Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS11611.roa
File:                     AS11611.roa (raw, json)
Hash identifier:          Jivxu9IzM3J5TCexrdNm6lDkgODg4b5XYUP8e/YFdWQ=
Subject key identifier:   09:3D:58:DD:D5:8B:AC:31:73:F1:70:F9:00:EE:B7:AB:C0:E3:3C:EE
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       653B9D0CD85F35144309E4065CFD7CA1362F873E
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS11611.roa
Signing time:             Thu 08 Sep 2022 06:49:09 +0000
ROA not before:           Thu 08 Sep 2022 06:44:09 +0000
ROA not after:            Thu 07 Sep 2023 06:49:09 +0000
asID:                     11611
IP address blocks:        206.206.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:3b:9d:0c:d8:5f:35:14:43:09:e4:06:5c:fd:7c:a1:36:2f:87:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Sep  8 06:44:09 2022 GMT
            Not After : Sep  7 06:49:09 2023 GMT
        Subject: CN=093D58DDD58BAC3173F170F900EEB7ABC0E33CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f9:12:fc:39:0f:7b:82:35:c0:06:9a:7f:ec:
                    18:44:56:a2:f2:9e:89:32:3d:bb:6c:15:4c:21:af:
                    7a:5c:5e:df:b4:32:12:57:56:91:eb:a8:81:d4:5a:
                    95:d0:5f:26:4f:a5:f0:3b:73:fa:bc:f4:22:2a:78:
                    f6:83:9d:a9:d8:64:ab:5f:1f:0f:55:03:9f:69:99:
                    54:ba:49:e5:7d:d3:ad:ac:38:10:34:0c:49:84:8b:
                    0e:7a:a8:6d:f4:94:52:2a:a2:38:09:05:4b:ae:9c:
                    cd:6c:eb:bb:5a:8d:9c:8e:dd:4b:f3:1b:bb:b2:75:
                    67:e0:5a:d8:62:9d:34:5b:0b:c9:c2:3e:37:e8:67:
                    b4:aa:2d:13:e6:90:d8:9a:1b:07:97:35:ca:c6:cb:
                    36:58:e2:97:3b:30:05:5c:b0:95:73:d4:44:11:2d:
                    05:56:2f:17:eb:7c:0d:c5:bc:48:c8:37:92:a0:6d:
                    68:e0:f3:d1:06:0d:62:61:df:e7:80:f3:1d:2e:fb:
                    82:90:d5:8e:8e:af:c8:73:c1:bb:56:76:53:69:c2:
                    b5:bf:eb:bb:68:43:41:dc:a2:3e:47:48:d0:0b:42:
                    a7:aa:83:70:92:2f:21:e5:d7:85:f4:e7:a6:31:b7:
                    26:5e:70:6c:e8:2a:0d:19:69:f9:54:30:7d:33:63:
                    37:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:3D:58:DD:D5:8B:AC:31:73:F1:70:F9:00:EE:B7:AB:C0:E3:3C:EE
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS11611.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:dc:0b:0c:58:5e:7f:f0:a9:33:66:94:19:cd:ba:d1:02:81:
         a7:f4:84:8b:01:3b:37:71:1c:7b:c8:e0:c3:ff:c9:8d:4a:11:
         47:12:5c:d3:d6:07:ad:6f:30:18:7a:50:5f:44:4f:d7:36:01:
         5e:63:6f:1b:72:35:38:f6:1b:e3:ae:32:2f:a4:30:a1:80:a1:
         79:0a:12:26:9e:8d:03:30:f6:08:04:6d:2e:a6:49:13:02:27:
         9e:a3:9b:d2:51:47:39:2b:80:ab:0e:4d:c0:7c:64:f6:8c:2c:
         7f:59:27:95:99:e4:b0:ae:88:70:f2:4f:d8:d3:f5:e6:27:91:
         c1:d4:39:bd:c4:f5:2a:32:26:1c:42:64:07:22:8a:8b:fb:86:
         8f:f0:47:9a:68:8b:16:03:b0:50:fe:32:1d:dc:d5:88:33:1c:
         15:0a:4e:8d:19:04:41:01:32:2f:21:34:5e:d1:81:c1:4e:43:
         7c:24:c1:13:0a:cd:e4:3f:e7:38:be:6a:8c:86:4e:17:eb:24:
         57:0b:7f:af:d8:f5:39:3e:10:09:f7:e3:fb:0f:91:2b:db:82:
         8e:56:e9:49:24:97:3b:b6:9a:c7:59:46:21:b3:df:ef:95:99:
         c6:49:ae:9e:41:50:fb:61:e2:9e:21:ba:4d:94:6b:cf:0b:91:
         fc:a9:d1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org