Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
File:                     3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa (raw, json)
Hash identifier:          xSZ6gqzWfny/H+kh+dLsHQ0LXujaBx+eUAVzaX7/sdU=
Subject key identifier:   07:14:53:8D:F6:5E:15:66:94:E4:90:19:29:F1:5B:63:66:64:E9:95
Certificate issuer:       /CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
Certificate serial:       3610B0F44E11B360F4E1645ADD238D2D08E172F9
Authority key identifier: FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa
Signing time:             Fri 09 Feb 2024 22:35:19 +0000
ROA not before:           Fri 09 Feb 2024 22:30:19 +0000
ROA not after:            Fri 07 Feb 2025 22:35:19 +0000
asID:                     399970
IP address blocks:        149.112.155.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:10:b0:f4:4e:11:b3:60:f4:e1:64:5a:dd:23:8d:2d:08:e1:72:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a
        Validity
            Not Before: Feb  9 22:30:19 2024 GMT
            Not After : Feb  7 22:35:19 2025 GMT
        Subject: CN=0714538DF65E156694E4901929F15B636664E995
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c1:5e:9f:6a:a0:57:f6:23:11:e0:c7:1c:06:
                    65:1c:ef:5d:b2:88:5b:69:97:02:d0:2d:f3:27:c7:
                    8e:de:e9:40:93:37:67:50:8d:f5:67:5a:6c:c9:e8:
                    39:99:86:d7:2c:8a:9d:65:1f:2e:c5:f1:7a:e7:8a:
                    f4:09:39:38:28:b7:a4:ef:f7:3c:05:9c:4c:6e:34:
                    f1:7d:55:d4:4a:a9:f1:ff:1e:4f:07:c0:96:1a:79:
                    71:8b:ad:d0:e7:f6:12:00:4f:af:da:39:95:68:ad:
                    68:e1:78:e1:90:b8:3b:5c:32:53:1d:e3:3e:ad:18:
                    88:5b:d3:82:e0:e1:65:cb:36:45:76:ae:b7:77:07:
                    d9:ce:73:64:b0:f1:33:b5:ef:fa:74:cb:db:66:18:
                    dd:bf:67:a5:8e:30:a6:7d:f8:1a:86:f0:22:82:99:
                    4c:e9:64:1f:c2:e3:2c:0f:8a:58:f5:08:3e:75:99:
                    a9:c4:20:ce:55:c2:2c:f4:c6:55:6d:37:86:9e:4d:
                    cc:63:85:62:52:a9:b2:1d:ad:96:a4:eb:00:42:a3:
                    34:77:44:02:56:4e:54:38:6d:51:ea:c1:95:07:20:
                    9f:cd:2f:ea:49:22:0a:8b:3a:eb:6b:df:ad:83:cd:
                    7a:6e:b6:05:7a:7b:be:29:9a:64:9b:91:52:1a:2d:
                    fb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:14:53:8D:F6:5E:15:66:94:E4:90:19:29:F1:5B:63:66:64:E9:95
            X509v3 Authority Key Identifier:
                keyid:FD:1F:CD:7C:92:29:B0:BE:74:0F:5B:DA:B5:F4:E6:B1:D6:06:A4:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/FD1FCD7C9229B0BE740F5BDAB5F4E6B1D606A4E2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9d14f316-922d-497d-be54-fa80fcfb9e16/fcb20f5966ff62d5a20b7dc663738a071f757d03bbadcfd31a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018d900174b925c4/0/3134392e3131322e3135352e302f32342d3234203d3e20333939393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:6f:4a:bd:3d:13:41:91:c3:27:02:17:cb:40:31:52:26:63:
         7b:22:8b:76:df:cd:25:1d:90:52:02:7c:2d:74:22:44:94:98:
         7a:23:f9:61:9b:57:5c:15:c4:ba:5c:8e:74:8a:ff:b8:94:02:
         ff:bb:c7:56:e0:09:62:39:e5:e1:30:cd:be:57:57:3f:13:48:
         6b:04:7a:6f:4a:12:16:f3:44:6d:76:0b:04:13:86:93:25:04:
         03:4b:2f:fd:4e:12:fe:95:ef:63:94:3b:17:63:72:74:69:6f:
         08:6e:0f:e1:aa:30:91:12:80:61:6e:af:ba:03:e2:da:ed:9b:
         04:c7:28:60:dd:4f:09:5d:29:a1:1a:3a:4e:ff:32:de:69:32:
         c9:3a:29:18:ec:3e:42:a0:a8:c3:26:b9:b8:89:29:c9:ec:e3:
         bb:7b:7e:cd:b2:6a:40:5b:ab:2a:bb:e6:7b:0b:8d:a6:77:e8:
         2f:53:27:89:ee:88:6f:ce:79:f1:d2:4c:4a:1a:4a:92:64:85:
         7d:1a:03:6c:b9:62:3f:d6:54:55:c1:1e:4e:ec:a4:e5:b7:b1:
         85:3f:ac:82:d8:d9:b9:75:2b:8a:af:48:d4:26:6b:31:98:7f:
         b0:38:e9:99:05:c6:1f:5c:b0:9f:59:ed:f7:68:84:19:de:bd:
         9b:c0:99:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:09 2024 by rpki-client on console-fra.rpki-client.org