Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS55154.roa
File:                     AS55154.roa (raw, json)
Hash identifier:          6xkhw2CGZpIDTCTSZ7cu895MnFcDDolGIU7EZNa/aCY=
Subject key identifier:   C9:F0:24:CF:A3:E8:26:8F:88:49:26:6A:EB:7C:FD:81:99:74:D5:90
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       1D7D23DC0AF24E2025D8F10E4178211F512422FB
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS55154.roa
Signing time:             Thu 10 Nov 2022 13:38:25 +0000
ROA not before:           Thu 10 Nov 2022 13:33:25 +0000
ROA not after:            Thu 09 Nov 2023 13:38:25 +0000
asID:                     55154
IP address blocks:        67.210.97.0/24 maxlen: 24
                          209.200.225.0/24 maxlen: 24
                          216.227.215.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7d:23:dc:0a:f2:4e:20:25:d8:f1:0e:41:78:21:1f:51:24:22:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 10 13:33:25 2022 GMT
            Not After : Nov  9 13:38:25 2023 GMT
        Subject: CN=C9F024CFA3E8268F8849266AEB7CFD819974D590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:93:88:8a:c5:21:18:10:08:f1:2a:09:f9:ac:
                    a2:05:ec:29:32:1a:06:ed:bc:72:23:4e:82:d6:cf:
                    6b:f0:d0:80:7f:40:34:f4:b5:2b:83:11:ea:09:4b:
                    3d:68:25:f0:ba:38:0e:de:25:a2:93:71:58:c6:e8:
                    86:d2:0d:da:46:16:7f:0f:4a:6f:e4:94:05:e4:e8:
                    5a:43:8d:8c:e0:f2:ad:8c:5f:77:30:1b:f0:91:c3:
                    6d:61:27:4b:3a:b9:04:a3:b1:f1:da:6c:e5:54:7a:
                    35:7f:7f:21:cf:5d:ce:32:70:22:da:64:43:7a:6c:
                    bc:6d:45:00:b9:9e:73:14:6a:bc:25:2d:02:cc:65:
                    41:77:3f:1d:b0:ca:2a:df:b7:95:41:31:7f:8e:79:
                    1c:08:21:4a:0f:9b:35:ad:c3:2f:ed:55:8a:74:6d:
                    80:7d:ba:fb:e6:80:cc:ef:9a:a0:9a:7d:3c:af:43:
                    25:72:c6:88:e0:f6:e7:32:36:04:42:9a:d9:9f:2f:
                    a8:21:90:e1:f8:9c:36:b3:fc:e5:25:b8:e9:b7:b8:
                    b6:ae:e6:01:35:c9:81:25:dd:4d:cb:be:d0:d0:f0:
                    38:d6:d5:48:27:75:84:98:48:7d:b2:b7:66:eb:c1:
                    59:bb:b9:dc:03:82:25:e5:36:f5:f5:e1:b9:c5:d2:
                    dd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:F0:24:CF:A3:E8:26:8F:88:49:26:6A:EB:7C:FD:81:99:74:D5:90
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS55154.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.97.0/24
                  209.200.225.0/24
                  216.227.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:27:0b:b2:60:e2:71:3c:5a:92:b0:c6:69:4b:6e:1c:ec:79:
         79:9e:b1:8b:13:a6:e5:47:9c:c0:62:d5:29:7b:5c:a7:2d:df:
         8c:d6:6c:54:4a:84:3a:68:d6:bd:49:57:c0:e4:9e:69:ac:17:
         97:09:0c:90:15:1e:cb:dc:43:52:3d:fb:ab:4a:11:ee:29:4d:
         4f:1d:6d:7d:9a:5b:3b:a4:c6:ab:91:4c:12:47:82:86:77:f9:
         4b:ae:25:67:14:13:61:55:4e:9d:a2:07:f8:60:b2:2a:9a:b2:
         e5:67:f2:8d:74:af:3e:ad:ce:e0:5b:dd:54:d9:0c:15:01:7c:
         fc:0e:0b:6e:e0:b6:11:6d:07:a2:89:d7:d1:6d:14:07:df:3d:
         83:16:1e:04:24:26:81:5c:e6:9b:5a:3f:3b:89:ff:69:83:43:
         8d:9b:f2:48:93:cf:56:d1:0d:ff:d7:1d:d3:a1:2f:5f:82:ae:
         83:a8:70:e7:78:e9:60:90:ae:09:b9:6b:4a:c3:e6:89:54:03:
         6e:41:28:45:67:cc:cd:00:be:1a:a5:41:72:e4:bf:1a:59:a8:
         cf:a0:fd:02:f3:a7:12:87:f0:1c:01:1e:a3:77:12:05:5f:c0:
         a1:11:f8:e0:d7:da:b9:71:0d:72:89:b2:39:44:17:82:b1:b0:
         ce:c5:6b:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org