Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/36382e36392e3137362e302f32322d3232203d3e203534363133.roa
File:                     36382e36392e3137362e302f32322d3232203d3e203534363133.roa (raw, json)
Hash identifier:          vB4HxHC+OBQfrxhs0GQ/bJLhqdpgOK1hVKdcHTgzwOI=
Subject key identifier:   32:B4:36:C2:EF:F5:AB:EC:4C:D1:FD:55:02:E3:47:CD:F6:C8:46:AD
Certificate issuer:       /CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
Certificate serial:       12AA994E286473A5BD1221D48F060FC12DDAB415
Authority key identifier: 79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/36382e36392e3137362e302f32322d3232203d3e203534363133.roa
Signing time:             Thu 10 Nov 2022 23:55:48 +0000
ROA not before:           Thu 10 Nov 2022 23:50:48 +0000
ROA not after:            Thu 09 Nov 2023 23:55:48 +0000
asID:                     54613
IP address blocks:        68.69.176.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:aa:99:4e:28:64:73:a5:bd:12:21:d4:8f:06:0f:c1:2d:da:b4:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124
        Validity
            Not Before: Nov 10 23:50:48 2022 GMT
            Not After : Nov  9 23:55:48 2023 GMT
        Subject: CN=32B436C2EFF5ABEC4CD1FD5502E347CDF6C846AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f3:6e:38:99:c8:53:8c:01:0b:45:69:af:bc:
                    62:49:db:6d:97:83:de:08:2c:9e:4b:73:94:42:1a:
                    5a:65:01:a2:f1:d6:1a:ae:58:e2:7a:38:19:56:78:
                    02:2f:7c:d9:06:9b:b4:c0:c7:2b:2f:8a:02:03:94:
                    0f:ab:6b:91:fb:21:d0:0a:10:be:09:57:47:c9:a9:
                    af:d1:5f:a0:f9:65:d9:73:1d:f4:0e:38:b8:11:c0:
                    36:73:2d:cd:39:59:6f:77:1a:20:5c:66:32:ff:d0:
                    c3:a9:18:cc:2c:cb:57:00:ec:d5:80:ae:aa:4e:8c:
                    28:41:ca:0e:3a:39:5e:81:d5:c6:fe:3c:fa:ba:ba:
                    3b:f8:f9:f9:38:34:e6:21:7a:8c:2f:12:6d:0e:19:
                    c3:57:17:5b:a2:a9:7f:84:12:21:ec:a2:99:44:92:
                    ea:d4:9c:39:98:73:6f:ae:e8:05:21:2b:46:79:7e:
                    97:b3:fd:ca:94:3f:44:84:e9:5f:93:52:f2:5b:a6:
                    e7:9f:51:41:84:dd:3a:05:63:99:d5:5a:1a:e7:50:
                    be:0f:d1:7d:ac:e1:70:49:6b:51:10:ec:61:ab:ac:
                    69:47:98:78:12:ef:bb:90:b2:0b:9e:e2:1f:5b:d4:
                    9a:e0:09:37:93:d3:85:b8:f3:5d:9e:0a:69:b6:ff:
                    f0:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B4:36:C2:EF:F5:AB:EC:4C:D1:FD:55:02:E3:47:CD:F6:C8:46:AD
            X509v3 Authority Key Identifier:
                keyid:79:F0:18:5C:BC:9D:EB:7B:A5:23:7F:58:39:1A:27:69:7C:FB:54:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/79F0185CBC9DEB7BA5237F58391A27697CFB54ED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/400bf614-2b31-4ab6-86b4-6562598259b7/44f677491f5cd0f956642d12634499a01ff1d8cc93d8bd0124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf82d5e5210183ec4ce9f64bc3/0/36382e36392e3137362e302f32322d3232203d3e203534363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         65:fa:9f:a5:37:77:37:bf:1a:45:35:8c:87:6f:14:8a:98:3e:
         c5:76:a6:e7:c5:3e:05:14:83:3b:03:52:a3:1d:be:07:d8:3a:
         c8:b8:e7:16:da:16:cf:ec:ae:96:63:fa:66:ea:69:23:6f:c2:
         08:c2:ea:40:8d:b2:74:af:a5:6a:f1:32:b9:3e:ca:b7:fb:fa:
         ec:a3:19:4c:fd:4a:21:37:c5:bd:5b:a0:de:26:b3:62:9f:08:
         a3:2a:2f:9c:42:bd:52:a4:50:00:f6:fa:1c:06:6f:a6:a1:a4:
         01:eb:ee:df:d9:0c:5e:bf:0a:d5:d1:61:dd:b1:67:a0:53:1a:
         f9:b1:76:72:c5:00:73:cc:54:87:ec:8b:83:6e:ff:fc:f8:15:
         9b:92:45:fa:d3:a2:89:80:ae:a0:53:25:53:92:a3:f8:00:dd:
         10:e9:52:0d:30:d7:be:81:78:06:4b:ca:9f:13:99:ea:0c:cd:
         6d:2c:98:8c:97:5b:d5:da:e6:10:4e:91:9c:f2:fb:94:35:22:
         b0:42:f2:8a:f4:36:4c:13:c5:98:a9:e2:2b:09:4d:fd:87:a2:
         9b:78:4c:85:4d:34:38:5e:1c:ce:fe:89:66:7b:3e:56:95:4c:
         e8:bd:59:36:11:c5:b6:b1:e9:65:d8:fc:32:57:db:1e:2d:7a:
         41:03:94:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:08 2024 by rpki-client on console-fra.rpki-client.org