Route Origin Authorization

$ rpki-client -vvf rsync.prefixlogic.com/repo/prefixlogic/1/3139392e3138382e3134382e302f32342d3234203d3e203133353237.roa
File:                     3139392e3138382e3134382e302f32342d3234203d3e203133353237.roa (raw, json)
Hash identifier:          y9VJ8F7B1dec/sUjUjdL1mgu2iz+aaZJzu8lP8wmIQY=
Subject key identifier:   F3:86:EB:91:9D:4C:16:F7:2C:01:96:2E:3B:91:15:32:9A:96:DD:43
Certificate issuer:       /CN=3e29f8e85bc043af8ad0a633d29e09b4996227f0698b40f0ac
Certificate serial:       1C4BB66C889AE07D381DD377DF147DC37BC7F31B
Authority key identifier: B8:62:A3:9F:8B:CA:AC:FE:09:B8:C8:9B:6A:0E:46:1D:E2:69:2D:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e6b516b3-6b66-44f7-8aab-c53eb9f8a5ff/3e29f8e85bc043af8ad0a633d29e09b4996227f0698b40f0ac.cer
Subject info access:      rsync://rsync.prefixlogic.com/repo/prefixlogic/1/3139392e3138382e3134382e302f32342d3234203d3e203133353237.roa
Signing time:             Fri 12 Jun 2026 18:02:42 +0000
ROA not before:           Fri 12 Jun 2026 17:57:42 +0000
ROA not after:            Fri 11 Jun 2027 18:02:42 +0000
asID:                     13527
IP address blocks:        199.188.148.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:4b:b6:6c:88:9a:e0:7d:38:1d:d3:77:df:14:7d:c3:7b:c7:f3:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e29f8e85bc043af8ad0a633d29e09b4996227f0698b40f0ac
        Validity
            Not Before: Jun 12 17:57:42 2026 GMT
            Not After : Jun 11 18:02:42 2027 GMT
        Subject: CN=F386EB919D4C16F72C01962E3B9115329A96DD43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:41:4f:9d:fb:d0:48:e8:98:d1:0e:85:f7:1b:
                    9e:18:71:d8:80:18:0c:eb:eb:60:e6:7a:66:55:42:
                    a4:74:ca:d1:11:8c:a4:36:94:6a:70:46:c1:dd:00:
                    22:4f:01:8f:6d:09:4b:0d:f5:64:1c:05:fb:9b:36:
                    52:38:11:49:83:9a:95:9e:f7:a1:ea:c5:30:06:14:
                    6c:c7:12:53:49:a2:26:eb:07:e0:e3:3f:a8:1e:67:
                    68:9e:14:85:52:25:6a:b3:e9:97:e1:5d:f7:09:1d:
                    8e:15:9c:2a:da:35:fa:b1:cc:8b:34:6e:51:de:a9:
                    80:1b:54:8f:b4:0a:24:1e:7e:41:0c:37:c4:79:32:
                    c6:07:29:33:69:c0:ab:b6:b0:34:e1:40:c4:46:d8:
                    ec:00:71:68:aa:3f:ea:22:a7:50:aa:cf:96:82:69:
                    24:3e:81:58:a3:da:c0:73:11:7a:4b:d1:3b:da:23:
                    83:fe:20:ef:a8:8c:26:ae:22:8d:96:e3:26:43:95:
                    1c:5e:97:41:f9:cb:4d:80:e2:61:75:0d:8f:12:21:
                    e5:09:aa:20:cd:04:5c:ac:6d:a2:2d:42:ca:29:ab:
                    94:95:11:79:5d:49:09:ee:51:6b:ff:90:c4:08:bc:
                    8c:83:a5:34:cb:04:37:d4:90:b5:41:65:99:a3:c5:
                    d3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:86:EB:91:9D:4C:16:F7:2C:01:96:2E:3B:91:15:32:9A:96:DD:43
            X509v3 Authority Key Identifier:
                keyid:B8:62:A3:9F:8B:CA:AC:FE:09:B8:C8:9B:6A:0E:46:1D:E2:69:2D:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.prefixlogic.com/repo/prefixlogic/1/B862A39F8BCAACFE09B8C89B6A0E461DE2692DFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e6b516b3-6b66-44f7-8aab-c53eb9f8a5ff/3e29f8e85bc043af8ad0a633d29e09b4996227f0698b40f0ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.prefixlogic.com/repo/prefixlogic/1/3139392e3138382e3134382e302f32342d3234203d3e203133353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:f8:e4:81:87:d8:d5:8a:b4:fa:6e:09:39:b5:d4:d8:6d:b7:
         fb:6e:7a:ac:ab:95:da:b4:3f:55:bb:a6:ac:f0:84:e2:d7:c1:
         b0:df:0a:8e:2c:79:a3:d5:c0:8d:d2:8e:b7:44:ad:28:e7:3c:
         82:21:bb:60:45:c7:30:28:73:57:dd:50:a5:6c:b0:7b:22:bd:
         12:e7:d6:a7:16:8c:ef:9e:0d:6f:c5:c1:b5:c0:7b:18:d9:d8:
         3f:78:65:97:62:5a:0e:a6:8d:30:08:f7:b0:74:15:b4:e2:f4:
         4a:20:a0:ce:5b:e1:87:ad:40:af:21:b5:09:3c:04:f7:e2:42:
         75:1f:c3:e5:68:f2:cd:94:78:18:2e:3e:76:2b:df:cb:62:8a:
         bb:97:e9:ee:13:aa:12:a9:b5:aa:fc:12:fa:ef:82:2b:c8:bd:
         4b:90:50:d7:62:2d:79:77:f1:d3:cc:f4:09:12:8d:06:25:8a:
         6a:bc:3e:06:a8:34:06:d4:a4:17:d5:ab:58:ed:76:13:9c:d0:
         52:28:3f:6c:53:30:48:e5:f1:d9:a4:78:0d:ba:d6:58:99:51:
         3e:5d:de:55:b3:c4:41:31:e3:44:18:be:af:dd:b1:f1:2b:f6:
         ca:95:68:d0:1b:e1:69:f9:b8:a4:41:5f:db:53:78:30:e0:8e:
         b0:72:3a:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 08:42:34 2026 by rpki-client