Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS21743.roa
File:                     AS21743.roa (raw, json)
Hash identifier:          q9yjHaHJdo3hrpQ50xX4nk/gAuwrOkyKqheG8n15v48=
Subject key identifier:   1C:65:88:F0:2F:B2:79:9D:F4:77:5A:2F:25:A6:16:B1:FA:F3:26:C8
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       0C9924798EF847721C2DD5B3C7B3F8340C15981D
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS21743.roa
Signing time:             Tue 13 Dec 2022 08:27:30 +0000
ROA not before:           Tue 13 Dec 2022 08:22:30 +0000
ROA not after:            Tue 12 Dec 2023 08:27:30 +0000
asID:                     21743
IP address blocks:        206.206.92.0/22 maxlen: 22
                          206.206.96.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:99:24:79:8e:f8:47:72:1c:2d:d5:b3:c7:b3:f8:34:0c:15:98:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Dec 13 08:22:30 2022 GMT
            Not After : Dec 12 08:27:30 2023 GMT
        Subject: CN=1C6588F02FB2799DF4775A2F25A616B1FAF326C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:11:64:b0:0e:da:82:a4:d2:ce:73:5e:08:87:
                    0b:40:fa:12:70:67:26:7a:ec:eb:f7:40:ff:09:83:
                    77:1c:c4:68:81:64:9e:2e:99:ba:ae:db:74:43:78:
                    21:3d:e3:90:4b:84:e0:ed:cb:af:45:34:05:f5:f2:
                    18:c1:4b:8a:be:8d:35:00:2b:82:db:25:ac:4c:e0:
                    18:99:84:68:bd:67:01:3b:5b:aa:b9:4b:22:7c:db:
                    d1:f9:f7:87:a2:ee:08:90:12:01:5c:b3:e5:eb:a6:
                    29:46:32:a0:8b:8a:31:63:8d:c5:50:3a:42:2e:ec:
                    f3:de:b1:2e:f0:1f:f2:d4:90:b2:23:24:28:63:45:
                    11:df:08:07:1c:96:1f:31:8c:b9:9e:4a:f0:67:dd:
                    ab:d2:79:a6:72:da:de:f9:cc:a5:70:c4:fa:bf:98:
                    1f:40:75:17:81:cd:e9:54:07:8a:0a:80:bf:13:12:
                    04:d9:1a:a2:f6:7d:ed:76:11:4c:01:8e:91:bd:ac:
                    40:53:2b:ee:78:d5:ec:e3:5f:4e:2f:a2:dc:b2:bf:
                    4f:96:93:4b:3f:1b:34:48:8d:cc:0b:3e:2a:70:e7:
                    03:5e:62:a1:20:ea:03:51:34:d6:35:cc:55:b8:95:
                    5c:fe:c6:23:e5:6e:ea:2e:f5:9b:10:0f:22:6f:08:
                    65:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:65:88:F0:2F:B2:79:9D:F4:77:5A:2F:25:A6:16:B1:FA:F3:26:C8
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS21743.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.92.0-206.206.97.255

    Signature Algorithm: sha256WithRSAEncryption
         5e:a7:03:6b:a6:3f:73:da:b1:ed:3d:c6:87:17:5c:5a:88:46:
