Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS1239.roa
File:                     AS1239.roa (raw, json)
Hash identifier:          sjtqo6+ivClYEwVByB9fxTq0QFYiRcnlu5lmutoLw/A=
Subject key identifier:   2E:E8:6B:53:7B:A5:93:92:DC:CD:D0:26:09:03:ED:4E:54:44:C5:DF
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       50A87F26CFC12380FD4613DA47062D96CFA0FC05
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS1239.roa
Signing time:             Thu 10 Nov 2022 13:38:26 +0000
ROA not before:           Thu 10 Nov 2022 13:33:26 +0000
ROA not after:            Thu 09 Nov 2023 13:38:26 +0000
asID:                     1239
IP address blocks:        89.35.94.0/23 maxlen: 24
                          192.228.112.0/20 maxlen: 24
                          209.200.229.0/24 maxlen: 24
                          209.200.232.0/23 maxlen: 24
                          209.200.234.0/24 maxlen: 24
                          209.200.240.0/24 maxlen: 24
                          209.200.242.0/23 maxlen: 24
                          209.200.244.0/23 maxlen: 24
                          216.97.228.0/23 maxlen: 24
                          216.97.236.0/23 maxlen: 24
                          216.227.208.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:a8:7f:26:cf:c1:23:80:fd:46:13:da:47:06:2d:96:cf:a0:fc:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 10 13:33:26 2022 GMT
            Not After : Nov  9 13:38:26 2023 GMT
        Subject: CN=2EE86B537BA59392DCCDD0260903ED4E5444C5DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:cd:84:06:2f:e8:2b:88:8a:d2:3c:5e:07:9a:
                    bd:a2:ec:af:da:f0:42:34:2e:85:4d:16:6d:05:33:
                    b2:bf:0b:1c:fe:22:8e:a4:22:2f:4b:93:b3:34:c8:
                    a0:8b:5f:d4:bd:c9:44:68:6e:05:b0:80:be:27:85:
                    dc:9d:c9:45:0d:fc:40:05:ba:51:b5:22:54:a5:17:
                    3c:e5:d0:1f:17:01:fd:df:e2:7f:73:24:94:b4:53:
                    49:52:3c:f2:61:46:2b:51:88:1d:15:27:00:f9:5d:
                    d8:e0:d3:1a:fe:cc:21:16:5c:70:74:1c:2c:9d:c6:
                    43:35:64:26:f8:c2:c8:2d:ad:75:48:19:26:35:6c:
                    fd:53:a2:4a:2a:f7:45:6a:80:ac:f1:07:cf:45:93:
                    a7:3f:77:4e:83:ef:0f:41:95:b6:c1:b8:6f:11:48:
                    66:25:3c:77:7b:fa:64:c5:b8:77:75:d7:cf:cb:44:
                    23:84:a5:ea:58:26:9d:ce:a9:e4:ea:8b:93:b9:0b:
                    33:5c:bb:67:06:93:7d:95:3d:e2:a9:64:a0:e6:1a:
                    8d:c4:b3:40:60:17:67:67:0a:0f:18:5e:49:69:7f:
                    de:78:4f:40:90:f0:45:26:f1:a6:bb:0e:74:bd:b0:
                    70:fe:ee:22:cb:78:88:38:53:5c:99:98:5f:53:62:
                    b6:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E8:6B:53:7B:A5:93:92:DC:CD:D0:26:09:03:ED:4E:54:44:C5:DF
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS1239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.35.94.0/23
                  192.228.112.0/20
                  209.200.229.0/24
                  209.200.232.0-209.200.234.255
                  209.200.240.0/24
                  209.200.242.0-209.200.245.255
                  216.97.228.0/23
                  216.97.236.0/23
                  216.227.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9e:1c:a7:f1:37:73:f4:cd:a7:ea:a6:91:52:cc:c3:e3:4c:3a:
         49:22:57:dd:96:eb:02:f6:e2:26:52:cf:ad:f5:d6:25:6c:20:
         51:ce:2b:ae:e3:6c:8c:ad:1a:1f:78:13:e7:af:2e:be:4f:fd:
         88:82:b7:d6:8a:5c:e4:db:0f:40:7f:78:6d:19:41:cc:bf:a8:
         90:aa:53:a8:27:f9:44:f4:6d:a8:83:d3:4e:d7:94:54:3f:4c:
         f0:29:a3:c5:2a:fb:b9:9f:9a:18:5a:b3:45:ce:ea:95:1d:f8:
         a2:ea:08:98:2e:9e:de:b6:30:0a:bb:52:f1:28:14:d4:69:69:
         3c:39:5a:4c:d7:52:a6:69:76:af:d2:06:4e:b0:95:8a:49:7d:
         1e:d8:e9:c3:34:1d:10:aa:36:de:49:4b:92:bd:b0:09:5d:be:
         93:ab:8f:ea:f7:21:6a:d5:4c:28:f8:ee:12:14:90:98:6b:80:
         e5:17:13:05:0c:de:c6:67:45:a3:bd:08:93:4e:7d:79:12:1f:
         51:16:ce:84:43:fd:e9:ad:29:ae:a2:f2:30:51:8e:74:5f:53:
         df:f7:94:89:a2:bf:9f:29:b7:6f:c3:dd:7b:a1:5f:58:72:d5:
         36:53:b8:72:59:e1:e6:21:b5:dc:7f:da:e2:6b:6d:d0:c9:56:
         d4:17:2b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org