Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS7029.roa
File:                     AS7029.roa (raw, json)
Hash identifier:          rq4hlJyvU673Lp5Zbp2N5gcnGYly6n38+KS81HxZfcc=
Subject key identifier:   4D:79:D8:75:26:5A:A8:D6:9E:65:AA:F5:19:AB:24:E1:CC:05:32:15
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       7035012B1DA2B87F2649DCA2E60BB3CB7F673BD0
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS7029.roa
Signing time:             Mon 28 Nov 2022 09:41:22 +0000
ROA not before:           Mon 28 Nov 2022 09:36:22 +0000
ROA not after:            Mon 27 Nov 2023 09:41:22 +0000
asID:                     7029
IP address blocks:        206.206.108.0/24 maxlen: 24
                          206.206.120.0/24 maxlen: 24
                          206.206.127.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:35:01:2b:1d:a2:b8:7f:26:49:dc:a2:e6:0b:b3:cb:7f:67:3b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:22 2022 GMT
            Not After : Nov 27 09:41:22 2023 GMT
        Subject: CN=4D79D875265AA8D69E65AAF519AB24E1CC053215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c6:52:15:34:45:ec:ed:53:66:6f:5a:ba:84:
                    f3:b6:36:52:8f:02:28:66:63:e8:8d:ab:7c:6d:2b:
                    cc:f9:14:8e:a1:fe:e9:59:08:d8:43:52:3c:c1:07:
                    b1:02:f1:7c:c9:3e:ca:99:d5:0a:5c:7a:17:b9:8b:
                    d4:4b:88:99:b4:14:dd:9d:37:96:b9:5e:6e:e1:ec:
                    58:87:eb:15:9a:ba:d2:9f:05:be:3e:17:b5:97:f4:
                    c7:db:eb:9b:e6:27:c5:ab:30:02:05:3b:7f:30:b8:
                    8e:e7:98:78:e2:c7:36:bc:b0:d6:4c:71:ee:4f:aa:
                    11:33:ee:df:b9:cd:76:d3:81:09:31:9a:20:cc:2f:
                    de:43:a7:e8:ee:32:fb:04:27:cb:db:0d:6d:77:c6:
                    5a:b3:8c:a1:c8:95:5f:e2:3e:e6:f3:73:a0:40:da:
                    90:8a:89:b9:01:22:82:63:99:6e:fd:06:89:23:7f:
                    4a:dd:6d:c3:3f:de:ef:e9:25:24:4b:4a:c2:d0:e2:
                    5b:34:90:37:c9:64:a0:31:71:a5:4c:6f:c8:81:52:
                    af:fd:4e:08:22:34:53:d4:b8:3e:82:ff:f5:22:e0:
                    54:e9:f4:85:a0:1e:a5:fc:47:83:8e:eb:61:90:a1:
                    8f:f7:1e:d6:2b:fd:69:fe:a7:2d:b1:5c:f5:59:56:
                    6a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:79:D8:75:26:5A:A8:D6:9E:65:AA:F5:19:AB:24:E1:CC:05:32:15
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS7029.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.108.0/24
                  206.206.120.0/24
                  206.206.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:ca:c7:19:20:ce:6d:03:88:fa:d8:97:2d:a0:6f:a3:ad:c3:
         75:d0:7d:32:f9:4b:9c:59:61:1d:3f:3f:9b:73:c0:da:60:bd:
         63:e2:57:45:9d:7d:bf:b8:8a:55:ed:bb:91:d9:ca:c0:37:bc:
         30:6c:40:1a:6c:ce:68:59:a4:22:bc:86:c0:7c:f6:09:18:01:
         67:e1:90:01:c9:1e:ec:07:a2:cc:df:64:a3:51:47:e6:c2:02:
         8e:56:a0:00:73:50:34:d6:fc:a1:a0:d6:60:40:c9:4f:c0:21:
         75:9a:cc:3b:84:fd:37:18:87:c3:23:2c:8c:73:bf:8b:d1:67:
         d1:4a:7f:1e:7e:af:74:05:32:94:2c:07:7f:b5:f0:19:5c:4a:
         9c:97:e2:c3:ee:cc:a5:a0:89:31:56:69:7a:1f:4f:f1:15:e6:
         00:7b:eb:3f:31:00:d6:20:8c:6f:ee:1e:bb:72:a8:e8:54:ac:
         f1:69:2d:b3:fe:49:39:3d:e0:97:78:59:6f:7a:2c:82:a3:75:
         e6:e7:cb:8a:e2:7b:2a:eb:f6:ba:44:3a:6f:6b:fd:c5:f5:24:
         29:8a:c8:e6:17:d5:7d:52:ff:4f:25:c8:a1:c2:43:df:08:c3:
         f8:54:26:1f:f1:3f:8c:27:41:9e:a1:f0:7e:ec:02:23:e6:1d:
         5a:16:87:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org