         98:61:95:1f:18:9d:e1:71:fd:ed:ad:80:0e:a4:09:4b:2f:b0:
         09:6d:70:9a:3f:de:09:b6:58:03:7c:d6:31:ba:e1:41:3e:b2:
         ab:ec:ef:2b:a1:95:45:67:1a:01:58:a0:a5:93:29:86:b8:77:
         0a:69:39:d2:d5:27:75:2a:d6:29:6c:e2:fc:a7:45:0a:3d:89:
         b8:2b:fc:d5:30:14:e8:6f:e4:cd:4e:8b:78:f5:7b:3e:e0:aa:
         6e:a2:75:ee:1a:27:2f:6f:a1:fa:db:58:63:16:9b:ce:01:11:
         e3:78:7a:6d:ce:1b:8f:f5:a5:65:f0:f5:ff:b1:8c:4c:f1:a4:
         29:e9:48:df:94:4c:85:5f:0a:02:a2:d4:96:ca:27:91:aa:2e:
         72:49:3f:c7:d5:02:5d:de:d1:2b:74:78:3d:a3:8b:c5:39:fe:
         a2:f8:1c:13:83:b0:dc:e5:27:2f:e1:4e:75:1e:bb:2d:2b:45:
         87:d9:97:b7:5b:c7:70:fc:fc:b8:e7:94:55:e0:76:a7:55:38:
         d2:e8:28:e8:bf:4c:31:79:2f:13:06:c7:56:26:d6:41:90:f5:
         4d:89:40:73:f5:bd:bd:54:79:6a:a1:df:60:58:39:e1:ba:b9:
         73:72:62:a9
-----BEGIN CERTIFICATE-----
MIIFhjCCBG6gAwIBAgIUDJkkeY74R3IcLdWzx7P4NAwVmB0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzU5NjU0M2E0YzkwYzM5OGFkN2VmNjk5
YmRlOGM3OWVkZDJlMGI4YWMwHhcNMjIxMjEzMDgyMjMwWhcNMjMxMjEyMDgyNzMw
WjAzMTEwLwYDVQQDEygxQzY1ODhGMDJGQjI3OTlERjQ3NzVBMkYyNUE2MTZCMUZB
RjMyNkM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxFksA7agqTS
znNeCIcLQPoScGcmeuzr90D/CYN3HMRogWSeLpm6rtt0Q3ghPeOQS4Tg7cuvRTQF
9fIYwUuKvo01ACuC2yWsTOAYmYRovWcBO1uquUsifNvR+feHou4IkBIBXLPl66Yp
RjKgi4oxY43FUDpCLuzz3rEu8B/y1JCyIyQoY0UR3wgHHJYfMYy5nkrwZ92r0nmm
ctre+cylcMT6v5gfQHUXgc3pVAeKCoC/ExIE2Rqi9n3tdhFMAY6RvaxAUyvueNXs
419OL6Lcsr9PlpNLPxs0SI3MCz4qcOcDXmKhIOoDUTTWNcxVuJVc/sYj5W7qLvWb
EA8ibwhlmQIDAQABo4IChjCCAoIwHQYDVR0OBBYEFBxliPAvsnmd9HdaLyWmFrH6
8ybIMB8GA1UdIwQYMBaAFEzEOYug/lCqoIv6I/5wGtDCBgR/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzEv
NENDNDM5OEJBMEZFNTBBQUEwOEJGQTIzRkU3MDFBRDBDMjA2MDQ3Ri5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNTk2NTQzYTRjOTBjMzk4YWQ3ZWY2OTliZGU4Yzc5ZWRkMmUwYjhhYy5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MGYxYTgwYTAxODFlYzVmMjg0
MDYyNWEvMS9BUzIxNzQzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCcG
CCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALOzlwDBAHOzmAwDQYJKoZIhvcN
AQELBQADggEBAF6nA2umP3Pase09xocXXFqIRphhlR8YneFx/e2tgA6kCUsvsAlt
cJo/3gm2WAN81jG64UE+sqvs7yuhlUVnGgFYoKWTKYa4dwppOdLVJ3Uq1ils4vyn
RQo9ibgr/NUwFOhv5M1Oi3j1ez7gqm6ide4aJy9vofrbWGMWm84BEeN4em3OG4/1
pWXw9f+xjEzxpCnpSN+UTIVfCgKi1JbKJ5GqLnJJP8fVAl3e0St0eD2ji8U5/qL4
HBODsNzlJy/hTnUeuy0rRYfZl7dbx3D8/LjnlFXgdqdVONLoKOi/TDF5LxMGx1Ym
1kGQ9U2JQHP1vb1UeWqh32BYOeG6uXNyYqk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org