Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38302e302f32322d3232203d3e203439393939.roa
File:                     3230362e3230362e38302e302f32322d3232203d3e203439393939.roa (raw, json)
Hash identifier:          ON9wG1ZDWd23W3nUpY2iWRUNzjoEdIB+lEDBOqJlQGs=
Subject key identifier:   37:3C:89:EC:47:A1:B8:92:1D:19:6D:6E:F7:2D:57:CA:02:61:88:CD
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       0BBDD194EC5CBE2C39F9593A83A93D88616D8550
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38302e302f32322d3232203d3e203439393939.roa
Signing time:             Sat 06 Aug 2022 06:36:51 +0000
ROA not before:           Sat 06 Aug 2022 06:31:51 +0000
ROA not after:            Sat 05 Aug 2023 06:36:51 +0000
asID:                     49999
IP address blocks:        206.206.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bd:d1:94:ec:5c:be:2c:39:f9:59:3a:83:a9:3d:88:61:6d:85:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Aug  6 06:31:51 2022 GMT
            Not After : Aug  5 06:36:51 2023 GMT
        Subject: CN=373C89EC47A1B8921D196D6EF72D57CA026188CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ba:df:bf:ba:e2:7d:ea:45:c9:a0:6a:9e:e8:
                    5e:6c:15:1d:0d:6f:f0:2b:e9:e9:12:d1:fc:7c:9a:
                    42:68:70:e9:7e:8c:b0:2e:31:93:16:70:7b:e0:12:
                    d4:d6:60:79:6c:c4:64:9f:5a:b4:ac:a8:a5:70:f4:
                    cf:3e:d0:18:c0:8b:1d:e9:9f:6e:c0:1e:fd:07:a9:
                    aa:81:a1:d4:f1:69:66:8b:29:21:72:c3:03:0d:9c:
                    03:83:7b:f3:38:58:f7:61:d1:03:2b:ba:de:8b:a0:
                    56:11:8e:88:69:0f:f9:3a:4b:1c:42:5c:8f:98:4e:
                    e5:c4:65:3c:24:92:e0:70:fe:95:68:f3:a6:ca:1c:
                    df:4c:20:5a:da:05:c6:90:ec:27:d9:fe:6d:05:8d:
                    84:42:b9:ac:11:42:37:3a:45:17:c4:7a:fb:55:00:
                    63:09:da:2f:77:2c:29:68:db:09:1a:af:57:d8:cb:
                    ce:02:e9:bd:da:20:1a:a1:ca:75:d1:ea:a8:1b:91:
                    ef:8f:09:00:79:41:55:f7:59:57:a8:cd:e0:50:04:
                    fe:75:29:f8:36:98:66:10:30:7f:e7:04:c0:ad:07:
                    73:8c:0f:b8:9f:b2:2f:6e:33:e5:bd:2e:e1:05:2f:
                    1d:d3:52:46:bc:95:40:a7:66:2c:e6:4d:2a:26:4f:
                    7a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3C:89:EC:47:A1:B8:92:1D:19:6D:6E:F7:2D:57:CA:02:61:88:CD
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38302e302f32322d3232203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         88:c9:10:6c:f4:79:c9:d1:60:b2:4c:0f:9c:16:02:cd:b6:24:
         dd:c7:e8:06:ac:17:1a:75:4b:96:cd:dd:1e:06:61:70:da:c7:
         14:3a:9b:fd:46:43:ca:fd:bd:e5:9c:25:72:d3:b2:d9:98:f8:
         a6:31:bc:21:a9:c6:9d:a3:5a:4d:2c:0f:d9:63:b3:25:aa:97:
         63:a3:cb:43:3b:9b:66:c9:6f:26:17:dd:92:a6:6e:78:11:43:
         c8:50:07:54:5d:b0:fd:4f:7c:69:42:a2:be:e5:c2:fa:46:a4:
         5b:c8:f3:00:43:70:96:89:cc:08:e7:42:64:db:ce:2d:fd:12:
         7b:f9:57:a6:24:1c:22:c7:7d:1c:91:3c:98:5f:7b:ec:4c:16:
         ff:06:88:10:01:c9:0b:a2:18:6d:0a:df:e7:a8:77:7c:dc:a3:
         75:3f:a6:1e:28:5f:10:1e:22:16:9c:bb:a1:36:2d:80:73:fd:
         1c:41:f8:ce:ee:22:4e:bf:61:bb:6f:72:9d:f4:cd:94:75:79:
         94:af:a1:c5:39:41:ae:ff:d9:bc:3b:57:18:57:4c:c0:e9:0b:
         37:a1:80:fb:b8:cc:d2:17:e3:de:23:71:e5:c9:05:d3:95:90:
         5b:74:59:a8:dc:1c:c0:00:d9:4d:a4:19:21:bc:98:16:46:1e:
         09:5e:d7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org