Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/14/32332e3133332e382e302f32342d3234203d3e203632383533.roa
File:                     32332e3133332e382e302f32342d3234203d3e203632383533.roa (raw, json)
Hash identifier:          yfz0BbPFN5sIjD756QyCyawQpqKF8+D/i14x8oXOyqc=
Subject key identifier:   A9:AD:9C:B2:99:8A:B4:96:E5:F9:DF:C3:A4:A6:7A:C5:3A:E1:E4:4D
Certificate issuer:       /CN=eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc
Certificate serial:       43A9E244DD179A6D51986EBE47D569D23212CF57
Authority key identifier: 2B:E0:E6:38:9F:AD:C8:0B:FE:86:22:5B:DF:09:12:B6:17:76:04:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc.cer
Subject info access:      rsync://rpki.co/repo/August/14/32332e3133332e382e302f32342d3234203d3e203632383533.roa
Signing time:             Sat 08 Apr 2023 21:46:32 +0000
ROA not before:           Sat 08 Apr 2023 21:41:32 +0000
ROA not after:            Sat 06 Apr 2024 21:46:32 +0000
asID:                     62853
IP address blocks:        23.133.8.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a9:e2:44:dd:17:9a:6d:51:98:6e:be:47:d5:69:d2:32:12:cf:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc
        Validity
            Not Before: Apr  8 21:41:32 2023 GMT
            Not After : Apr  6 21:46:32 2024 GMT
        Subject: CN=A9AD9CB2998AB496E5F9DFC3A4A67AC53AE1E44D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:d1:82:2a:ef:3e:ea:b4:17:a9:59:18:6f:7b:
                    74:8f:5b:cb:d6:99:ec:f8:e9:00:3e:43:6f:f2:10:
                    0e:ae:47:87:85:ef:97:72:39:06:41:c6:c6:f9:49:
                    c8:92:2c:7b:4f:a5:39:d9:e9:9e:09:08:6f:11:d0:
                    a7:d8:d0:da:a3:ca:32:b6:91:6e:c5:24:95:94:57:
                    29:bd:25:bd:69:96:df:56:fc:7d:dd:9c:0b:4f:cc:
                    83:ee:3f:f4:8d:af:17:f6:6a:2c:fc:1c:7a:67:bd:
                    69:7c:4e:b9:f1:61:8e:70:7a:d3:0c:cd:8c:c1:30:
                    93:85:d2:76:9e:3c:e2:34:b8:44:bd:07:1f:b5:10:
                    c4:ee:2f:88:dc:f8:89:72:92:35:d9:42:0e:44:a1:
                    d3:48:e9:e9:85:c2:32:24:a3:a0:62:a7:05:b8:9b:
                    35:7c:1d:3d:c9:19:88:a6:53:18:7f:ab:8a:1b:c7:
                    f1:67:ae:06:7f:df:51:80:48:c7:b7:15:0a:2c:d9:
                    5a:fc:0f:68:47:4a:2c:8b:48:8e:97:2f:87:8e:22:
                    5e:b3:2b:02:37:f6:d2:a5:c1:6c:82:6c:e3:aa:13:
                    a7:f5:14:79:e7:ba:5f:33:e5:81:48:8a:50:8a:e3:
                    3f:16:26:ee:6c:28:f0:1e:35:6e:d9:3d:85:01:c6:
                    df:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:AD:9C:B2:99:8A:B4:96:E5:F9:DF:C3:A4:A6:7A:C5:3A:E1:E4:4D
            X509v3 Authority Key Identifier:
                keyid:2B:E0:E6:38:9F:AD:C8:0B:FE:86:22:5B:DF:09:12:B6:17:76:04:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/14/2BE0E6389FADC80BFE86225BDF0912B6177604EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/14/32332e3133332e382e302f32342d3234203d3e203632383533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:fb:66:37:3a:01:0a:13:74:d2:02:6b:4a:54:bb:23:35:a6:
         8b:e3:4b:90:74:15:e4:a0:ea:ae:4f:ca:d7:8c:e6:d1:4c:2e:
         dc:34:1a:bb:97:7a:8d:c5:43:53:1c:2e:b9:c6:a6:f5:ce:d2:
         a8:8d:7c:9d:b8:92:19:41:cb:be:fc:89:11:90:90:52:24:6a:
         ec:73:85:d8:93:66:b7:0f:3e:a8:df:39:55:a3:da:3a:fc:bc:
         6b:28:c7:61:77:79:82:f9:ca:68:ab:97:8e:41:30:8b:32:1e:
         7b:a1:b7:c2:57:fc:91:34:3e:6e:46:09:4e:b0:6b:f1:de:44:
         44:9c:ac:e9:bc:4e:04:c6:dc:33:a6:fd:af:fe:8e:a0:69:51:
         11:e5:93:29:f4:0c:57:f4:85:66:e5:a8:56:a5:75:2a:98:e6:
         b9:e6:df:48:52:d6:2f:c3:56:86:83:c8:41:68:d5:7e:f3:7a:
         77:79:0a:0e:3c:43:d6:3c:9e:eb:81:ea:5d:35:44:d7:cc:ea:
         56:06:d9:91:36:5b:78:c7:64:db:ff:33:ea:67:ee:bf:f2:69:
         cf:ac:8b:1d:f9:d8:96:00:3d:be:50:e2:c3:eb:71:65:7d:2a:
         dd:99:f6:63:6a:46:89:3e:5a:f9:f4:90:e7:70:e1:6d:ce:5a:
         b7:3d:15:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:28 2023 by rpki-client on console-fra.rpki-client.org