Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS12271.roa
File:                     AS12271.roa (raw, json)
Hash identifier:          ZCknoGR0r0GGFwrZNH4ACQjEr3q5SLIcK/X7kUA06to=
Subject key identifier:   2A:AF:EF:E8:EC:05:E6:E3:E4:13:E5:F3:4A:22:71:BE:00:17:3F:01
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       1B86918075B334B5B14440F6916E8834A0403F19
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS12271.roa
Signing time:             Thu 08 Sep 2022 06:49:09 +0000
ROA not before:           Thu 08 Sep 2022 06:44:09 +0000
ROA not after:            Thu 07 Sep 2023 06:49:09 +0000
asID:                     12271
IP address blocks:        216.122.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:86:91:80:75:b3:34:b5:b1:44:40:f6:91:6e:88:34:a0:40:3f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Sep  8 06:44:09 2022 GMT
            Not After : Sep  7 06:49:09 2023 GMT
        Subject: CN=2AAFEFE8EC05E6E3E413E5F34A2271BE00173F01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:72:3f:cb:f5:d0:af:31:c6:84:d3:24:5c:73:
                    d3:94:f3:79:84:d8:5c:d7:9f:5e:ba:92:07:30:bf:
                    e4:4c:f9:70:4e:46:1d:33:a6:80:1d:91:45:b3:a9:
                    db:23:b9:ac:6d:9d:e0:41:e6:94:c7:1b:1f:0a:b3:
                    c8:0b:49:ad:4d:6b:3e:9b:50:bb:ee:4c:98:ef:fc:
                    04:f4:cb:da:76:13:39:ee:d9:3c:c0:2a:6d:7c:f4:
                    62:37:9c:da:86:64:92:db:22:71:63:01:fb:90:7c:
                    60:d9:55:5d:77:4b:36:41:33:59:91:45:a4:e3:73:
                    2e:cf:87:ee:8a:75:be:e2:13:5f:49:eb:bc:bf:52:
                    8d:0e:03:8c:9f:3d:23:7b:d8:58:7a:e4:78:f7:68:
                    f5:1d:f7:fa:00:93:da:d8:3a:58:77:9a:24:98:6d:
                    43:db:95:62:0a:61:15:57:4d:b8:58:91:f6:e0:18:
                    17:0f:39:d1:fc:0c:5f:97:48:95:c7:c9:16:6a:11:
                    14:c5:11:e6:45:de:32:44:f8:f7:21:b8:80:4b:f0:
                    85:2b:5b:b4:15:0a:f7:b7:24:71:79:0a:d5:7f:10:
                    5f:07:f3:e6:98:7d:2a:1b:e8:b4:cc:78:ff:a6:78:
                    03:d3:55:31:0b:46:48:83:31:e9:72:98:4c:d2:1d:
                    57:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AF:EF:E8:EC:05:E6:E3:E4:13:E5:F3:4A:22:71:BE:00:17:3F:01
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS12271.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:ae:a6:89:e2:46:97:1d:06:4f:68:20:23:f4:44:b8:3b:8d:
         2b:24:1b:4d:1d:90:de:ab:ad:e4:bf:27:2c:dc:b4:08:2d:ee:
         2e:c7:73:6f:09:8e:aa:10:98:70:90:fe:10:ed:ec:6c:67:ee:
         cb:ad:a1:bb:b4:37:b3:a3:09:5c:11:dd:d5:5f:42:13:91:74:
         9d:06:f6:88:eb:b6:ac:93:eb:f4:75:a0:a7:d9:82:d6:39:29:
         8a:6a:ba:a2:03:f7:50:f6:43:2e:e7:69:e3:49:ae:10:83:98:
         6b:4d:9a:05:5a:8e:37:0b:52:a4:a7:b6:1e:f2:2d:47:1c:6d:
         63:d6:bd:71:c4:65:6e:fa:50:f9:0a:2d:28:5b:5a:d7:b9:b5:
         bc:4e:05:e0:88:77:da:0e:1a:b5:38:9a:7c:1f:58:2e:83:91:
         9b:42:ad:22:53:d8:7c:f2:18:70:8d:d6:a7:0d:ad:22:4c:af:
         38:08:f7:c4:32:65:c1:7a:5d:83:b6:19:44:46:8a:29:9b:5f:
         33:14:22:5c:fa:d3:33:97:0b:0a:8d:cc:d0:ef:5c:63:65:0a:
         c6:58:26:a5:3d:20:a6:d1:21:75:af:98:fd:e5:f9:2b:f5:92:
         2b:56:97:53:11:87:a8:f4:81:35:46:c2:65:8c:a4:3e:c3:41:
         45:aa:f6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org