Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38382e302f32342d3234203d3e2037303138.roa
File:                     3230362e3230362e38382e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          nahabLGbOeFbGL7qCEvfp7zlboPJel0VdXCIVysWofI=
Subject key identifier:   79:72:FD:3A:AE:DF:8B:F5:B4:EC:85:12:0F:F1:09:AD:66:86:2F:06
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       5DBEBA9F2160430C79E42CC921C2F0988AFC5648
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38382e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 11 Jul 2022 08:30:48 +0000
ROA not before:           Mon 11 Jul 2022 08:25:48 +0000
ROA not after:            Mon 10 Jul 2023 08:30:48 +0000
asID:                     7018
IP address blocks:        206.206.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:be:ba:9f:21:60:43:0c:79:e4:2c:c9:21:c2:f0:98:8a:fc:56:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:48 2022 GMT
            Not After : Jul 10 08:30:48 2023 GMT
        Subject: CN=7972FD3AAEDF8BF5B4EC85120FF109AD66862F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:42:85:8a:46:75:db:1a:d5:f5:28:92:5b:96:
                    c4:61:82:29:5e:38:07:79:0d:0b:15:a0:15:da:c7:
                    89:a9:07:09:5c:28:6e:58:cd:b4:01:a5:06:41:f0:
                    e4:25:3a:68:f4:b2:7f:48:f6:37:e5:33:71:10:32:
                    fc:bc:c3:72:c4:99:19:19:2c:60:86:c9:21:f2:40:
                    60:37:5a:f2:8e:54:e6:93:d7:c9:d8:21:02:b3:7c:
                    dd:fa:a9:91:1c:72:92:64:5d:90:0b:7a:54:40:11:
                    02:73:8a:ca:dd:45:a6:f5:58:6c:2a:64:06:b9:cb:
                    2a:5b:8a:cb:41:74:3f:ef:df:97:ec:70:fd:89:69:
                    4b:8a:99:b7:5a:71:ed:29:fb:66:e1:6a:7f:e4:19:
                    2e:24:c0:c1:ca:ee:40:8e:2a:4c:3f:6c:89:d4:7b:
                    ac:4a:ca:9e:f9:81:5e:88:b8:6a:9b:81:5f:af:05:
                    0c:13:12:cb:66:4d:f0:72:e4:30:15:b0:98:95:3b:
                    f1:ad:f2:e7:65:03:dc:9a:4f:31:e6:fa:f1:09:d0:
                    1a:e0:81:8c:d7:60:42:6b:4e:17:78:c7:03:f2:e8:
                    a6:9d:91:f1:7d:2e:af:ea:56:cf:3b:57:c6:6e:b2:
                    50:81:56:0f:28:89:7e:a8:ef:7b:55:b1:c1:e8:22:
                    7a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:72:FD:3A:AE:DF:8B:F5:B4:EC:85:12:0F:F1:09:AD:66:86:2F:06
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38382e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:2c:1e:74:08:64:42:39:4a:14:88:b6:82:98:04:23:6f:75:
         0d:26:5b:2e:9a:9e:46:dc:a8:5b:23:39:da:96:15:e2:1f:19:
         82:51:2c:04:38:ea:74:b6:b5:cd:ad:62:8a:72:b6:e4:c3:f9:
         1a:ae:da:17:70:aa:7a:b5:5b:5c:3f:94:76:97:dd:83:d8:7e:
         45:be:24:ad:04:df:f7:7c:04:8c:10:30:3e:c2:b6:d9:5a:80:
         95:83:e3:1f:b8:1f:b7:ad:61:ac:88:62:de:96:27:56:38:65:
         97:e6:04:19:ab:2e:77:91:9a:39:a0:82:ae:f5:5a:71:46:88:
         23:5b:56:91:a8:07:0a:38:b4:8f:51:f4:82:71:e3:ed:15:38:
         ee:55:7e:22:e2:1d:41:8b:db:90:f4:75:8e:1e:60:79:36:e2:
         32:e9:63:94:1a:ec:07:03:aa:eb:ac:6c:f0:9e:1b:3b:d2:c2:
         63:d2:03:d3:35:44:e0:f6:a7:f0:fc:a6:0a:ac:fb:20:00:0e:
         b6:74:6d:fb:8e:d1:ca:4f:f8:06:3e:19:49:dd:0e:f6:da:cc:
         66:46:c6:5a:b3:4e:bf:82:4b:64:9b:dc:13:5d:0c:ec:07:85:
         62:e1:f7:28:d4:d8:e9:f7:4b:8a:8c:fa:29:28:d5:44:34:ed:
         0f:10:b8:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org