Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e39302e302f32342d3234203d3e20333938343635.roa
File:                     3230362e3230362e39302e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          K4JroVbfcjaVjGXmk8OgLE39gUeigSbgsWSMFtyqOk8=
Subject key identifier:   89:37:9B:BD:E4:20:15:92:C3:AA:CF:10:E7:6C:02:9E:A5:47:AD:5C
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       102B262243145F9F53EC63DDD690E250A4EE1E8A
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e39302e302f32342d3234203d3e20333938343635.roa
Signing time:             Mon 11 Jul 2022 08:30:46 +0000
ROA not before:           Mon 11 Jul 2022 08:25:46 +0000
ROA not after:            Mon 10 Jul 2023 08:30:46 +0000
asID:                     398465
IP address blocks:        206.206.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:2b:26:22:43:14:5f:9f:53:ec:63:dd:d6:90:e2:50:a4:ee:1e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:46 2022 GMT
            Not After : Jul 10 08:30:46 2023 GMT
        Subject: CN=89379BBDE4201592C3AACF10E76C029EA547AD5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:11:ec:ff:42:83:5a:0d:8a:38:93:a1:36:f7:
                    58:95:2e:50:cd:4d:57:bc:87:72:2c:b2:b2:06:53:
                    81:7d:13:38:ad:7c:e7:78:73:c7:9d:ab:21:61:d7:
                    a6:5e:18:2a:2c:d9:22:5e:27:0f:52:b3:d8:21:81:
                    41:83:97:6d:83:8f:bc:3e:b4:b1:47:e3:a3:d7:7c:
                    03:ee:b0:b5:ce:71:49:7e:88:6c:94:c1:3c:66:bf:
                    41:90:87:41:e6:67:c3:75:3d:5d:26:3e:21:85:1e:
                    85:fa:24:b4:99:d8:6c:32:6a:b7:ae:2a:64:b5:a1:
                    07:48:a8:87:b0:12:6a:07:9b:6c:ca:4c:bb:c5:b0:
                    7c:0c:b3:9c:f7:22:24:7d:0b:41:63:9b:93:ed:86:
                    71:cc:ff:6b:55:43:cd:7d:4c:65:d4:18:55:69:d0:
                    01:ce:47:9b:d3:89:cb:b7:7c:fb:f9:b1:6f:25:cc:
                    f4:10:67:e2:a0:91:ee:ef:81:63:90:31:45:f5:50:
                    2e:60:25:74:44:53:f6:9e:e9:ad:26:f7:bb:60:6c:
                    e2:2a:e8:09:f4:b9:bb:45:5f:a4:11:ef:46:3c:c3:
                    b0:95:59:3d:76:18:42:62:ed:c4:ed:d8:d2:c3:a3:
                    30:99:f0:0a:69:9d:a0:01:0b:34:00:01:d8:fb:74:
                    b5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:37:9B:BD:E4:20:15:92:C3:AA:CF:10:E7:6C:02:9E:A5:47:AD:5C
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e39302e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:a2:e5:ce:70:a5:4c:1b:00:2d:f0:e6:a1:db:27:b2:e6:35:
         e8:f9:dc:44:9d:a4:6f:95:83:7b:1d:fc:62:1e:87:04:89:89:
         38:cc:b1:20:79:70:c5:77:b1:85:25:34:47:c7:40:1e:ca:f8:
         eb:89:41:45:85:db:b6:41:a4:bf:2b:fb:e8:83:18:68:7c:3d:
         68:02:f7:73:e5:eb:c2:23:1b:82:28:be:21:35:f3:4a:29:74:
         2a:f0:bc:c8:68:33:9c:15:48:6e:84:99:9c:f5:63:03:80:a3:
         81:3c:c6:33:80:e1:6d:f0:e6:36:61:9d:e1:1b:34:10:57:54:
         18:0a:1a:18:e2:63:d6:e4:5f:c3:b5:ef:d2:1e:f1:9a:9a:81:
         3b:8c:28:13:26:02:71:bb:08:87:72:92:66:59:da:6a:8b:56:
         57:43:9f:1e:8a:08:20:5d:eb:2f:06:7f:40:f4:ea:28:d7:c1:
         67:f1:b4:c5:6c:30:41:ff:3b:24:05:d3:1a:0a:e9:75:23:cd:
         ce:db:11:2c:1d:5d:dc:cf:73:0a:55:c7:6a:11:e8:65:f8:93:
         32:b3:55:7e:78:f4:ad:17:d4:cc:42:6c:66:6b:8a:dd:59:b4:
         fc:ec:b7:42:4c:bd:c2:41:da:c1:08:60:7a:f8:5f:35:cd:67:
         2e:f8:f7:07
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUECsmIkMUX59T7GPd1pDiUKTuHoowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzVhYzRmOTM5OWUxMDJhMWYxNjE3Mzg0
MjBlM2Q2MzIwMzkyODA3MDQwHhcNMjIwNzExMDgyNTQ2WhcNMjMwNzEwMDgzMDQ2
WjAzMTEwLwYDVQQDEyg4OTM3OUJCREU0MjAxNTkyQzNBQUNGMTBFNzZDMDI5RUE1
NDdBRDVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqBHs/0KDWg2K
OJOhNvdYlS5QzU1XvIdyLLKyBlOBfRM4rXzneHPHnashYdemXhgqLNkiXicPUrPY
IYFBg5dtg4+8PrSxR+Oj13wD7rC1znFJfohslME8Zr9BkIdB5mfDdT1dJj4hhR6F
+iS0mdhsMmq3ripktaEHSKiHsBJqB5tsyky7xbB8DLOc9yIkfQtBY5uT7YZxzP9r
VUPNfUxl1BhVadABzkeb04nLt3z7+bFvJcz0EGfioJHu74FjkDFF9VAuYCV0RFP2
numtJve7YGziKugJ9Lm7RV+kEe9GPMOwlVk9dhhCYu3E7djSw6MwmfAKaZ2gAQs0
AAHY+3S1sQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFIk3m73kIBWSw6rPEOdsAp6l
R61cMB8GA1UdIwQYMBaAFDZYbDCQKAc8purTaI49iJMIc2WHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzAv
MzY1ODZDMzA5MDI4MDczQ0E2RUFEMzY4OEUzRDg4OTMwODczNjU4Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNWFjNGY5Mzk5ZTEwMmExZjE2MTczODQyMGUzZDYzMjAzOTI4MDcwNC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWVj
NWYyODQwNjI1YS8wLzMyMzAzNjJlMzIzMDM2MmUzOTMwMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzMzOTM4MzQzNjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzs5aMA0GCSqGSIb3DQEB
CwUAA4IBAQCTouXOcKVMGwAt8Oah2yey5jXo+dxEnaRvlYN7HfxiHocEiYk4zLEg
eXDFd7GFJTRHx0AeyvjriUFFhdu2QaS/K/vogxhofD1oAvdz5evCIxuCKL4hNfNK
KXQq8LzIaDOcFUhuhJmc9WMDgKOBPMYzgOFt8OY2YZ3hGzQQV1QYChoY4mPW5F/D
te/SHvGamoE7jCgTJgJxuwiHcpJmWdpqi1ZXQ58eigggXesvBn9A9Ooo18Fn8bTF
bDBB/zskBdMaCul1I83O2xEsHV3cz3MKVcdqEehl+JMys1V+ePStF9TMQmxma4rd
WbT87LdCTL3CQdrBCGB6+F81zWcu+PcH
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org