Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS61138.roa
File:                     AS61138.roa (raw, json)
Hash identifier:          7Rtf/Idjya/M4X0A3dqoRqKHf2THjEA6Fh/72WPmxj0=
Subject key identifier:   CB:D5:D8:B3:CC:D1:74:8C:9B:B5:78:65:6D:AD:B4:F1:15:CE:0F:AE
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       17A9AD2DCA6CF1DB4AFC7DEBF85324A1FCDDDC2C
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS61138.roa
Signing time:             Mon 14 Nov 2022 15:12:52 +0000
ROA not before:           Mon 14 Nov 2022 15:07:52 +0000
ROA not after:            Mon 13 Nov 2023 15:12:52 +0000
asID:                     61138
IP address blocks:        64.50.171.0/24 maxlen: 24
                          64.50.182.0/24 maxlen: 24
                          64.50.184.0/24 maxlen: 24
                          64.50.188.0/24 maxlen: 24
                          67.210.100.0/24 maxlen: 24
                          67.210.110.0/24 maxlen: 24
                          74.50.22.0/24 maxlen: 24
                          209.200.232.0/24 maxlen: 24
                          209.200.244.0/24 maxlen: 24
                          209.200.253.0/24 maxlen: 24
                          216.97.230.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:a9:ad:2d:ca:6c:f1:db:4a:fc:7d:eb:f8:53:24:a1:fc:dd:dc:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 14 15:07:52 2022 GMT
            Not After : Nov 13 15:12:52 2023 GMT
        Subject: CN=CBD5D8B3CCD1748C9BB578656DADB4F115CE0FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:89:d3:fe:87:07:fa:ac:2a:fb:ba:26:6e:14:
                    ea:1e:3b:91:db:66:03:2a:ee:6c:d5:48:e0:20:98:
                    70:d0:e7:87:c7:87:88:30:b1:d5:73:d6:0f:86:8a:
                    09:65:1e:56:65:be:22:04:a1:a7:04:d2:96:2a:f4:
                    ea:2c:23:7d:e0:39:8e:44:64:bf:75:b6:21:15:46:
                    c0:2b:c5:23:c6:b2:dd:1e:01:df:ce:92:54:4b:d2:
                    d3:79:52:39:2b:c1:65:93:37:89:ef:3f:40:f5:69:
                    04:23:b1:b0:36:ca:a1:90:17:58:35:d6:45:73:e2:
                    d4:68:a9:8e:90:07:74:75:16:c9:77:44:9f:a6:36:
                    1a:f4:2b:42:b7:12:67:72:6a:93:34:ad:93:6e:cb:
                    ea:df:97:c5:cb:00:ba:12:68:90:31:1c:88:b2:31:
                    44:3a:3c:b6:28:03:07:f1:f7:42:3d:92:92:53:13:
                    7d:5f:84:e5:c9:a2:8c:11:1c:59:d9:51:6d:27:11:
                    0f:96:7b:97:a9:f9:0b:d0:b4:f3:67:d5:57:2b:45:
                    6a:f1:fd:dd:12:2f:9c:f0:2a:bb:c8:70:18:5d:f8:
                    bb:93:58:48:9f:30:3f:98:79:6e:87:30:ec:3b:59:
                    a3:74:4f:d1:17:2c:dd:55:61:23:20:fd:7e:75:20:
                    16:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D5:D8:B3:CC:D1:74:8C:9B:B5:78:65:6D:AD:B4:F1:15:CE:0F:AE
