Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206804.roa
File:                     AS206804.roa (raw, json)
Hash identifier:          L8p0kbX+UzA59H21PTMP1mnGmKKaKt53gb5OqChok3Y=
Subject key identifier:   B3:3F:00:6E:8B:6A:3C:E6:A1:04:92:F3:4D:49:4A:E8:AF:79:87:8B
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       6868DC338733D40BCA18E645D947A071F5028734
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206804.roa
Signing time:             Mon 09 Sep 2024 19:10:41 +0000
ROA not before:           Mon 09 Sep 2024 19:05:41 +0000
ROA not after:            Mon 08 Sep 2025 19:10:41 +0000
asID:                     206804
IP address blocks:        185.195.236.0/24 maxlen: 24
                          185.195.237.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:68:dc:33:87:33:d4:0b:ca:18:e6:45:d9:47:a0:71:f5:02:87:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Sep  9 19:05:41 2024 GMT
            Not After : Sep  8 19:10:41 2025 GMT
        Subject: CN=B33F006E8B6A3CE6A10492F34D494AE8AF79878B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ac:c6:da:53:30:dc:b1:53:2a:14:2a:d5:d9:
                    49:de:4d:d6:e0:a1:45:7c:c9:21:55:22:54:9d:4d:
                    75:43:05:5d:d2:db:c9:92:29:f7:a0:8d:86:6e:a0:
                    ab:0d:b3:66:af:04:b5:b4:c3:11:0e:26:93:74:b5:
                    92:64:54:ea:4e:5c:50:c9:bb:57:4d:10:2b:fb:bb:
                    d9:ca:cb:79:61:eb:ae:c4:4c:b7:28:26:b9:73:9d:
                    de:cf:ae:dc:f2:c8:eb:c4:34:00:5e:50:b6:55:c3:
                    d2:42:dc:84:d5:62:e9:c9:34:80:f3:ba:09:df:96:
                    fe:75:80:a0:c9:e2:79:9b:e9:e0:2f:c6:97:20:f6:
                    5d:4f:c8:be:a1:c6:56:d0:02:39:ce:ed:e3:4b:c4:
                    d5:c3:3d:ad:0a:97:4e:cb:9d:48:bc:73:27:d5:c7:
                    2f:03:62:5e:77:70:58:cc:e5:5e:21:72:89:de:ce:
                    1d:4d:c4:d3:8b:d5:f5:c0:d5:10:0e:55:59:c2:73:
                    2d:5a:40:03:d0:26:9b:32:ca:91:d0:53:c2:f0:62:
                    99:52:a0:a0:62:f5:56:90:4f:a8:dd:af:9a:86:3e:
                    9b:da:06:88:06:c0:04:d4:ff:d5:de:61:a1:c9:d2:
                    d3:d2:e0:a4:e7:f9:91:08:68:46:94:38:d4:cf:fe:
                    94:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3F:00:6E:8B:6A:3C:E6:A1:04:92:F3:4D:49:4A:E8:AF:79:87:8B
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS206804.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.195.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:ca:ec:51:d3:3e:0a:45:50:65:97:99:2c:86:75:de:87:fb:
         29:86:71:d8:ff:a4:3c:f0:01:77:f6:5d:4a:aa:48:f2:c0:38:
         7e:1f:59:29:79:92:5c:e2:af:ee:c8:56:37:30:f8:f2:cd:ca:
         c3:09:71:b7:96:ed:aa:e2:42:02:28:c1:b8:c7:47:5e:9f:dd:
         c3:b9:20:7c:02:fe:fe:e3:68:16:c6:8c:e2:3c:fc:21:73:88:
         ea:6b:7e:31:b9:f4:23:db:57:23:bc:3c:78:eb:16:e4:86:16:
         2f:21:bb:15:95:db:5c:71:7d:e7:e6:92:02:e4:1d:ca:e8:03:
         e0:6a:62:71:2d:5e:e2:ed:8b:7b:56:71:d0:fe:53:93:ad:f3:
         cb:a6:f3:71:38:f6:b3:d1:14:d8:2a:ac:68:4e:4b:ae:5d:47:
         98:d6:66:43:aa:18:77:70:f8:b5:95:11:70:08:b3:0e:e7:02:
         38:a2:48:81:cb:70:d8:07:60:89:04:c1:8e:fb:7b:6e:3b:58:
         ad:4f:86:ad:e9:3c:cb:21:73:72:dc:1e:06:21:77:50:48:f6:
         3c:8a:e3:ab:b5:b1:08:29:8b:2b:f1:42:08:0e:94:c7:22:9e:
         dc:cd:b5:be:c5:b9:39:d0:42:a9:c5:4d:e3:a3:21:13:a0:6a:
         15:b0:0c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 20:06:49 2024 by rpki-client on console.sobornost.net