Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3131362e302f32322d3234203d3e20323131353835.roa
File:                     3230362e3230362e3131362e302f32322d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          LC4dZtot/1xFjhqzVRHwlUcv/+mBdhoHW9bPMFTKUn4=
Subject key identifier:   1B:6A:92:F4:65:A6:2B:10:6D:4B:65:81:AD:B2:3E:7E:7A:DD:6E:C7
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       2B26CC1BC8B2526F64733DBBCD11FA281797CF5A
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3131362e302f32322d3234203d3e20323131353835.roa
Signing time:             Wed 10 Aug 2022 16:10:57 +0000
ROA not before:           Wed 10 Aug 2022 16:05:57 +0000
ROA not after:            Wed 09 Aug 2023 16:10:57 +0000
asID:                     211585
IP address blocks:        206.206.116.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:26:cc:1b:c8:b2:52:6f:64:73:3d:bb:cd:11:fa:28:17:97:cf:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Aug 10 16:05:57 2022 GMT
            Not After : Aug  9 16:10:57 2023 GMT
        Subject: CN=1B6A92F465A62B106D4B6581ADB23E7E7ADD6EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:bf:9a:6d:32:1d:b5:91:33:fa:fe:f2:4e:
                    77:00:1c:2f:6f:0b:1b:09:54:f1:c3:07:44:e9:3b:
                    05:a3:b0:c9:3d:9e:fe:00:fe:a1:1c:07:1b:58:4d:
                    0c:c0:42:20:67:fd:75:89:8a:f3:b4:ff:6c:68:ff:
                    57:3a:bf:f2:e0:ac:7d:27:70:18:c4:ee:fd:7d:a6:
                    d0:db:15:3b:67:cd:62:00:41:c4:8c:0f:6a:60:05:
                    1c:16:f4:b5:2d:8e:60:d0:bd:b8:ad:e9:74:d8:42:
                    1d:22:b0:0c:8d:7a:11:b6:1f:67:d1:11:38:18:15:
                    a2:fa:3b:1c:a8:2e:f3:f2:c1:31:c7:01:3e:3b:08:
                    d9:3f:47:a1:c1:ac:47:be:36:79:bb:ce:22:92:57:
                    de:e5:e1:09:d3:f1:2d:b5:76:3d:2d:75:ac:fd:57:
                    b3:69:b9:d3:ef:98:aa:16:52:8d:ad:40:61:1e:be:
                    56:d5:a9:6b:25:22:da:21:07:7a:49:18:bb:59:bd:
                    40:07:3b:38:7a:66:fd:1f:83:9e:88:39:a1:51:25:
                    67:24:ec:25:6b:7f:81:c9:d0:bd:d6:91:cd:3d:1d:
                    6d:a8:5e:94:f1:33:c9:59:1c:bd:3a:7f:83:8f:27:
                    2a:45:4a:86:46:be:52:fe:ec:3e:87:77:dd:21:7a:
                    57:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6A:92:F4:65:A6:2B:10:6D:4B:65:81:AD:B2:3E:7E:7A:DD:6E:C7
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3131362e302f32322d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:a5:52:62:4a:50:76:c9:10:f2:87:d5:4e:ba:07:66:30:2b:
         7e:73:19:8a:57:2b:72:be:59:89:db:23:c1:16:d8:6d:c8:ab:
         6a:41:60:c9:77:be:7b:11:41:9c:8b:aa:d3:da:ca:1b:1c:c6:
         c3:c4:46:50:f3:23:a8:6f:b5:3d:ab:47:59:2f:7f:ea:bc:b6:
         f4:25:10:e3:40:c3:9c:5a:0a:ae:38:da:1a:ab:25:d3:5e:c1:
         0a:24:63:c2:fd:46:09:a7:47:ae:1c:ec:d7:f7:79:7c:8a:e6:
         40:70:84:e1:b3:b5:f9:ea:8e:99:fc:2a:d5:90:7c:a1:4f:0d:
         af:ee:56:f0:01:5d:1e:01:8b:84:d2:8d:5f:51:3a:6d:a1:1e:
         1a:db:1e:9b:c2:7a:55:c9:b9:c3:e0:2f:f5:a7:9d:4c:37:2b:
         01:fe:b3:4a:9b:0e:7c:47:84:d0:2b:23:47:13:b2:4f:e7:10:
         7b:0c:fd:b3:dc:c2:c2:2c:97:b9:97:1e:7e:69:77:e5:42:21:
         dc:f4:70:94:fe:5f:61:76:eb:45:69:56:81:81:25:44:f6:22:
         9a:30:51:1d:24:48:ad:fc:96:6d:50:f2:28:56:24:1e:4b:bb:
         b7:c2:d0:e1:31:5b:56:4e:49:af:b2:4c:b0:61:64:ff:f9:c5:
         6a:53:96:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org