:9f:a5:2d:79:e9:b2:f0:49:1d:e6:9c:4e:eb:ff:d8:
         0e:d1:49:79:e0:ee:61:63:b9:5c:ee:ee:c8:0c:2a:21:57:2a:
         bc:56:eb:c7:2f:b8:ea:5e:2b:a3:74:ef:49:99:0e:d4:8a:b4:
         1c:f0:07:26:66:e0:72:eb:2d:88:e8:33:e3:ae:8c:9d:d3:c1:
         91:fd:8d:3f:05:c0:42:f8:20:57:20:89:e1:cc:5a:82:d2:46:
         9d:bd:c9:7b:09:98:d0:56:13:0f:a3:6b:70:ca:6e:fb:bb:2b:
         70:4e:72:5a:f0:90:78:47:cb:bc:78:a6:2b:ee:64:30:73:bc:
         74:e3:8e:61:ff:63:2f:21:cd:89:73:65:8a:06:f4:97:75:e1:
         d4:bc:30:20:10:8f:2e:e7:44:36:bd:9a:0a:3f:f2:39:6d:51:
         5c:64:49:de:55:48:68:ea:24:bd:9a:46:89:7c:90:b2:5b:56:
         85:27:a2:f1:10:79:4f:2a:f8:d8:e9:57:97:08:24:8e:c6:05:
         28:e0:a0:44:20:32:80:45:d7:70:2a:31:b1:84:75:cc:d3:df:
         7c:16:84:9f:f3:52:04:15:a5:6d:78:ae:79:39:81:0e:51:53:
         bc:8a:cf:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:09 2024 by rpki-client on console-fra.rpki-client.org