Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS21743.roa
File:                     AS21743.roa (raw, json)
Hash identifier:          8laWAwzk9HDEIm4FlcOrIU2AjxgbU5LywGaGnlgCTy8=
Subject key identifier:   85:35:4D:7C:7F:A1:AA:09:25:7F:17:A1:BC:50:99:D2:DA:DA:56:77
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       203CDCE1B3E74586C48889B78879064163CAFB3C
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS21743.roa
Signing time:             Thu 08 Sep 2022 06:49:08 +0000
ROA not before:           Thu 08 Sep 2022 06:44:08 +0000
ROA not after:            Thu 07 Sep 2023 06:49:08 +0000
asID:                     21743
IP address blocks:        206.206.92.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:3c:dc:e1:b3:e7:45:86:c4:88:89:b7:88:79:06:41:63:ca:fb:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Sep  8 06:44:08 2022 GMT
            Not After : Sep  7 06:49:08 2023 GMT
        Subject: CN=85354D7C7FA1AA09257F17A1BC5099D2DADA5677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:35:d7:5a:33:e0:fe:a0:fb:26:47:82:48:e7:
                    f4:d4:00:31:49:25:dd:3f:7f:76:32:4a:06:8d:31:
                    e7:c2:27:8f:e5:64:8c:fa:67:87:07:7b:75:51:52:
                    bd:cb:7a:57:55:3a:db:5f:17:51:f1:61:e5:9a:aa:
                    3d:0a:1c:79:3b:fa:85:ad:a0:a3:12:db:c4:8f:c7:
                    4c:7c:49:1c:4d:7e:c3:39:78:0e:d9:73:58:a6:1d:
                    d2:55:ad:2c:6e:ae:cc:d1:8d:ec:30:a9:d0:5d:67:
                    59:d7:13:7a:d1:e4:3d:69:55:da:ab:8e:a8:6f:e2:
                    80:ac:0d:64:a9:10:e8:0e:2d:66:1f:7b:4f:7d:02:
                    99:6d:ef:2d:fa:f9:09:14:c7:ab:08:39:11:0f:4d:
                    ff:28:10:99:c1:96:c9:20:ff:f7:3b:bb:6e:72:02:
                    85:2e:57:5f:89:8e:d0:04:b9:c0:00:8c:04:97:01:
                    5c:00:c3:40:d2:63:e6:dc:e2:61:e8:9b:48:a0:3d:
                    46:50:4c:a8:13:f7:5d:41:02:2e:89:0b:40:c9:5e:
                    fa:3c:75:67:44:bc:2a:1f:2e:0a:9c:98:43:43:46:
                    24:6d:ac:2b:dc:47:2e:dc:6a:26:5b:cb:e4:8e:83:
                    41:48:ff:5e:1e:2f:7d:64:93:a9:0b:8a:09:84:43:
                    60:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:35:4D:7C:7F:A1:AA:09:25:7F:17:A1:BC:50:99:D2:DA:DA:56:77
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS21743.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:54:2b:e2:19:a5:0d:b7:08:4b:dd:11:f3:d7:4d:f1:10:b0:
         eb:ff:01:78:94:42:33:ff:26:72:7d:8b:05:ce:1d:b7:b7:15:
         0e:90:c1:46:b1:9c:7c:88:82:45:32:a0:87:eb:55:73:17:ec:
         12:18:e0:b7:a9:5f:f9:4d:98:cc:9e:30:3a:cc:5f:10:12:da:
         4e:f4:cb:39:b4:64:a5:46:d3:c8:1c:ca:a1:d3:d5:c1:92:84:
         7d:56:53:99:8e:c9:75:07:e5:0e:b7:1c:1e:c1:b5:e0:aa:90:
         02:5d:5d:11:31:5b:af:a3:45:8e:e9:da:09:b6:bc:da:34:23:
         20:a4:e2:d5:ad:9e:8e:4d:ba:87:1a:c4:0e:2a:e7:33:55:bd:
         bd:0e:da:52:78:3f:1c:44:07:77:5e:10:18:c8:d1:a5:80:66:
         76:81:12:e3:3a:a4:40:9c:5c:58:4e:90:24:33:c5:43:4b:e6:
         e6:2f:c4:7a:ae:4a:be:e4:39:14:6e:08:8b:dc:24:d5:00:bc:
         89:ea:0d:ab:83:01:b5:cf:43:e6:50:7b:56:7a:1f:43:82:0d:
         93:44:90:be:4b:64:79:bf:6a:04:c8:8c:a7:8c:45:bc:b2:5e:
         09:fb:ab:6a:2b:33:ec:5f:7d:54:18:c2:07:90:7a:e0:00:fc:
         89:e1:86:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org