Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS11611.roa
File:                     AS11611.roa (raw, json)
Hash identifier:          Rs34YdLG/yS6QjjvKAhOmUZMjzXnE2dk+rElxKHg+8M=
Subject key identifier:   EA:80:B3:1C:F8:D2:79:AF:58:1A:B3:9C:72:B5:AB:B5:13:F7:EE:11
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       244F4A6C0C196367FABA6B1787B96CE261B7A206
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS11611.roa
Signing time:             Mon 28 Nov 2022 09:41:21 +0000
ROA not before:           Mon 28 Nov 2022 09:36:21 +0000
ROA not after:            Mon 27 Nov 2023 09:41:21 +0000
asID:                     11611
IP address blocks:        206.206.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:4f:4a:6c:0c:19:63:67:fa:ba:6b:17:87:b9:6c:e2:61:b7:a2:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:21 2022 GMT
            Not After : Nov 27 09:41:21 2023 GMT
        Subject: CN=EA80B31CF8D279AF581AB39C72B5ABB513F7EE11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f3:b1:f9:6a:8d:09:f1:8b:7a:57:3c:ac:07:
                    f8:84:b7:ed:a7:7c:98:96:19:28:45:79:44:9b:2e:
                    90:73:d8:f4:bb:4e:2b:0c:c0:f3:40:4a:a5:a1:0c:
                    5d:7c:63:13:47:7b:45:62:7e:a0:a3:8c:1c:f4:ed:
                    bb:22:2e:a9:2a:57:bc:63:65:75:12:ba:50:6a:ba:
                    fb:56:be:ab:0b:12:1b:5f:ab:f8:73:ba:f9:74:41:
                    c9:58:4e:93:55:81:18:9d:cf:3b:b3:ff:f1:23:93:
                    f4:58:5a:bb:7c:ef:a9:a6:1c:b5:a5:09:79:91:79:
                    a9:fd:ae:27:1b:56:0b:47:ad:67:8b:6b:4e:23:2b:
                    81:23:06:99:e2:8e:79:22:e0:22:7a:0d:13:15:09:
                    e5:95:9a:ce:3a:51:ec:b8:c9:2e:27:22:67:7c:aa:
                    de:45:d2:2e:73:cd:1c:96:c4:d8:0c:d9:35:1c:93:
                    54:8b:5e:10:12:29:20:50:f5:53:ef:b8:97:04:de:
                    78:5e:69:0e:6b:fb:10:50:5c:fa:e5:38:82:dc:d0:
                    e8:98:b3:47:f1:6e:4e:36:17:30:3c:37:65:df:64:
                    b0:c5:a8:9c:6c:63:d7:ba:dd:91:ae:77:77:c5:48:
                    2e:11:50:f5:c6:d8:20:72:f8:32:97:b7:83:f1:04:
                    97:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:80:B3:1C:F8:D2:79:AF:58:1A:B3:9C:72:B5:AB:B5:13:F7:EE:11
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS11611.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:eb:a7:6e:a6:b2:e0:e9:43:9e:8c:f5:b4:08:cb:a3:40:94:
         a0:ad:01:cb:ee:e0:4a:ff:2d:10:8c:7c:92:fb:e3:8e:3b:ca:
         84:85:8f:83:49:5c:fe:e3:3f:18:ab:a0:e9:00:fc:6d:a3:c9:
         14:d4:e0:b2:9f:16:c0:19:eb:3d:92:61:b9:1e:18:f7:07:e1:
         53:7f:85:e9:3f:fd:53:31:97:25:50:b5:40:23:53:07:73:29:
         88:a7:cf:9b:13:fe:92:41:57:02:14:e7:e0:77:8d:18:72:3a:
         0c:82:5e:73:f6:4e:f9:4c:44:14:9c:f5:32:83:75:f5:2d:a8:
         29:3c:70:1e:c3:e0:a5:7b:3a:06:d7:77:5e:4f:9a:db:46:31:
         4b:38:d8:2a:0c:de:22:7c:ca:f0:d4:6a:0b:13:72:5c:aa:37:
         21:26:4f:af:58:12:8f:da:08:b7:81:38:3e:69:20:5d:f7:b1:
         c2:17:ac:48:ed:7f:3f:e2:ac:73:32:1d:09:2e:a8:e5:ce:2c:
         f4:8e:b1:25:37:d2:c6:57:9a:78:b8:77:88:6d:94:a7:37:04:
         9c:b5:23:33:74:c9:56:09:7f:7e:12:14:c6:83:43:24:8f:32:
         c9:81:f6:1b:5b:d1:0c:97:e9:90:59:ec:9a:cf:ff:43:d8:8f:
         3f:a3:66:f5
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUJE9KbAwZY2f6umsXh7ls4mG3ogYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzU5NjU0M2E0YzkwYzM5OGFkN2VmNjk5
YmRlOGM3OWVkZDJlMGI4YWMwHhcNMjIxMTI4MDkzNjIxWhcNMjMxMTI3MDk0MTIx
WjAzMTEwLwYDVQQDEyhFQTgwQjMxQ0Y4RDI3OUFGNTgxQUIzOUM3MkI1QUJCNTEz
RjdFRTExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/Ox+WqNCfGL
elc8rAf4hLftp3yYlhkoRXlEmy6Qc9j0u04rDMDzQEqloQxdfGMTR3tFYn6go4wc
9O27Ii6pKle8Y2V1ErpQarr7Vr6rCxIbX6v4c7r5dEHJWE6TVYEYnc87s//xI5P0
WFq7fO+pphy1pQl5kXmp/a4nG1YLR61ni2tOIyuBIwaZ4o55IuAieg0TFQnllZrO
OlHsuMkuJyJnfKreRdIuc80clsTYDNk1HJNUi14QEikgUPVT77iXBN54XmkOa/sQ
UFz65TiC3NDomLNH8W5ONhcwPDdl32SwxaicbGPXut2Rrnd3xUguEVD1xtggcvgy
l7eD8QSXZwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFOqAsxz40nmvWBqznHK1q7UT
9+4RMB8GA1UdIwQYMBaAFEzEOYug/lCqoIv6I/5wGtDCBgR/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzEv
NENDNDM5OEJBMEZFNTBBQUEwOEJGQTIzRkU3MDFBRDBDMjA2MDQ3Ri5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNTk2NTQzYTRjOTBjMzk4YWQ3ZWY2OTliZGU4Yzc5ZWRkMmUwYjhhYy5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MGYxYTgwYTAxODFlYzVmMjg0
MDYyNWEvMS9BUzExNjExLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzs5vMA0GCSqGSIb3DQEBCwUAA4IB
AQCC66duprLg6UOejPW0CMujQJSgrQHL7uBK/y0QjHyS++OOO8qEhY+DSVz+4z8Y
q6DpAPxto8kU1OCynxbAGes9kmG5Hhj3B+FTf4XpP/1TMZclULVAI1MHcymIp8+b
E/6SQVcCFOfgd40YcjoMgl5z9k75TEQUnPUyg3X1LagpPHAew+ClezoG13deT5rb
RjFLONgqDN4ifMrw1GoLE3JcqjchJk+vWBKP2gi3gTg+aSBd97HCF6xI7X8/4qxz
Mh0JLqjlziz0jrElN9LGV5p4uHeIbZSnNwSctSMzdMlWCX9+EhTGg0MkjzLJgfYb
W9EMl+mQWeyaz/9D2I8/o2b1
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org