Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS211061.roa
File:                     AS211061.roa (raw, json)
Hash identifier:          wHVvzbiiEt++WZ3tsVxaZnlFL2np8qADCv6RyYyqTbE=
Subject key identifier:   F0:2E:E0:03:66:2D:79:E7:83:81:68:A1:D7:07:BE:DD:71:50:46:32
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       465A99C22741E9A18A448AC85FE59706B58F2FBF
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS211061.roa
Signing time:             Thu 10 Nov 2022 13:39:00 +0000
ROA not before:           Thu 10 Nov 2022 13:34:00 +0000
ROA not after:            Thu 09 Nov 2023 13:39:00 +0000
asID:                     211061
IP address blocks:        74.50.31.0/24 maxlen: 24
                          89.35.94.0/24 maxlen: 24
                          209.200.226.0/24 maxlen: 24
                          209.200.255.0/24 maxlen: 24
                          216.97.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5a:99:c2:27:41:e9:a1:8a:44:8a:c8:5f:e5:97:06:b5:8f:2f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 10 13:34:00 2022 GMT
            Not After : Nov  9 13:39:00 2023 GMT
        Subject: CN=F02EE003662D79E7838168A1D707BEDD71504632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:db:31:d7:37:46:2c:31:80:27:95:fa:89:
                    09:65:79:8f:ee:11:46:f8:cb:a9:84:22:bc:80:93:
                    93:f4:a0:e9:6b:e3:a5:6b:d5:eb:70:dd:d4:e4:43:
                    2f:ea:3c:4b:40:05:c3:4c:98:c3:6e:6e:ce:1b:32:
                    72:b1:0a:56:ff:96:3b:1a:8d:54:1b:43:a6:f2:68:
                    82:9a:bf:ec:e8:b9:ed:62:9c:cd:a4:dd:47:a6:88:
                    19:12:39:a0:66:fa:46:27:8a:a5:e4:af:fa:bd:e7:
                    22:08:75:21:21:5c:05:27:a9:15:77:ee:41:86:6e:
                    51:a9:0e:3d:af:0c:57:4e:4c:fb:3b:8a:fe:09:ff:
                    81:aa:89:6f:65:24:2c:20:2f:da:b4:0d:58:95:e4:
                    7b:03:25:01:bb:84:06:a7:b9:bf:76:de:fe:2c:bf:
                    2a:3c:54:89:d7:4a:79:79:06:82:b0:22:e4:e3:ce:
                    da:44:d2:30:35:fa:57:a3:05:00:69:13:92:9b:02:
                    fd:3c:e8:a6:a9:80:36:5d:45:e3:4c:fc:99:65:94:
                    76:67:f1:f9:63:3b:03:62:8e:2b:f7:51:04:c9:a6:
                    48:07:2f:93:f0:b8:dd:85:a5:e2:88:12:52:62:d0:
                    e1:fc:83:6f:7f:2b:b5:a8:70:97:c1:88:2b:16:69:
                    11:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2E:E0:03:66:2D:79:E7:83:81:68:A1:D7:07:BE:DD:71:50:46:32
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS211061.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.31.0/24
                  89.35.94.0/24
                  209.200.226.0/24
                  209.200.255.0/24
                  216.97.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:98:53:01:be:54:56:ed:d3:86:b5:0c:90:51:0f:95:a6:0d:
         d3:ca:ff:7b:bf:ee:4c:14:dd:26:b6:30:eb:f4:c5:90:5f:27:
         06:d2:aa:22:a1:65:33:c1:c6:8d:9d:fd:61:f7:14:c9:12:7c:
         93:35:8e:24:10:dd:1c:ad:81:e2:f6:04:20:b4:8b:af:c1:f1:
         64:4d:1f:14:e2:86:5d:d6:41:68:79:b5:4d:5a:fb:ad:da:53:
         7c:4f:7f:7e:b7:24:ba:9d:5c:c8:81:cc:5a:69:df:8f:9c:3f:
         b8:e6:1a:fa:e5:80:17:5b:ef:69:4c:89:00:9f:4c:0e:79:80:
         ad:ed:6f:02:15:b6:08:78:3c:b7:91:21:65:be:68:c0:15:82:
         39:fe:23:f8:e2:46:9d:d0:bf:41:e6:ab:29:be:19:aa:5a:20:
         6f:8a:d4:8d:75:27:90:2f:28:6e:e2:54:1b:d1:b3:08:9c:61:
         10:f5:81:20:d1:2f:0d:cf:e9:e7:d7:76:05:4e:57:b5:9e:8d:
         b0:d3:10:52:58:5d:9b:ec:3b:9c:c7:10:c6:84:2b:44:41:61:
         e8:5b:6b:5d:3d:b2:d2:3a:04:13:69:7c:bc:57:8e:24:90:9a:
         50:35:87:62:37:49:ee:73:91:59:31:61:5f:d3:ef:58:1d:12:
         6c:0c:25:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org