Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS7018.roa
File:                     AS7018.roa (raw, json)
Hash identifier:          L3HYRwPiwIcJVIcKqPgQmN2S5R1+OFQK93Mi7389kIw=
Subject key identifier:   E6:C5:75:93:ED:15:39:8E:C7:08:34:A2:A9:45:34:B6:63:77:80:A8
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       163660AF723CE61AA8CBDA7CE2BD710A5BA2A3F6
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS7018.roa
Signing time:             Mon 28 Nov 2022 09:41:21 +0000
ROA not before:           Mon 28 Nov 2022 09:36:21 +0000
ROA not after:            Mon 27 Nov 2023 09:41:21 +0000
asID:                     7018
IP address blocks:        206.206.66.0/24 maxlen: 24
                          206.206.67.0/24 maxlen: 24
                          206.206.69.0/24 maxlen: 24
                          206.206.71.0/24 maxlen: 24
                          206.206.73.0/24 maxlen: 24
                          206.206.75.0/24 maxlen: 24
                          206.206.76.0/24 maxlen: 24
                          206.206.77.0/24 maxlen: 24
                          206.206.87.0/24 maxlen: 24
                          206.206.88.0/24 maxlen: 24
                          206.206.89.0/24 maxlen: 24
                          206.206.90.0/24 maxlen: 24
                          206.206.91.0/24 maxlen: 24
                          216.122.182.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:36:60:af:72:3c:e6:1a:a8:cb:da:7c:e2:bd:71:0a:5b:a2:a3:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:21 2022 GMT
            Not After : Nov 27 09:41:21 2023 GMT
        Subject: CN=E6C57593ED15398EC70834A2A94534B6637780A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:57:7a:db:10:ba:ba:fa:32:82:0f:bd:cd:
                    24:fb:6d:50:b7:9b:ec:00:c0:7b:2e:f6:4c:df:92:
                    61:05:2a:88:c1:cc:bb:c2:5d:50:bc:23:a0:08:41:
                    53:13:6e:2a:c2:03:5f:f1:c1:b8:b0:04:ea:63:bc:
                    56:94:38:06:84:a5:c6:21:d0:e1:70:fc:94:35:a2:
                    52:7d:6b:e2:d8:ee:0e:fe:5f:0e:7c:78:f7:31:b0:
                    c5:fc:42:9b:ca:1e:12:4a:80:94:67:d7:c9:45:51:
                    7d:07:0f:7b:92:14:42:ef:99:06:b9:8a:d4:15:ff:
                    1c:3f:8c:30:b5:09:36:19:df:dd:c4:52:03:c7:1c:
                    29:50:0a:f1:a9:5f:f1:9d:1f:82:42:4f:f3:74:07:
                    eb:b3:67:08:ee:72:ae:55:ef:50:8c:c4:42:2c:97:
                    82:eb:60:52:67:fb:c9:9b:02:c1:7b:32:66:a4:82:
                    3f:bc:b6:ae:42:42:33:f9:97:1a:08:04:79:f8:08:
                    0a:64:36:c3:b1:32:cd:62:ac:a7:18:9d:e9:d3:31:
                    19:40:46:ee:63:ba:09:68:8c:ee:a6:91:74:e3:80:
                    0b:0a:9e:12:8a:2e:92:eb:e2:86:2d:d7:c0:99:dc:
                    e7:4d:bc:34:d2:48:66:b6:ee:4f:36:fe:d0:bd:3f:
                    8b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:C5:75:93:ED:15:39:8E:C7:08:34:A2:A9:45:34:B6:63:77:80:A8
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS7018.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.66.0/23
