Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf909475a601909d1f7ab0086d/0/32332e3138302e3230302e302f32342d3234203d3e203534323831.roa
File:                     32332e3138302e3230302e302f32342d3234203d3e203534323831.roa (raw, json)
Hash identifier:          nVil9GrqUe1dTM9K5ERXUsxs4UXjskbiYbtlqqo7jl4=
Subject key identifier:   6F:3A:91:F9:3D:E4:5F:B5:8A:1C:64:7F:20:86:35:9F:AF:B9:E2:7F
Certificate issuer:       /CN=cfc9610f6331b2be4463cb77f90c3893f8a16eed896fc93f5b
Certificate serial:       51916B5F3DFB6019594EA443257F59C91CC8E0A0
Authority key identifier: 4E:A2:E4:D0:69:52:91:C7:87:2E:6C:F8:8E:64:BA:9B:A2:3E:F7:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/18991ace-3e88-491f-b286-e1996e753c3d/cfc9610f6331b2be4463cb77f90c3893f8a16eed896fc93f5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf909475a601909d1f7ab0086d/0/32332e3138302e3230302e302f32342d3234203d3e203534323831.roa
Signing time:             Wed 10 Jul 2024 14:57:35 +0000
ROA not before:           Wed 10 Jul 2024 14:52:35 +0000
ROA not after:            Wed 09 Jul 2025 14:57:35 +0000
asID:                     54281
IP address blocks:        23.180.200.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:91:6b:5f:3d:fb:60:19:59:4e:a4:43:25:7f:59:c9:1c:c8:e0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc9610f6331b2be4463cb77f90c3893f8a16eed896fc93f5b
        Validity
            Not Before: Jul 10 14:52:35 2024 GMT
            Not After : Jul  9 14:57:35 2025 GMT
        Subject: CN=6F3A91F93DE45FB58A1C647F2086359FAFB9E27F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:12:15:df:81:93:58:48:e8:b4:14:73:5d:5d:
                    72:83:75:24:86:20:7e:e2:b6:f6:05:3c:fe:40:f6:
                    8c:72:b1:19:3a:45:59:28:c2:2f:96:fa:9b:b1:08:
                    ec:d3:3d:65:f7:66:38:6a:b8:cf:89:c9:6b:a0:1d:
                    0b:2e:06:6e:02:c8:8b:4f:66:d2:1b:4f:a2:ef:62:
                    cf:63:a5:4c:79:ec:bf:47:c1:26:e5:96:63:ab:e4:
                    e6:69:61:a6:df:cb:d3:88:07:fc:26:0e:7d:4b:0b:
                    f0:36:6d:13:fc:01:94:b2:28:86:51:aa:ef:8e:f9:
                    cc:98:d1:19:69:23:7d:33:e5:e6:b1:93:77:20:53:
                    84:e2:43:50:a5:2f:c5:aa:d9:bb:4a:ad:90:ae:d9:
                    6e:be:24:20:72:a0:1f:a2:66:b6:dc:7d:98:ff:7b:
                    8a:84:88:e3:98:10:8e:0d:fa:47:de:49:04:75:af:
                    e8:37:d7:83:20:23:5b:d6:18:31:b8:3b:4e:c8:06:
                    7c:c0:23:10:ab:6a:ca:a2:b7:f5:15:a0:aa:81:1e:
                    24:fd:50:e7:1c:da:d9:6b:6e:58:d2:59:f3:ec:69:
                    98:96:d4:d2:f0:12:be:de:3d:3e:31:d7:01:41:57:
                    fa:db:62:5b:15:d6:41:13:8e:8c:3d:cc:fc:33:db:
                    89:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3A:91:F9:3D:E4:5F:B5:8A:1C:64:7F:20:86:35:9F:AF:B9:E2:7F
            X509v3 Authority Key Identifier:
                keyid:4E:A2:E4:D0:69:52:91:C7:87:2E:6C:F8:8E:64:BA:9B:A2:3E:F7:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf909475a601909d1f7ab0086d/0/4EA2E4D0695291C7872E6CF88E64BA9BA23EF770.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/18991ace-3e88-491f-b286-e1996e753c3d/cfc9610f6331b2be4463cb77f90c3893f8a16eed896fc93f5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf909475a601909d1f7ab0086d/0/32332e3138302e3230302e302f32342d3234203d3e203534323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.180.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:52:74:35:6e:0d:7c:ff:bb:4e:f3:28:29:81:ac:e1:af:da:
         1e:8b:9b:50:f2:6d:66:4e:ac:8f:d0:49:0a:24:43:67:e3:40:
         92:ce:94:27:70:a0:b8:96:cc:7d:45:ff:c4:cf:36:38:fc:83:
         f0:13:bd:fa:3f:e2:0b:ca:65:d7:73:f0:ef:38:3e:f0:fa:5a:
         53:2d:b5:d2:11:5a:6d:58:a3:dd:1f:43:b2:41:46:45:df:60:
         3b:c4:ac:c1:0e:25:1b:a9:fa:3e:38:47:f5:01:0e:fd:c4:1d:
         b1:86:83:c4:c1:00:99:2c:85:6e:c7:0d:c9:38:4b:93:13:7e:
         0d:d8:3c:2b:1b:f0:79:23:fb:67:8d:cc:d8:02:b6:8a:b9:ac:
         ed:d6:a2:e8:25:3e:0e:a4:d8:54:fe:92:1a:3b:58:f5:e7:87:
         c3:61:50:22:bf:2c:f9:a1:69:e2:4d:1c:90:bd:24:91:de:e2:
         f7:18:a2:5f:f1:b5:e8:cc:66:05:f9:05:6f:f2:f9:db:9d:82:
         dc:1d:3e:ae:15:a4:1e:30:12:2a:0a:62:40:af:10:1a:11:39:
         53:b6:83:33:16:5e:15:96:0c:77:e5:d4:11:fa:9f:63:df:83:
         8c:24:cc:26:4f:14:2a:17:48:8d:04:7f:52:38:19:b4:56:52:
         54:d0:d7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 03:32:51 2024 by rpki-client on console.sobornost.net