Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/38392e33352e39322e302f32322d3234203d3e203631333137.roa
File:                     38392e33352e39322e302f32322d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Qv/8fo7sGCbVjcxB8G12e2XZ0rXdSVP6m1sLahx/spM=
Subject key identifier:   FA:30:B7:5C:A6:B8:FD:EA:C0:B0:E7:3C:07:ED:E0:F3:6F:37:FD:1D
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       1CDE756496FA653868D1402CE490959544520102
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/38392e33352e39322e302f32322d3234203d3e203631333137.roa
Signing time:             Mon 18 Jul 2022 14:10:13 +0000
ROA not before:           Mon 18 Jul 2022 14:05:13 +0000
ROA not after:            Mon 17 Jul 2023 14:10:13 +0000
asID:                     61317
IP address blocks:        89.35.92.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:de:75:64:96:fa:65:38:68:d1:40:2c:e4:90:95:95:44:52:01:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Jul 18 14:05:13 2022 GMT
            Not After : Jul 17 14:10:13 2023 GMT
        Subject: CN=FA30B75CA6B8FDEAC0B0E73C07EDE0F36F37FD1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d3:65:78:c5:2b:71:48:38:d6:f5:84:ff:8a:
                    25:4a:20:7a:f3:e9:6f:6c:d2:58:d9:df:1f:0f:19:
                    4e:89:bc:f2:07:31:9e:a4:bf:c7:24:5d:f5:68:f9:
                    08:d6:b6:b6:5b:72:55:56:96:37:67:36:d5:ad:48:
                    1a:8c:e4:4d:bc:27:a9:dc:79:52:74:3d:14:da:7e:
                    4e:c9:3b:11:37:a9:1c:66:1b:da:df:f4:a1:24:3c:
                    db:af:d2:a7:89:92:2b:3a:ba:8d:18:37:a3:cd:13:
                    81:82:ac:ff:d5:07:4d:77:85:52:c5:29:87:b0:15:
                    ec:93:fc:6b:b1:5f:b4:0b:20:8a:b2:f0:ef:30:1c:
                    5e:9c:03:5d:77:3c:6c:63:a2:79:0b:97:8c:58:b8:
                    f3:7c:1b:07:49:f4:0d:d8:aa:49:0c:5c:57:f0:28:
                    63:80:09:6b:4a:7a:c6:66:8d:0f:57:71:0e:be:53:
                    0e:26:04:8d:89:e6:99:71:06:84:85:a5:6d:ed:1d:
                    07:05:1a:aa:38:be:de:c0:0a:91:91:24:2a:22:31:
                    a9:38:47:a0:93:63:65:b4:66:37:fe:9e:63:76:59:
                    22:c3:c0:1c:20:55:0c:b2:50:9c:0e:a4:8d:f2:e5:
                    a4:38:3b:14:dc:83:9c:b3:b2:65:6b:78:36:97:2a:
                    a1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:30:B7:5C:A6:B8:FD:EA:C0:B0:E7:3C:07:ED:E0:F3:6F:37:FD:1D
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/38392e33352e39322e302f32322d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.35.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:a2:49:07:18:69:3b:5f:96:18:65:dc:55:bb:70:62:60:44:
         5a:81:4b:f5:24:78:48:55:17:d3:f7:3a:bc:be:b9:d6:50:ec:
         13:82:46:da:00:76:ba:85:f4:22:f6:67:52:58:f0:dd:1d:4b:
         77:05:17:3a:1f:c7:67:b8:40:97:34:bf:6d:e5:11:2f:88:48:
         a0:4b:80:7f:c1:fd:35:ed:28:73:d6:68:98:1a:64:43:67:25:
         4c:6d:c9:60:14:bd:12:78:f0:18:62:9a:a5:0c:7f:2e:45:a8:
         82:54:b0:eb:bc:45:a3:2a:04:59:aa:23:0f:48:4e:17:16:b0:
         40:b4:54:cd:04:3f:f1:15:cf:0a:f4:4b:c9:dc:80:d9:91:4b:
         09:bf:0e:3f:0f:96:ac:d3:5d:25:0d:e7:39:e7:8a:24:e9:17:
         64:c2:15:c5:19:2f:d7:e6:48:ed:2a:90:49:62:9a:1a:75:26:
         63:bb:61:46:55:76:78:75:99:cd:78:3d:ae:6c:3e:dc:ed:7f:
         5e:73:67:3b:5b:72:6f:15:a2:82:c3:78:12:b0:c1:68:a6:5a:
         da:04:d1:de:a3:bc:e1:04:b5:87:56:c0:ee:f0:55:83:a8:0a:
         87:c7:d9:1e:e6:60:28:64:98:d6:e0:bd:a8:ad:d9:3f:c7:59:
         d2:dd:bb:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:39 2024 by rpki-client on console-ams.rpki-client.org