Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e31372e302f32342d3234203d3e20323039333731.roa
File:                     37342e35302e31372e302f32342d3234203d3e20323039333731.roa (raw, json)
Hash identifier:          BXDbv3PNpOJrsPUQy4atpOK1cKsbX/7tS0yiMdv2ytI=
Subject key identifier:   6B:5F:03:35:71:E1:6B:2E:AE:FA:A0:BB:C5:21:6B:A6:97:9E:81:FC
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       487E48D77DA9DA91B038D9E7F99912E5AB9C4C2E
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e31372e302f32342d3234203d3e20323039333731.roa
Signing time:             Mon 18 Jul 2022 14:09:56 +0000
ROA not before:           Mon 18 Jul 2022 14:04:56 +0000
ROA not after:            Mon 17 Jul 2023 14:09:56 +0000
asID:                     209371
IP address blocks:        74.50.17.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:7e:48:d7:7d:a9:da:91:b0:38:d9:e7:f9:99:12:e5:ab:9c:4c:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:04:56 2022 GMT
            Not After : Jul 17 14:09:56 2023 GMT
        Subject: CN=6B5F033571E16B2EAEFAA0BBC5216BA6979E81FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:de:ce:98:c0:06:85:9b:4c:3b:89:3f:28:b5:
                    89:a1:0b:3e:65:0f:eb:02:65:7b:4c:17:8f:6f:ca:
                    6e:88:b2:e4:21:c1:2c:a2:bc:e3:31:b4:f8:e2:dc:
                    d0:4b:29:f6:e4:dd:61:fe:3f:c0:2d:f2:54:13:a1:
                    15:b9:d1:97:4a:d4:e0:c4:80:32:68:70:82:be:f5:
                    a0:a9:f9:56:84:33:2a:36:9c:7c:40:0b:f8:e0:8f:
                    de:c2:4f:38:3a:db:5e:1c:7b:41:e6:4e:06:76:a3:
                    bc:02:da:65:b8:93:b8:d5:e7:d4:ed:63:9a:6c:8c:
                    b8:be:62:27:af:4f:af:09:0f:b1:f2:80:81:72:86:
                    5e:24:15:d1:6b:9f:80:16:a4:09:b9:26:ac:34:56:
                    a0:8e:fc:9f:74:8f:95:4d:77:16:64:b9:bc:37:e3:
                    5b:f5:96:3f:e0:ba:c6:df:3d:ac:90:bc:6b:bd:5b:
                    63:0f:e2:ca:61:3e:a4:37:4c:1a:de:b1:1f:82:39:
                    67:28:b0:53:d9:b1:38:c3:f6:71:94:d5:6f:21:02:
                    22:5b:dc:65:3c:81:9b:62:80:00:6e:00:b1:bf:cc:
                    46:65:76:88:e7:06:2a:64:05:8f:d1:b6:f7:27:ad:
                    cf:ca:e7:3d:0a:8b:b1:da:a8:23:e8:70:4d:f9:2c:
                    47:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:5F:03:35:71:E1:6B:2E:AE:FA:A0:BB:C5:21:6B:A6:97:9E:81:FC
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/37342e35302e31372e302f32342d3234203d3e20323039333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:27:a2:5f:22:3f:9d:09:9f:ed:ee:2f:43:31:1d:ca:1e:51:
         36:f4:a4:77:37:d9:67:c1:a0:fd:e2:e2:50:15:a5:a9:a3:e3:
         e5:80:43:af:05:ab:20:19:3a:e0:21:79:ef:f0:f9:cf:e5:20:
         a3:68:b3:c8:62:46:a1:35:dc:a4:d2:18:52:98:d1:bb:17:4e:
         44:8d:15:49:6d:4c:4b:f8:53:c6:48:37:b0:97:5f:81:06:c5:
         33:ab:4c:b6:90:41:bd:e0:5d:38:7e:b1:9d:ed:ac:61:61:a2:
         63:61:da:ed:ba:46:6a:61:1e:8a:8d:c4:9a:3b:d6:c9:6c:c2:
         92:bc:ce:d2:5c:28:f2:98:f2:a8:f2:1b:d6:24:0a:3c:2d:7a:
         0d:bd:fd:11:e6:04:ef:0d:29:cc:5d:77:c9:74:7f:98:ed:c2:
         1b:c2:9c:74:92:d6:65:a3:b8:eb:83:0b:09:1f:18:58:30:7d:
         a2:76:36:43:1c:94:6e:08:a4:26:20:9b:5a:0d:4d:23:4a:d7:
         09:7c:06:07:d0:52:1b:9c:b1:c4:d2:56:49:c9:45:6e:99:44:
         be:81:bb:93:81:f7:a3:91:74:10:01:a4:c9:72:6a:63:0f:9d:
         33:a2:cd:fe:9c:b5:93:a6:3e:84:56:35:5b:68:69:c7:be:26:
         f7:b9:44:cf
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUSH5I132p2pGwONnn+ZkS5aucTC4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIwNzE4MTQwNDU2WhcNMjMwNzE3MTQwOTU2
WjAzMTEwLwYDVQQDEyg2QjVGMDMzNTcxRTE2QjJFQUVGQUEwQkJDNTIxNkJBNjk3
OUU4MUZDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN7OmMAGhZtM
O4k/KLWJoQs+ZQ/rAmV7TBePb8puiLLkIcEsorzjMbT44tzQSyn25N1h/j/ALfJU
E6EVudGXStTgxIAyaHCCvvWgqflWhDMqNpx8QAv44I/ewk84OtteHHtB5k4GdqO8
AtpluJO41efU7WOabIy4vmInr0+vCQ+x8oCBcoZeJBXRa5+AFqQJuSasNFagjvyf
dI+VTXcWZLm8N+Nb9ZY/4LrG3z2skLxrvVtjD+LKYT6kN0wa3rEfgjlnKLBT2bE4
w/ZxlNVvIQIiW9xlPIGbYoAAbgCxv8xGZXaI5wYqZAWP0bb3J63Pyuc9Coux2qgj
6HBN+SxHyQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFGtfAzVx4Wsurvqgu8Uha6aX
noH8MB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MjEx
M2VlYTQ5MGQzMy8wLzM3MzQyZTM1MzAyZTMxMzcyZTMwMmYzMjM0MmQzMjM0MjAz
ZDNlMjAzMjMwMzkzMzM3MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABKMhEwDQYJKoZIhvcNAQELBQAD
ggEBAH8nol8iP50Jn+3uL0MxHcoeUTb0pHc32WfBoP3i4lAVpamj4+WAQ68FqyAZ
OuAhee/w+c/lIKNos8hiRqE13KTSGFKY0bsXTkSNFUltTEv4U8ZIN7CXX4EGxTOr
TLaQQb3gXTh+sZ3trGFhomNh2u26RmphHoqNxJo71slswpK8ztJcKPKY8qjyG9Yk
Cjwteg29/RHmBO8NKcxdd8l0f5jtwhvCnHSS1mWjuOuDCwkfGFgwfaJ2NkMclG4I
pCYgm1oNTSNK1wl8BgfQUhucscTSVknJRW6ZRL6Bu5OB96ORdBABpMlyamMPnTOi
zf6ctZOmPoRWNVtoace+Jve5RM8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org