Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS20454.roa
File:                     AS20454.roa (raw, json)
Hash identifier:          LXZsgQ9erTMV8SKlUeHCDetJJr9ZlblQUS/gF/uMwcM=
Subject key identifier:   FD:B6:64:1A:EC:6D:A2:5A:30:F5:A8:51:3A:37:52:1A:BC:03:BC:E6
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       1ACDC9B5DC62C3C8BA49835CC3E3B58E47159FCE
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS20454.roa
Signing time:             Tue 06 Dec 2022 00:00:16 +0000
ROA not before:           Mon 05 Dec 2022 23:55:16 +0000
ROA not after:            Tue 05 Dec 2023 00:00:16 +0000
asID:                     20454
IP address blocks:        216.122.165.0/24 maxlen: 24
                          216.122.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:cd:c9:b5:dc:62:c3:c8:ba:49:83:5c:c3:e3:b5:8e:47:15:9f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Dec  5 23:55:16 2022 GMT
            Not After : Dec  5 00:00:16 2023 GMT
        Subject: CN=FDB6641AEC6DA25A30F5A8513A37521ABC03BCE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:f1:ae:e6:bd:03:d5:ef:66:55:3e:64:71:ac:
                    66:6f:f7:ab:f0:3c:ed:24:54:61:8a:d5:8a:02:39:
                    a3:a9:6c:78:0f:ab:c5:4e:8b:00:c0:2f:61:33:ff:
                    21:4e:9c:95:e0:03:c5:45:9b:5c:2c:d8:12:2d:d0:
                    96:92:b4:c9:93:bc:61:0f:70:08:af:21:4c:22:f5:
                    b9:18:60:f0:c7:e6:00:65:7f:16:60:6e:dc:fa:51:
                    bf:9c:2b:8c:01:bb:d4:ce:3f:b4:72:e3:d4:25:08:
                    42:36:75:b4:6e:73:d0:ec:14:f3:1e:0e:e9:af:43:
                    43:e8:aa:9c:ea:e8:f2:7d:06:2f:38:da:83:82:e9:
                    c6:89:28:a7:9b:fc:02:a9:9b:6b:ba:f9:c5:2b:cd:
                    95:be:d0:cc:cb:8e:4a:33:9a:58:d3:5e:72:d9:62:
                    33:95:f6:a7:cc:71:48:33:5a:5a:ad:b4:07:bf:88:
                    0e:8b:13:b7:36:54:91:2e:7b:2e:7d:71:55:42:58:
                    d1:d4:2b:ee:53:16:93:22:ff:d4:54:68:7d:90:0b:
                    18:fa:81:5c:74:f9:55:34:af:2f:37:77:4f:26:31:
                    f7:55:1e:6a:4f:b4:f4:36:5c:e3:08:5e:61:57:23:
                    3b:f7:2d:3e:7c:ca:e4:cf:7f:35:e8:22:36:eb:ca:
                    93:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B6:64:1A:EC:6D:A2:5A:30:F5:A8:51:3A:37:52:1A:BC:03:BC:E6
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS20454.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.165.0/24
                  216.122.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:20:e1:67:03:d5:e1:e4:4f:59:e2:04:f0:fc:f5:18:63:d4:
         cb:c9:25:ba:3d:0c:1b:f0:63:eb:de:ea:7c:75:7b:b1:d8:fa:
         87:44:17:03:9a:fe:af:e2:6e:73:b4:07:b5:30:f5:83:15:ec:
         d3:20:14:b9:f6:b3:4f:34:59:c0:3e:9a:01:aa:8b:80:66:cc:
         d7:65:43:0b:5e:48:b8:82:6a:a6:23:e4:62:2c:d7:d4:0b:c8:
         2e:ff:0e:c3:02:f5:f6:40:64:13:b3:db:7a:fa:f2:ff:db:4c:
         0d:14:ba:c2:a9:d5:53:31:e9:68:2c:59:af:98:03:fe:32:50:
         2d:86:38:0a:60:06:f0:9d:81:25:79:22:79:ec:9d:56:66:3a:
         a7:b6:40:d7:47:b4:30:1e:7b:eb:61:84:bf:dc:35:3b:a8:0d:
         15:ba:37:b9:ff:33:67:5b:b0:6d:99:39:7b:85:10:eb:d7:f1:
         0a:e7:c8:d3:48:bd:54:6d:82:ae:80:fa:1a:4c:1b:a5:84:52:
         40:f5:c9:9b:d3:1f:bb:5b:ac:97:00:39:b8:cb:a1:41:0c:87:
         8e:be:ea:4b:c3:2f:ff:59:ce:91:27:06:08:ae:d9:74:11:64:
         f7:99:2a:19:63:de:93:58:ae:90:26:9b:3b:51:11:0d:17:40:
         d7:eb:08:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org