Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37332e302f32342d3234203d3e20333938343635.roa
File:                     3230362e3230362e37332e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          oIgdwYW9M3CSdY3iVLtnTkJhqU8nuZ/LxrxkmbuBmTM=
Subject key identifier:   8F:37:C2:AF:A7:61:2E:4A:3E:71:6D:4E:7F:15:F5:C8:50:B7:FE:12
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       6A02BD1D96CB2EB68B00C97C1E47D64EEB77A5F7
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37332e302f32342d3234203d3e20333938343635.roa
Signing time:             Mon 11 Jul 2022 08:31:00 +0000
ROA not before:           Mon 11 Jul 2022 08:26:00 +0000
ROA not after:            Mon 10 Jul 2023 08:31:00 +0000
asID:                     398465
IP address blocks:        206.206.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:02:bd:1d:96:cb:2e:b6:8b:00:c9:7c:1e:47:d6:4e:eb:77:a5:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:26:00 2022 GMT
            Not After : Jul 10 08:31:00 2023 GMT
        Subject: CN=8F37C2AFA7612E4A3E716D4E7F15F5C850B7FE12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e4:3a:74:9c:2f:19:91:c9:13:83:55:3d:6d:
                    03:52:5d:a1:6d:7c:ef:af:14:64:b6:e1:16:36:d4:
                    a3:39:95:d5:d9:30:95:52:85:1b:00:7f:87:84:4a:
                    30:db:0f:98:08:ff:19:6a:6b:46:25:71:dc:0a:e8:
                    92:14:60:d8:d3:a6:cd:b1:fb:66:8d:dc:58:e5:4a:
                    c3:97:41:a8:ad:a5:bb:08:57:2c:40:59:1a:17:65:
                    25:2d:b7:b1:e1:94:b2:cb:53:e1:c7:62:15:d0:65:
                    14:b3:f4:67:7e:10:53:5e:02:f9:b7:c3:58:92:f7:
                    af:ef:4c:f0:23:f1:19:88:af:b1:f2:97:a8:3a:1c:
                    2c:76:4a:ec:65:3d:fd:04:30:48:c4:b4:ce:9a:c2:
                    56:ed:06:f7:50:c4:0f:4b:69:cd:dc:e9:b6:81:3b:
                    13:79:dc:40:ee:64:98:bb:67:fd:d2:82:c9:25:e6:
                    77:76:50:d5:4b:37:d8:38:07:f3:7d:c3:57:7b:cf:
                    af:68:e3:36:c2:bb:16:6d:f1:cd:c5:5a:5a:6d:1c:
                    9d:f7:5b:7e:5c:e6:5a:84:63:81:0d:ec:b3:0d:27:
                    27:73:55:4d:e5:05:14:22:a5:e8:14:27:1b:84:72:
                    79:3b:d5:b3:1d:ff:46:82:16:73:41:a3:12:5f:62:
                    2d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:37:C2:AF:A7:61:2E:4A:3E:71:6D:4E:7F:15:F5:C8:50:B7:FE:12
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37332e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:cb:6c:77:0f:d7:15:5e:c6:53:6b:2c:a3:98:8f:0d:ad:10:
         25:f8:b5:24:91:c2:4e:fd:21:e4:5c:99:26:dd:23:a4:ff:26:
         8a:e2:d4:21:5a:95:5d:44:53:5d:8e:d4:72:22:91:31:8a:65:
         29:f4:b1:8b:7c:63:db:f3:d6:22:ca:fb:81:41:b4:59:d5:16:
         c3:48:58:6f:71:1d:10:c2:02:cc:23:2d:5b:91:bd:be:b8:2c:
         f1:34:34:55:07:38:5e:44:83:85:1c:39:be:d4:f3:9c:f1:60:
         99:62:7a:23:83:7b:02:2c:c6:1b:dc:c3:6c:6e:31:2b:e1:6d:
         f4:1c:2c:cd:5e:2b:d3:41:95:82:22:dc:f0:7c:a7:37:1e:0d:
         b2:41:74:dd:05:d2:f4:6c:63:5c:cf:08:a4:c5:5a:ca:14:fe:
         16:48:5f:95:52:96:d4:31:3c:c0:c9:ed:7b:9a:ea:66:92:dd:
         fc:77:5a:23:0e:bc:33:48:63:50:7d:ab:42:de:28:b5:e3:82:
         8b:9e:0d:c5:ad:c9:52:69:8f:86:4e:f1:d1:20:90:b6:f1:a8:
         fc:32:45:bc:47:0e:3a:b8:d0:76:c1:85:ff:ee:a0:57:79:3c:
         4e:d7:86:7b:15:e2:f8:cc:3c:b9:84:76:6e:81:5a:5d:a0:a3:
         13:2b:ce:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org