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS61138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.171.0/24
                  64.50.182.0/24
                  64.50.184.0/24
                  64.50.188.0/24
                  67.210.100.0/24
                  67.210.110.0/24
                  74.50.22.0/24
                  209.200.232.0/24
                  209.200.244.0/24
                  209.200.253.0/24
                  216.97.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:39:01:5e:61:61:81:a5:9c:f1:09:50:f6:a5:54:4b:d5:db:
         f8:97:b6:6d:1e:68:2a:24:4f:df:30:bf:be:3b:79:9c:62:6b:
         76:bd:41:91:4f:c8:fd:e0:43:bf:54:2e:be:7f:2a:c0:1e:1f:
         88:57:9c:71:58:5b:84:79:99:71:cd:70:f8:b8:bb:56:81:f3:
         dc:c3:64:93:55:dc:88:e1:20:11:1c:4c:59:ee:7f:dc:30:d5:
         8a:3d:40:f9:4f:cc:f9:c3:ee:e3:02:54:0a:79:82:9e:33:41:
         d0:e1:10:e2:95:b0:bc:df:d9:45:7c:cd:3e:3c:54:32:9f:2c:
         d6:1f:d3:bb:fb:90:04:50:4d:2b:e9:d3:7a:39:71:95:fa:86:
         01:79:37:7d:1a:40:f6:5c:67:f5:6f:f9:d8:b7:20:9a:6f:85:
         50:38:dc:47:21:4f:4a:de:31:0e:f4:1f:e8:50:a5:a2:bb:08:
         95:8d:49:d3:40:9e:20:fa:c3:7a:b3:4a:5f:92:71:96:e9:79:
         76:a4:88:ed:a2:b9:73:b8:f4:35:e5:ee:f1:0e:b0:05:65:eb:
         98:e4:ff:70:78:52:6a:23:62:a3:78:57:05:fa:7a:a4:1e:4f:
         4b:0e:fd:5c:27:05:37:8c:d7:3f:cf:a7:6a:ea:df:26:1f:5e:
         6f:fa:a3:20
-----BEGIN CERTIFICATE-----
MIIFujCCBKKgAwIBAgIUF6mtLcps8dtK/H3r+FMkofzd3CwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIxMTE0MTUwNzUyWhcNMjMxMTEzMTUxMjUy
WjAzMTEwLwYDVQQDEyhDQkQ1RDhCM0NDRDE3NDhDOUJCNTc4NjU2REFEQjRGMTE1
Q0UwRkFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4nT/ocH+qwq
+7ombhTqHjuR22YDKu5s1UjgIJhw0OeHx4eIMLHVc9YPhooJZR5WZb4iBKGnBNKW
KvTqLCN94DmORGS/dbYhFUbAK8UjxrLdHgHfzpJUS9LTeVI5K8FlkzeJ7z9A9WkE
I7GwNsqhkBdYNdZFc+LUaKmOkAd0dRbJd0SfpjYa9CtCtxJncmqTNK2Tbsvq35fF
ywC6EmiQMRyIsjFEOjy2KAMH8fdCPZKSUxN9X4TlyaKMERxZ2VFtJxEPlnuXqfkL
0LTzZ9VXK0Vq8f3dEi+c8Cq7yHAYXfi7k1hInzA/mHluhzDsO1mjdE/RFyzdVWEj
IP1+dSAWGwIDAQABo4ICujCCArYwHQYDVR0OBBYEFMvV2LPM0XSMm7V4ZW2ttPEV
zg+uMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMC9BUzYxMTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMFsG
CCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQAQDKrAwQAQDK2AwQAQDK4AwQAQDK8
AwQAQ9JkAwQAQ9JuAwQASjIWAwQA0cjoAwQA0cj0AwQA0cj9AwQA2GHmMA0GCSqG
SIb3DQEBCwUAA4IBAQA4OQFeYWGBpZzxCVD2pVRL1dv4l7ZtHmgqJE/fML++O3mc
Ymt2vUGRT8j94EO/VC6+fyrAHh+IV5xxWFuEeZlxzXD4uLtWgfPcw2STVdyI4SAR
HExZ7n/cMNWKPUD5T8z5w+7jAlQKeYKeM0HQ4RDilbC839lFfM0+PFQynyzWH9O7
+5AEUE0r6dN6OXGV+oYBeTd9GkD2XGf1b/nYtyCab4VQONxHIU9K3jEO9B/oUKWi
uwiVjUnTQJ4g+sN6s0pfknGW6Xl2pIjtorlzuPQ15e7xDrAFZeuY5P9weFJqI2Kj
eFcF+nqkHk9LDv1cJwU3jNc/z6dq6t8mH15v+qMg
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org