Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS56655.roa
File:                     AS56655.roa (raw, json)
Hash identifier:          Nfvyt7hD7o22Dd33Zo+t9xpPwqq9eSvVumzPSdRSawk=
Subject key identifier:   64:CC:B5:FB:2B:4E:B1:75:65:3B:AF:4E:28:1B:C6:47:2F:10:FA:EA
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       77356571B6BEA08E4FF69FC30209DB17FBF9D8C3
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS56655.roa
Signing time:             Thu 08 Sep 2022 06:49:08 +0000
ROA not before:           Thu 08 Sep 2022 06:44:08 +0000
ROA not after:            Thu 07 Sep 2023 06:49:08 +0000
asID:                     56655
IP address blocks:        216.122.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:35:65:71:b6:be:a0:8e:4f:f6:9f:c3:02:09:db:17:fb:f9:d8:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Sep  8 06:44:08 2022 GMT
            Not After : Sep  7 06:49:08 2023 GMT
        Subject: CN=64CCB5FB2B4EB175653BAF4E281BC6472F10FAEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:40:a4:27:2e:cb:f6:46:21:90:60:f5:8b:bb:
                    71:28:87:6a:9a:ab:87:e2:9c:66:ea:b9:87:e9:55:
                    28:14:e6:bb:fd:52:e0:1b:80:84:e6:72:91:ae:80:
                    67:c1:f9:60:4d:3d:59:69:ae:f9:43:37:dd:ea:ee:
                    86:a3:ef:b0:65:64:28:64:12:7b:c4:5b:af:6c:03:
                    60:2e:19:51:47:65:5b:93:51:7c:d7:00:90:9f:a0:
                    a6:5f:64:da:0c:46:7d:00:02:50:8d:da:1a:41:fc:
                    9c:f6:d4:eb:27:58:c9:70:3a:9f:fc:75:c5:c5:69:
                    34:5e:24:a1:62:80:b0:8e:5c:b6:3f:44:72:a0:43:
                    72:7d:01:77:3e:f9:61:00:d0:ae:db:f3:44:2b:5a:
                    28:b8:76:63:be:98:98:65:2a:be:44:77:42:75:7e:
                    8c:02:3a:cf:ad:6d:4a:69:3b:61:7d:24:f9:3b:ac:
                    fe:43:ed:ac:a3:b3:22:cb:4b:4c:c5:30:17:9d:db:
                    59:86:5f:e2:a7:41:4e:94:91:d7:e5:dd:02:bd:69:
                    f3:a8:ac:60:cb:7c:2b:a7:8b:32:77:a5:05:5d:d6:
                    b7:20:fa:ee:9e:f8:de:eb:db:c4:6e:41:ea:d3:0d:
                    55:34:a9:b7:cc:20:78:23:15:65:3c:6e:47:ef:6a:
                    15:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:CC:B5:FB:2B:4E:B1:75:65:3B:AF:4E:28:1B:C6:47:2F:10:FA:EA
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS56655.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:56:7a:ce:47:d7:ac:d8:83:ab:29:74:ac:48:90:23:23:bb:
         f5:4a:dd:e0:03:49:96:26:2e:8b:81:91:2c:d0:ba:de:4d:c9:
         d0:d1:3b:bf:9a:cd:c6:00:c6:ae:a6:0d:2f:59:2c:45:39:0c:
         a1:2f:07:a6:90:64:ee:74:eb:42:71:7b:43:d7:2a:2d:f1:f0:
         b1:b4:3b:a0:ed:4f:30:21:d3:05:16:ed:00:76:d9:09:b7:b6:
         27:25:b6:1e:a5:c1:66:14:91:8b:a8:27:f6:ef:2f:37:8e:b9:
         2a:2c:19:29:e7:7c:6d:47:03:d6:5c:77:be:af:c8:92:c8:9b:
         44:4d:ae:38:cf:35:9e:5f:68:6b:68:d1:b1:28:da:97:f1:b5:
         63:f3:55:be:1a:f9:ac:d7:29:0a:cb:a7:6d:2f:d0:b3:e7:da:
         f5:2e:bd:be:e6:1d:16:52:da:59:67:f6:ce:b8:e8:74:f2:8f:
         26:61:84:97:1f:1f:94:35:eb:d7:f5:69:57:1a:a7:15:5e:19:
         ca:91:67:3d:eb:b0:7f:5a:46:1f:79:4d:d5:a1:bf:d9:e3:b6:
         4f:34:0a:1d:c5:d5:13:74:69:e4:15:e8:a9:f8:84:bb:3d:6c:
         bf:46:39:67:9b:26:c6:d8:9a:1e:04:99:7b:5e:d2:1e:31:b5:
         46:12:81:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org