Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38382e302f32342d3234203d3e20333938343635.roa
File:                     3230362e3230362e38382e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          SjeBpFhtKNzhWilTymkUbv6Doqd9XstKdWNQqFfbSf4=
Subject key identifier:   3D:F8:03:77:68:76:40:1C:59:A9:6F:FB:D6:D6:79:C6:4E:2E:AB:EE
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       4C2EB0ADC8238A7B2EC220AF47230F70A6AE7FE3
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38382e302f32342d3234203d3e20333938343635.roa
Signing time:             Mon 11 Jul 2022 08:30:55 +0000
ROA not before:           Mon 11 Jul 2022 08:25:55 +0000
ROA not after:            Mon 10 Jul 2023 08:30:55 +0000
asID:                     398465
IP address blocks:        206.206.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2e:b0:ad:c8:23:8a:7b:2e:c2:20:af:47:23:0f:70:a6:ae:7f:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:55 2022 GMT
            Not After : Jul 10 08:30:55 2023 GMT
        Subject: CN=3DF803776876401C59A96FFBD6D679C64E2EABEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:8f:93:87:d0:e2:d1:f1:04:0c:44:80:6e:d1:
                    b1:de:1e:ac:8a:96:ec:79:ca:27:d6:34:a8:04:b4:
                    12:77:de:3a:25:6b:10:4e:eb:a1:85:50:59:b9:5b:
                    93:1b:ce:d4:d4:73:7a:dd:d4:ac:9d:e2:a7:35:80:
                    e8:0f:e9:ff:28:bd:6c:12:17:23:2d:db:7b:cf:4a:
                    82:c0:aa:33:d0:79:0a:28:46:bb:c3:1d:a2:54:07:
                    bd:f5:d5:ba:8e:92:c8:6a:cd:da:ad:63:b4:93:e2:
                    36:75:06:86:a3:44:1b:33:b0:81:aa:cd:6a:93:fc:
                    6c:16:76:67:3b:50:4b:48:2e:98:a0:81:bf:49:eb:
                    f1:5b:64:c7:0d:a9:80:d5:7c:3d:cf:23:e0:6c:b4:
                    34:64:d4:1c:c1:cb:18:13:2c:33:e7:82:73:a1:03:
                    e5:08:70:52:da:47:ef:77:c2:7e:38:07:44:e6:ee:
                    ab:5a:31:90:b8:47:a4:16:1f:81:21:0a:5b:52:e9:
                    3d:02:dd:29:93:e3:56:f0:3d:e0:99:28:f1:2f:70:
                    ac:1a:ac:c9:ba:08:f1:e0:fa:46:30:28:43:60:68:
                    be:5f:ed:62:f7:1c:45:b5:f9:96:6c:e7:b2:7a:11:
                    3a:f9:f4:c4:40:62:ab:62:f8:c9:86:3c:40:3a:a6:
                    c7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F8:03:77:68:76:40:1C:59:A9:6F:FB:D6:D6:79:C6:4E:2E:AB:EE
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38382e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:c6:7f:b8:77:be:b5:5c:41:9f:da:2f:53:2a:f7:d5:99:5e:
         3a:50:0d:c3:f4:e1:fe:97:79:eb:cd:6d:fc:a1:5a:f4:66:3a:
         7f:9e:73:19:7e:55:d8:64:a1:45:a6:e6:fb:a9:cd:4b:25:7b:
         ea:55:17:6b:35:c0:f0:29:c3:01:ce:55:fe:c7:1a:e7:52:5b:
         5d:3e:c9:38:58:fc:db:e2:7e:e1:e0:32:43:47:1f:e6:35:a5:
         f2:03:80:46:4e:d8:ab:5f:05:ab:9c:ef:4a:6e:28:f9:e0:6c:
         cc:80:67:c7:3f:b4:0c:48:38:f8:34:30:05:9c:5d:bb:e4:73:
         cb:4a:84:cf:53:a8:26:ca:3e:72:da:e6:1a:70:08:57:4f:61:
         26:0b:c3:38:76:60:69:e5:cb:a8:9d:1d:77:98:6c:b5:8e:8e:
         4b:ea:88:02:b5:e8:4c:c2:78:cd:6b:d4:29:ef:a1:6e:52:a4:
         b2:ab:dc:23:67:1d:ee:4e:54:bb:1f:69:f6:9d:e8:a4:63:8c:
         8a:ba:ba:af:a4:01:bd:95:ee:4f:2b:e1:86:1c:73:79:39:a9:
         fa:e2:61:84:b9:13:e3:16:6d:f3:03:7a:b9:62:b7:07:f1:c3:
         8e:44:3f:ce:93:0f:7c:ff:b1:0b:00:69:20:7d:73:a9:61:5e:
         7b:00:14:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org