Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS60721.roa
File:                     AS60721.roa (raw, json)
Hash identifier:          LsqpMglGaSar8WyFPr9RBeyoMwYf/8t8Y63WKZy++60=
Subject key identifier:   ED:F7:F2:A0:97:C6:72:3A:B1:4A:62:5B:B5:EF:EB:A0:E7:24:E3:46
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       323D327BAC21DF64D787B9A8738C5B9A7DEC52A1
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS60721.roa
Signing time:             Fri 09 Dec 2022 00:51:01 +0000
ROA not before:           Fri 09 Dec 2022 00:46:01 +0000
ROA not after:            Fri 08 Dec 2023 00:51:01 +0000
asID:                     60721
IP address blocks:        206.206.65.0/24 maxlen: 24
                          206.206.96.0/24 maxlen: 24
                          206.206.110.0/24 maxlen: 24
                          206.206.114.0/24 maxlen: 24
                          216.122.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:3d:32:7b:ac:21:df:64:d7:87:b9:a8:73:8c:5b:9a:7d:ec:52:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Dec  9 00:46:01 2022 GMT
            Not After : Dec  8 00:51:01 2023 GMT
        Subject: CN=EDF7F2A097C6723AB14A625BB5EFEBA0E724E346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:60:16:0b:6d:d9:22:75:56:7d:30:48:2a:c9:
                    11:4a:46:21:05:c3:9a:51:43:1e:4d:06:fc:c4:24:
                    92:d4:de:d8:64:20:f6:03:c2:3e:56:d1:47:f8:35:
                    cf:73:e9:6c:32:a6:44:9e:88:5a:3a:5a:8a:d4:32:
                    51:8e:ac:92:e2:d8:15:a2:d5:ad:e6:2a:d6:28:fe:
                    bb:2e:dd:0c:b0:71:31:63:31:11:ea:5f:53:11:2f:
                    2a:98:17:c3:24:ba:a7:5e:de:e9:80:87:2c:fe:3d:
                    d9:e6:ed:db:af:a1:7f:4a:49:3e:d3:5a:3b:16:9c:
                    cf:a8:90:90:7b:70:a7:bb:1a:fa:64:a8:b9:3c:de:
                    29:1f:ec:db:ed:ef:b8:b7:f9:01:cf:9f:26:fa:9d:
                    fc:86:f3:ec:0a:9f:5e:c9:14:76:91:93:0a:20:84:
                    73:1d:1f:31:1c:ac:23:52:71:5a:1e:58:d9:65:a5:
                    6f:55:48:c4:0a:7e:c2:ec:25:44:23:f1:ba:33:a9:
                    55:31:86:13:01:10:70:ca:d1:a5:d1:91:ce:c5:79:
                    ef:c0:d3:f7:96:31:5f:e8:31:6c:80:99:95:66:4c:
                    88:40:4d:cb:76:f8:e6:a5:0f:e5:b1:ad:e5:c6:8c:
                    07:cb:d6:09:1b:79:0c:f8:cb:55:0b:95:2c:04:b4:
                    50:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:F7:F2:A0:97:C6:72:3A:B1:4A:62:5B:B5:EF:EB:A0:E7:24:E3:46
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS60721.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.65.0/24
                  206.206.96.0/24
                  206.206.110.0/24
                  206.206.114.0/24
                  216.122.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:23:c5:a0:a2:4f:94:44:2e:f7:82:0e:9b:ca:75:3c:33:03:
         64:bc:02:3d:9d:39:ba:1d:c3:36:7a:19:30:05:2f:54:64:31:
         78:52:12:ad:ab:5b:a9:42:07:8c:80:55:11:8b:c3:9c:63:a5:
         d9:4d:08:03:65:8a:e3:52:df:82:9e:b4:bd:30:3d:11:b6:34:
         1f:e2:fa:2d:24:f7:d8:f1:c9:0c:39:11:ae:71:64:ff:a9:f0:
         02:46:fb:7f:b4:ee:2f:f3:72:58:54:f8:bc:46:9d:55:a0:01:
         36:41:39:46:78:06:6c:05:21:45:28:aa:a5:ef:a3:e7:98:ea:
         8f:63:f4:c0:a1:b3:5b:19:2f:1a:eb:0a:38:17:46:04:f1:59:
         98:94:f2:74:4d:3a:10:05:b8:9e:ec:85:a3:a9:85:f8:7a:79:
         07:40:d0:9a:bd:ad:0b:27:d8:ba:f1:2f:fc:bf:cf:5b:bb:a8:
         ae:2f:c5:8f:19:8a:e9:7f:cb:91:42:d4:7b:e7:f9:79:ec:c2:
         87:30:1b:b3:ab:e4:3e:a0:c1:cd:47:25:be:a2:89:dd:d1:49:
         c4:1b:d0:68:6e:e6:98:67:57:a3:4c:24:d0:93:7d:8d:41:e6:
         1d:cc:e6:1c:17:c1:85:78:c8:ca:a2:b6:a7:7f:42:47:83:5f:
         a1:2f:91:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org