Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/3134392e3131322e3135342e302f32332d3233203d3e20333939393730.roa
File:                     3134392e3131322e3135342e302f32332d3233203d3e20333939393730.roa (raw, json)
Hash identifier:          qgsAbSLFDOYonu0aJaoMPtxvbhygZJzx6Vg/MwlVRZ0=
Subject key identifier:   52:C4:23:E5:06:8E:F9:15:23:CB:E6:BB:52:07:6D:0C:92:8B:3B:29
Certificate issuer:       /CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
Certificate serial:       10293EF6C7B6DBD069BA994C30BD250EB1C95DDA
Authority key identifier: FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/3134392e3131322e3135342e302f32332d3233203d3e20333939393730.roa
Signing time:             Fri 09 Feb 2024 22:35:19 +0000
ROA not before:           Fri 09 Feb 2024 22:30:19 +0000
ROA not after:            Fri 07 Feb 2025 22:35:19 +0000
asID:                     399970
IP address blocks:        149.112.154.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:29:3e:f6:c7:b6:db:d0:69:ba:99:4c:30:bd:25:0e:b1:c9:5d:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
        Validity
            Not Before: Feb  9 22:30:19 2024 GMT
            Not After : Feb  7 22:35:19 2025 GMT
        Subject: CN=52C423E5068EF91523CBE6BB52076D0C928B3B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b5:7a:cd:4f:9b:b9:e0:13:c2:fb:3f:8d:c5:
                    eb:61:bc:fc:24:3f:f5:21:f1:d4:84:1a:43:ed:a2:
                    59:c2:21:ce:7e:0d:ee:25:42:a1:55:1b:c3:80:41:
                    90:63:60:a9:4a:26:a4:7d:65:af:c8:7c:ae:d6:2a:
                    96:0f:88:32:7f:31:45:f6:cc:e7:de:d3:c8:c7:02:
                    99:84:78:2d:2a:23:05:44:e8:86:50:f0:a9:c9:d6:
                    6a:d6:11:41:ef:2c:50:0e:8e:0a:d6:79:e0:24:f1:
                    12:5e:62:b8:5f:18:72:7a:47:0e:99:a6:14:b1:cf:
                    a4:de:2f:65:ec:cb:80:d4:2e:9d:ea:51:fa:a3:ad:
                    ee:bd:9f:95:58:38:f5:f0:86:7e:c2:92:d4:0f:78:
                    df:b6:93:00:b1:e6:1e:2c:1b:4f:19:82:67:98:fd:
                    e5:ef:73:b9:85:9f:b1:ab:eb:11:83:0a:66:60:6e:
                    1b:dd:66:e7:f2:2a:81:27:3f:cd:1e:c8:dd:39:78:
                    93:3d:6e:24:2d:b2:7a:1d:16:6d:1d:29:09:37:68:
                    71:fb:84:15:f7:33:b5:01:ad:86:ca:70:98:b7:fb:
                    b4:91:6b:3e:13:2d:aa:29:51:c5:5c:c3:29:47:96:
                    36:ea:a8:03:f0:b3:f2:f2:60:1b:88:6f:f1:3e:93:
                    98:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C4:23:E5:06:8E:F9:15:23:CB:E6:BB:52:07:6D:0C:92:8B:3B:29
            X509v3 Authority Key Identifier:
                keyid:FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/FD1FCD7C9229B0BE740F5BDAB5F4E6B1D606A4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/3134392e3131322e3135342e302f32332d3233203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         84:4d:95:11:b0:01:47:b0:6e:bf:c7:63:79:dd:5e:05:41:9a:
         8d:61:e0:bb:47:6d:bf:2d:79:d3:09:ce:7a:63:fa:93:6f:f6:
         b3:19:5a:67:61:6e:57:59:77:18:f0:12:70:0e:36:75:e8:11:
         0c:d8:8b:57:4b:cf:dc:b2:74:73:c0:f8:a3:ea:0f:8b:45:03:
         d0:c9:27:cc:f9:47:dd:d6:6a:cf:92:20:5b:ae:48:19:aa:45:
         b6:07:62:25:32:08:0f:4f:7d:93:aa:4a:ab:bb:1c:c0:a4:75:
         9f:2f:27:5b:a7:3b:99:75:7d:c7:c2:6d:e7:46:1b:47:28:e9:
         f9:b6:96:96:e8:53:38:45:57:eb:c1:1c:46:f5:46:d4:20:80:
         8e:ae:28:f1:3d:cf:2d:fa:fb:88:35:ae:b4:21:75:41:26:68:
         88:db:21:31:51:03:bf:74:18:17:ed:d2:65:bf:12:f3:e3:16:
         22:e0:a2:13:97:3f:32:94:e7:7b:b2:0d:ca:da:82:a9:c0:69:
         7c:c3:93:a8:97:37:69:a3:f7:bc:62:28:d5:7e:b3:a6:28:cf:
         e4:ce:83:f4:20:72:c0:2b:f8:ac:b9:85:b1:df:65:80:62:c9:
         b9:c3:4b:72:fe:5d:fa:5a:27:65:e8:eb:9c:32:09:7b:45:5f:
         6e:dc:4b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:44 2024 by rpki-client on console-ams.rpki-client.org