                  206.206.69.0/24
                  206.206.71.0/24
                  206.206.73.0/24
                  206.206.75.0-206.206.77.255
                  206.206.87.0-206.206.91.255
                  216.122.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:9e:b8:05:d3:0f:ab:54:6e:32:af:77:58:57:35:2d:ab:75:
         6c:3c:50:a8:53:53:4e:a2:cc:78:16:a5:98:6d:04:28:54:01:
         a4:4a:f4:09:34:0e:08:30:cf:5a:e9:12:15:61:50:6f:ad:e9:
         dd:59:20:d6:ed:b1:9f:11:4f:fa:6c:22:79:ed:c0:fc:b6:53:
         77:2b:a4:eb:4b:39:97:df:cc:2f:03:ba:32:29:2c:01:3c:07:
         59:9d:a1:ae:86:3b:a2:a3:1e:97:67:69:8b:1b:e3:56:0d:54:
         ab:e9:2e:b5:da:1b:b4:af:28:54:9d:66:43:bc:df:ff:0d:3d:
         93:4a:77:e0:d7:64:b7:fd:a2:4f:ef:1e:ee:86:9f:74:ed:75:
         f5:c3:39:3a:8e:c9:24:b5:da:92:0e:2b:be:49:3b:da:65:1f:
         ba:34:3a:d5:77:98:35:b1:83:83:05:4b:f2:4c:cd:bf:73:8d:
         98:9f:8f:f8:ce:8f:ab:8d:c3:d7:2b:9d:a8:12:a8:2c:f2:54:
         b6:cd:f7:c3:bb:0e:cb:ca:bc:c5:6e:50:76:8e:2b:41:37:b0:
         03:8d:9a:01:ff:a4:27:f4:5d:b9:2b:74:3b:a9:e0:19:56:e6:
         46:d7:f4:71:88:ce:a6:df:c8:17:de:00:39:85:af:7f:b2:02:
         08:74:11:ab
-----BEGIN CERTIFICATE-----
MIIFsTCCBJmgAwIBAgIUFjZgr3I85hqoy9p84r1xCluio/YwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzU5NjU0M2E0YzkwYzM5OGFkN2VmNjk5
YmRlOGM3OWVkZDJlMGI4YWMwHhcNMjIxMTI4MDkzNjIxWhcNMjMxMTI3MDk0MTIx
WjAzMTEwLwYDVQQDEyhFNkM1NzU5M0VEMTUzOThFQzcwODM0QTJBOTQ1MzRCNjYz
Nzc4MEE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX9XetsQurr6
MoIPvc0k+21Qt5vsAMB7LvZM35JhBSqIwcy7wl1QvCOgCEFTE24qwgNf8cG4sATq
Y7xWlDgGhKXGIdDhcPyUNaJSfWvi2O4O/l8OfHj3MbDF/EKbyh4SSoCUZ9fJRVF9
Bw97khRC75kGuYrUFf8cP4wwtQk2Gd/dxFIDxxwpUArxqV/xnR+CQk/zdAfrs2cI
7nKuVe9QjMRCLJeC62BSZ/vJmwLBezJmpII/vLauQkIz+ZcaCAR5+AgKZDbDsTLN
YqynGJ3p0zEZQEbuY7oJaIzuppF044ALCp4Sii6S6+KGLdfAmdznTbw00khmtu5P
Nv7QvT+L+QIDAQABo4ICsTCCAq0wHQYDVR0OBBYEFObFdZPtFTmOxwg0oqlFNLZj
d4CoMB8GA1UdIwQYMBaAFEzEOYug/lCqoIv6I/5wGtDCBgR/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzEv
NENDNDM5OEJBMEZFNTBBQUEwOEJGQTIzRkU3MDFBRDBDMjA2MDQ3Ri5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNTk2NTQzYTRjOTBjMzk4YWQ3ZWY2OTliZGU4Yzc5ZWRkMmUwYjhhYy5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MGYxYTgwYTAxODFlYzVmMjg0
MDYyNWEvMS9BUzcwMTgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwUwYI
KwYBBQUHAQcBAf8ERDBCMEAEAgABMDoDBAHOzkIDBADOzkUDBADOzkcDBADOzkkw
DAMEAM7OSwMEAc7OTDAMAwQAzs5XAwQCzs5YAwQB2Hq2MA0GCSqGSIb3DQEBCwUA
A4IBAQAgnrgF0w+rVG4yr3dYVzUtq3VsPFCoU1NOosx4FqWYbQQoVAGkSvQJNA4I
MM9a6RIVYVBvrendWSDW7bGfEU/6bCJ57cD8tlN3K6TrSzmX38wvA7oyKSwBPAdZ
naGuhjuiox6XZ2mLG+NWDVSr6S612hu0ryhUnWZDvN//DT2TSnfg12S3/aJP7x7u
hp907XX1wzk6jskktdqSDiu+STvaZR+6NDrVd5g1sYODBUvyTM2/c42Yn4/4zo+r
jcPXK52oEqgs8lS2zffDuw7LyrzFblB2jitBN7ADjZoB/6Qn9F25K3Q7qeAZVuZG
1/RxiM6m38gX3gA5ha9/sgIIdBGr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:31 2024 by rpki-client on console-ams.rpki-client.org