Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS211619.roa
File:                     AS211619.roa (raw, json)
Hash identifier:          a/WxXdHNHpqjapUVm+kuvgC9z1lGe4Cr9FqoffDQI70=
Subject key identifier:   2D:AD:6F:B4:52:0F:22:78:9E:D9:87:5F:7B:CD:6A:0E:5C:0C:1F:D8
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       AA05BBE9A918374ABFB45F05CEC49F3A79AD93
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS211619.roa
Signing time:             Tue 29 Nov 2022 18:00:11 +0000
ROA not before:           Tue 29 Nov 2022 17:55:11 +0000
ROA not after:            Tue 28 Nov 2023 18:00:11 +0000
asID:                     211619
IP address blocks:        206.206.117.0/24 maxlen: 24
                          206.206.118.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            aa:05:bb:e9:a9:18:37:4a:bf:b4:5f:05:ce:c4:9f:3a:79:ad:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 29 17:55:11 2022 GMT
            Not After : Nov 28 18:00:11 2023 GMT
        Subject: CN=2DAD6FB4520F22789ED9875F7BCD6A0E5C0C1FD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b8:f2:31:16:1d:ac:8c:0d:17:d6:e1:64:07:
                    13:8a:dc:06:c9:fd:cb:64:86:8b:50:e2:a8:46:f2:
                    b2:3e:29:6c:f0:f0:7d:9b:05:a4:b8:f8:d6:0d:8b:
                    f4:9b:3e:97:72:93:10:3d:ac:a1:9d:58:62:a9:ed:
                    45:e0:f0:b8:b1:ac:ff:7a:c1:fc:06:a1:ec:b5:eb:
                    89:01:4c:44:68:1d:22:1c:f3:cd:03:84:a7:28:73:
                    07:42:7e:81:e5:b0:c0:7f:67:4f:68:49:d1:22:29:
                    f9:fc:6e:ca:e3:8e:14:54:37:e2:1d:18:df:57:57:
                    b4:41:c1:97:2c:72:70:2b:5c:60:5a:7d:7e:ab:c5:
                    b8:3e:45:5f:0e:44:af:1d:db:d0:fd:8f:00:3d:f7:
                    14:2d:1f:2c:08:8c:4c:8e:66:8b:8c:e1:1c:0f:12:
                    d6:3c:93:54:8a:9c:ea:dc:0d:1e:93:6c:67:c0:17:
                    53:8e:1e:78:22:1e:cb:90:a3:44:a4:2c:2b:31:ab:
                    cd:ac:65:b9:c6:14:d0:5b:27:a9:43:3b:ad:02:3a:
                    6a:7d:36:9a:44:43:53:d7:b2:c5:11:23:45:e6:ed:
                    c8:64:cc:54:ce:87:0d:6a:19:c9:03:5c:e6:7e:a8:
                    91:c4:9b:6b:ea:63:a4:f5:4f:8a:bd:d4:e4:a2:23:
                    9e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:AD:6F:B4:52:0F:22:78:9E:D9:87:5F:7B:CD:6A:0E:5C:0C:1F:D8
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS211619.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.117.0-206.206.118.255

    Signature Algorithm: sha256WithRSAEncryption
         83:2c:98:64:ae:75:3e:5c:e4:a3:cb:4e:f9:07:eb:69:11:e4:
         7c:79:93:46:a8:a7:a2:ee:95:33:05:a4:b9:91:ae:3d:e2:68:
         7f:5e:01:86:af:97:d2:09:3c:c1:9b:48:5e:de:a9:82:23:40:
         11:04:17:c6:03:55:85:0e:9f:68:ba:89:77:f9:9f:92:a7:16:
         5e:39:86:ad:a2:6b:bc:36:b0:2c:d9:43:ff:36:7a:36:40:19:
         8e:d2:2f:0b:c2:df:5c:5d:90:b7:88:43:47:f1:5c:8a:09:18:
         89:d1:67:cc:07:6a:3d:4c:98:29:c4:07:cf:6a:07:43:dc:92:
         59:6c:f5:ce:ab:2b:0d:f7:24:00:a2:1b:af:69:e9:8a:5b:4d:
         d5:00:0d:b4:bd:91:9e:97:4d:d1:30:01:69:0e:46:c2:3e:b6:
         e2:d3:9f:83:24:f4:c8:e1:c5:50:d3:03:d8:e8:1a:93:44:13:
         1c:6a:15:de:98:2e:ec:18:6d:4e:c8:05:32:be:46:b3:fd:6c:
         89:ec:2c:8f:34:d6:09:2a:77:16:d8:69:e3:df:c1:ff:42:3d:
         ec:41:6d:c1:be:ed:d4:0c:7c:16:96:6e:9d:d9:b0:31:d9:4d:
         47:69:dd:22:3a:d3:30:79:4d:3b:2d:12:ee:f7:2e:25:98:88:
         44:9d:d7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org