Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS53397.roa
File:                     AS53397.roa (raw, json)
Hash identifier:          IvMUXaPLHEE95DbI2ohq/xHwfAg144AlEWsfaX8vM74=
Subject key identifier:   13:40:C7:CE:DC:A3:89:E5:FC:D4:32:84:B1:51:28:6A:59:00:1E:6C
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       71A9DBEDE490E1B86DAF2000E31BACDE53C9AC4C
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS53397.roa
Signing time:             Thu 08 Sep 2022 06:49:07 +0000
ROA not before:           Thu 08 Sep 2022 06:44:07 +0000
ROA not after:            Thu 07 Sep 2023 06:49:07 +0000
asID:                     53397
IP address blocks:        206.206.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:a9:db:ed:e4:90:e1:b8:6d:af:20:00:e3:1b:ac:de:53:c9:ac:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Sep  8 06:44:07 2022 GMT
            Not After : Sep  7 06:49:07 2023 GMT
        Subject: CN=1340C7CEDCA389E5FCD43284B151286A59001E6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:57:9a:fc:9f:6c:6a:37:4c:7d:c7:f5:b8:48:
                    92:8d:83:cd:ed:69:d8:64:2c:dc:18:ba:dc:d8:56:
                    92:a9:ca:d6:8a:2b:f7:61:17:e0:f9:9e:5e:2a:3f:
                    0e:cc:87:a6:65:3c:4a:fc:9a:66:76:5d:a1:bf:4a:
                    03:2e:e5:3f:c6:a8:a8:e2:2a:58:a5:95:c3:26:cb:
                    fd:e8:b1:cd:18:1d:c7:5d:56:c3:23:73:a2:6c:9e:
                    da:3f:85:b0:03:e4:46:91:95:86:6f:c6:9a:90:d1:
                    76:c3:43:66:0a:b9:36:87:b7:11:a7:7f:29:1b:2b:
                    e5:6c:80:48:5f:95:78:91:fd:0e:79:13:24:3b:73:
                    9f:3d:0a:2b:ff:b4:8e:b5:5b:e0:cc:d3:04:1d:a9:
                    82:16:4f:d1:a8:a3:3a:48:c4:bd:2e:02:f0:c7:7e:
                    ee:d3:8f:fa:4d:dc:ae:c1:71:13:e7:c8:54:46:94:
                    55:a4:48:c9:b5:6f:56:f0:d8:c2:d7:18:8f:15:4d:
                    d3:c8:b0:93:19:e6:18:2d:18:bf:a5:fa:ea:43:99:
                    1f:59:6b:bb:cd:44:18:cf:48:63:20:2b:14:e4:d3:
                    7e:92:fb:8c:e2:6e:77:5e:c1:f9:be:e7:38:d9:da:
                    c4:12:d4:e4:07:33:83:93:ea:37:76:32:c4:54:c2:
                    03:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:40:C7:CE:DC:A3:89:E5:FC:D4:32:84:B1:51:28:6A:59:00:1E:6C
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS53397.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:f6:22:4f:73:35:84:df:3e:40:02:66:6c:1b:6d:3c:12:6d:
         3d:33:96:e2:d4:00:63:81:2f:5a:86:c3:6c:6c:39:df:99:db:
         5b:f1:5d:c6:c9:bf:02:cf:0d:fe:16:ae:f3:5a:1a:1c:ca:84:
         ff:d3:3b:a1:7a:a1:dc:4a:e9:ec:86:2e:ed:84:d6:57:54:42:
         2f:04:26:27:52:be:a8:82:f0:43:53:53:8e:86:65:1f:e2:69:
         95:a5:0e:19:13:fd:79:d6:9e:82:83:10:71:9b:1e:fc:10:f0:
         e8:89:61:66:95:f6:86:4f:43:5f:b1:d6:07:4b:c3:70:7c:fc:
         ec:b8:db:80:ef:fa:75:f3:42:d1:d3:f3:0d:3f:2b:40:f8:8a:
         34:88:fe:81:b4:b2:8b:a7:65:db:61:50:c3:d5:2f:32:4b:b1:
         78:fe:8b:64:94:d3:77:67:d3:02:cc:3b:fe:78:b3:fa:ab:e4:
         7a:80:db:24:35:9b:88:07:32:1b:6d:c3:22:48:89:38:f0:f2:
         00:2c:77:a7:50:32:e7:5f:45:70:a8:e3:97:c4:15:63:34:8d:
         24:a0:36:6a:4a:3c:8f:65:d7:a3:78:5c:3e:46:83:16:1d:2e:
         a2:69:c1:4a:3e:a5:fe:6f:91:40:5c:e9:16:a3:73:83:cc:4b:
         a4:43:68:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org