Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS211585.roa
File:                     AS211585.roa (raw, json)
Hash identifier:          8BigOYn49EhCVB7a/E8OO5QktKWG+sEs2Uk3byOGc0E=
Subject key identifier:   8B:90:3B:3F:01:48:E2:0E:3E:00:F7:F7:D0:A7:18:5C:81:73:86:11
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       7F2E16AF4FCAB8DF610C94FAD92DA2FCE2083BDD
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS211585.roa
Signing time:             Fri 11 Nov 2022 04:27:09 +0000
ROA not before:           Fri 11 Nov 2022 04:22:09 +0000
ROA not after:            Fri 10 Nov 2023 04:27:09 +0000
asID:                     211585
IP address blocks:        67.210.124.0/22 maxlen: 24
                          209.200.248.0/22 maxlen: 24
                          216.97.236.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:2e:16:af:4f:ca:b8:df:61:0c:94:fa:d9:2d:a2:fc:e2:08:3b:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 11 04:22:09 2022 GMT
            Not After : Nov 10 04:27:09 2023 GMT
        Subject: CN=8B903B3F0148E20E3E00F7F7D0A7185C81738611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:79:09:c1:89:f6:d3:15:76:6c:b5:dd:ba:
                    bd:f0:92:26:7c:a8:da:0f:9f:fd:44:16:96:e7:a7:
                    e9:7a:29:ca:ff:6c:f3:11:fc:71:4d:8a:fc:e0:56:
                    1e:88:bb:87:29:08:c5:a8:72:e2:f8:e0:56:f3:c9:
                    23:c9:d5:94:09:cd:e7:20:30:c3:68:82:9f:5b:29:
                    2f:cc:8f:55:ef:5d:bc:27:e4:52:8b:23:72:fd:26:
                    b3:af:98:42:99:e7:ce:88:39:54:3c:d0:e0:5a:8f:
                    a1:7e:81:7e:6b:48:46:ee:db:1b:20:44:7f:2b:e6:
                    61:c5:a9:37:9e:91:ae:9f:0d:e4:f2:fc:ed:f8:53:
                    8e:9a:94:fc:dc:ad:13:70:c9:80:29:61:8b:32:14:
                    cc:9b:a2:c2:8d:e0:b0:17:33:f0:29:f3:36:80:cd:
                    cc:f2:c3:bc:87:87:ac:31:39:57:e9:99:e7:52:b0:
                    70:9e:37:8f:08:80:b5:46:8e:b2:d3:ab:96:c4:3c:
                    f2:ae:51:0e:dd:66:2f:80:82:61:78:8e:6f:f5:fa:
                    e5:eb:5e:c8:2b:97:75:ad:52:69:92:aa:c6:cb:44:
                    3b:d1:d8:37:8d:96:99:5f:f2:1f:f6:fb:bf:be:20:
                    65:88:76:24:ab:5c:f0:f0:e3:a8:f4:72:23:b4:db:
                    0b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:90:3B:3F:01:48:E2:0E:3E:00:F7:F7:D0:A7:18:5C:81:73:86:11
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS211585.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.124.0/22
                  209.200.248.0/22
                  216.97.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2c:d7:d3:21:84:ad:bc:24:53:20:6c:68:97:7e:bf:cf:0e:e1:
         df:6f:56:5d:c4:40:40:fe:12:d0:12:71:e1:cd:f2:52:dc:d5:
         6a:fc:2b:a3:5c:e9:94:d0:7c:26:4b:ee:d8:ee:79:7b:90:8c:
         49:5c:6d:69:5b:75:18:61:48:76:a3:47:8c:77:55:3d:fd:d9:
         9e:73:ee:99:c6:a6:97:84:cb:0b:93:99:23:0a:78:83:7e:76:
         35:2d:d5:ec:f1:37:a6:e6:a2:1d:6e:df:14:0c:c1:82:8b:43:
         b2:7c:89:61:0e:cc:73:c3:da:7c:f2:29:b2:50:0d:02:e9:d3:
         f0:a5:74:54:fb:a0:66:a1:b6:a7:e9:62:84:22:74:c8:c5:f5:
         d8:02:49:ce:2a:96:d0:7e:e5:ff:b6:6c:1f:6f:8e:1a:9d:73:
         b9:54:76:23:ad:b4:2d:01:25:62:3d:e1:fa:61:0c:8e:3a:e8:
         f5:1a:03:4a:2f:83:ec:d2:11:43:c1:b6:a0:b7:10:70:83:dc:
         71:16:d4:b3:ab:2c:82:7d:33:3c:cb:a3:1d:ba:b2:b8:de:2c:
         80:76:82:10:e8:3d:5c:56:af:4f:0e:8c:8c:d2:ec:f0:33:05:
         14:29:5c:47:de:fe:bf:72:40:b2:6a:89:12:82:45:a4:3c:23:
         a1:01:b0:b1
-----BEGIN CERTIFICATE-----
MIIFizCCBHOgAwIBAgIUfy4Wr0/KuN9hDJT62S2i/OIIO90wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIxMTExMDQyMjA5WhcNMjMxMTEwMDQyNzA5
WjAzMTEwLwYDVQQDEyg4QjkwM0IzRjAxNDhFMjBFM0UwMEY3RjdEMEE3MTg1Qzgx
NzM4NjExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/R5CcGJ9tMV
dmy13bq98JImfKjaD5/9RBaW56fpeinK/2zzEfxxTYr84FYeiLuHKQjFqHLi+OBW
88kjydWUCc3nIDDDaIKfWykvzI9V7128J+RSiyNy/Sazr5hCmefOiDlUPNDgWo+h
foF+a0hG7tsbIER/K+Zhxak3npGunw3k8vzt+FOOmpT83K0TcMmAKWGLMhTMm6LC
jeCwFzPwKfM2gM3M8sO8h4esMTlX6ZnnUrBwnjePCIC1Ro6y06uWxDzyrlEO3WYv
gIJheI5v9frl617IK5d1rVJpkqrGy0Q70dg3jZaZX/If9vu/viBliHYkq1zw8OOo
9HIjtNsLjwIDAQABo4ICizCCAocwHQYDVR0OBBYEFIuQOz8BSOIOPgD399CnGFyB
c4YRMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMC9BUzIxMTU4NS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAr
BggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAkPSfAMEAtHI+AMEAthh7DANBgkq
hkiG9w0BAQsFAAOCAQEALNfTIYStvCRTIGxol36/zw7h329WXcRAQP4S0BJx4c3y
UtzVavwro1zplNB8Jkvu2O55e5CMSVxtaVt1GGFIdqNHjHdVPf3ZnnPumcaml4TL
C5OZIwp4g352NS3V7PE3puaiHW7fFAzBgotDsnyJYQ7Mc8PafPIpslANAunT8KV0
VPugZqG2p+lihCJ0yMX12AJJziqW0H7l/7ZsH2+OGp1zuVR2I620LQElYj3h+mEM
jjro9RoDSi+D7NIRQ8G2oLcQcIPccRbUs6ssgn0zPMujHbqyuN4sgHaCEOg9XFav
Tw6MjNLs8DMFFClcR97+v3JAsmqJEoJFpDwjoQGwsQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org