Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS1299.roa
File:                     AS1299.roa (raw, json)
Hash identifier:          Eu51tdkiiq8Pid1EmyHcfq0GYeYU0pkGNDjke7v1z/o=
Subject key identifier:   9E:EA:24:81:A8:80:9D:6A:B2:60:7F:80:E3:8C:F9:47:A0:A6:9E:9A
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       028FA3EA9751C902E182029D7E7459C43A076867
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS1299.roa
Signing time:             Thu 08 Sep 2022 06:49:09 +0000
ROA not before:           Thu 08 Sep 2022 06:44:09 +0000
ROA not after:            Thu 07 Sep 2023 06:49:09 +0000
asID:                     1299
IP address blocks:        206.206.66.0/24 maxlen: 24
                          206.206.67.0/24 maxlen: 24
                          206.206.69.0/24 maxlen: 24
                          206.206.71.0/24 maxlen: 24
                          206.206.73.0/24 maxlen: 24
                          206.206.75.0/24 maxlen: 24
                          206.206.76.0/24 maxlen: 24
                          206.206.77.0/24 maxlen: 24
                          206.206.87.0/24 maxlen: 24
                          206.206.88.0/24 maxlen: 24
                          206.206.89.0/24 maxlen: 24
                          206.206.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:8f:a3:ea:97:51:c9:02:e1:82:02:9d:7e:74:59:c4:3a:07:68:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Sep  8 06:44:09 2022 GMT
            Not After : Sep  7 06:49:09 2023 GMT
        Subject: CN=9EEA2481A8809D6AB2607F80E38CF947A0A69E9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:06:2b:50:3d:77:c0:ea:61:e5:94:e0:df:94:
                    80:4e:03:71:33:51:39:3b:ac:f0:3c:7d:35:1c:8a:
                    19:34:72:1a:10:d0:77:67:1f:3d:cf:fc:9b:22:42:
                    48:9a:a7:db:7c:37:16:35:a3:56:55:24:a7:5f:f1:
                    ce:78:f7:69:21:42:b7:9f:68:c0:89:2f:e3:09:23:
                    3a:e1:02:ed:d4:09:3d:6c:f0:b1:e7:5a:03:69:9b:
                    ef:12:9f:b1:7c:86:65:8d:9d:4e:8e:59:15:bf:c4:
                    a8:d5:0f:09:d9:d3:ee:88:0d:b6:8e:b2:bd:a4:d7:
                    92:40:51:17:54:dc:b8:aa:63:43:82:94:14:0e:bc:
                    1e:30:8a:10:15:b9:93:cd:96:b5:de:e4:a6:1c:fe:
                    92:a8:5c:40:6b:c3:5f:30:a7:80:18:51:d9:98:fb:
                    84:bf:55:74:f9:60:67:a9:19:8a:35:c8:89:ae:13:
                    ab:23:1e:40:e7:c9:12:07:e1:a4:8a:e0:f7:7f:d3:
                    5c:9c:54:81:9e:85:db:cc:1a:ce:98:60:da:cc:85:
                    d6:6a:e1:15:ab:e2:54:f3:9a:20:ab:1d:a6:64:49:
                    c8:1c:99:a2:e9:86:b0:b9:bb:9e:70:db:b3:79:ba:
                    63:77:3e:e6:ce:20:ba:9d:8e:42:d6:4a:d8:10:9a:
                    c0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EA:24:81:A8:80:9D:6A:B2:60:7F:80:E3:8C:F9:47:A0:A6:9E:9A
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS1299.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.66.0/23
                  206.206.69.0/24
                  206.206.71.0/24
                  206.206.73.0/24
                  206.206.75.0-206.206.77.255
                  206.206.87.0-206.206.90.255

    Signature Algorithm: sha256WithRSAEncryption
         1a:b7:15:08:de:1c:fc:68:6b:64:e7:a4:a9:3d:b6:59:1f:ad:
         7b:41:9c:2f:12:66:a0:b9:f4:63:11:de:d0:6a:d1:06:25:8b:
         97:95:82:42:07:93:a0:3d:e3:31:b2:57:4f:66:5a:41:58:94:
         51:6a:fe:41:01:59:c3:ab:63:46:6c:f0:e4:0b:28:2c:c3:f8:
         29:5c:72:32:af:e9:36:4c:e0:25:d7:38:e0:dc:30:dd:68:3f:
         03:4c:87:3c:f3:ff:8a:42:b2:e3:66:7f:21:c2:61:a2:a2:d6:
         2d:a7:3d:7b:bc:10:25:b9:a4:d8:f4:b3:fe:66:98:d3:73:6b:
         15:d8:f9:d2:4b:d1:f9:eb:71:37:9c:14:bf:80:b0:b1:7e:17:
         c0:5e:72:f6:34:81:89:ba:83:d1:14:92:19:6f:9f:0b:0f:67:
         82:aa:5d:21:0f:58:50:21:d5:b1:9b:72:cc:2d:47:4e:07:1e:
         c3:8a:3f:d9:f6:81:6d:68:5f:86:2a:4e:3c:9e:d3:73:24:e0:
         89:e6:c2:7a:f7:e2:98:b3:17:c2:b9:68:90:89:be:2d:fb:1e:
         5e:a6:7f:24:d0:76:53:81:d4:8f:54:ec:78:21:38:7c:8b:90:
         68:ac:14:9a:98:6e:b8:8f:18:eb:19:74:a3:f6:00:ff:ec:28:
         cf:4f:eb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org