Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS36530.roa
File:                     AS36530.roa (raw, json)
Hash identifier:          P0nLe1+f0F2Maaf2JNyW5F/YjK99YuxKUtHyjTsWu24=
Subject key identifier:   87:12:1C:E6:B7:C8:B3:35:1B:8A:69:4C:09:C2:17:15:74:F5:30:9A
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       623E277BA931F619DAFAF43D34B061D6FDE6D8D0
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS36530.roa
Signing time:             Sat 12 Apr 2025 00:00:10 +0000
ROA not before:           Fri 11 Apr 2025 23:55:10 +0000
ROA not after:            Sat 11 Apr 2026 00:00:10 +0000
asID:                     36530
IP address blocks:        140.99.47.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3e:27:7b:a9:31:f6:19:da:fa:f4:3d:34:b0:61:d6:fd:e6:d8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Apr 11 23:55:10 2025 GMT
            Not After : Apr 11 00:00:10 2026 GMT
        Subject: CN=87121CE6B7C8B3351B8A694C09C2171574F5309A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:95:ea:61:3d:55:e9:87:75:ca:77:bf:68:e3:
                    2b:12:00:f1:67:89:12:78:5f:19:df:6a:ac:0a:71:
                    dd:21:9b:bf:73:47:b2:de:0e:92:d6:a0:fb:c8:73:
                    92:d0:ec:eb:2e:44:e6:1c:c1:d5:29:bf:84:d3:e8:
                    9a:bd:c6:43:55:f1:17:65:31:a9:e1:cd:19:3e:6c:
                    72:30:5c:5e:f5:a4:6a:be:06:46:38:a8:0f:39:49:
                    d3:05:a0:20:49:8d:3f:57:d7:1e:10:3a:45:81:c9:
                    b5:dd:e1:45:24:97:ad:39:d1:98:98:c8:6d:70:9b:
                    be:97:68:57:56:08:ad:b8:05:59:dc:38:cc:07:fc:
                    ea:e3:b9:50:17:97:db:55:e5:75:90:cd:b9:fc:e2:
                    66:92:a7:be:2f:02:f8:49:b2:16:38:30:ec:c0:91:
                    a9:e2:ff:e3:24:ac:0f:24:09:9d:b1:a9:cc:bf:7a:
                    88:3b:af:18:f7:03:d1:8e:a2:8b:c8:1e:32:c6:89:
                    93:e3:a8:d1:e2:06:ca:58:8f:84:dc:64:7d:4d:2a:
                    78:1e:60:34:49:6a:79:0a:ac:0b:dd:86:a0:18:c0:
                    95:77:55:2b:f3:18:b5:fb:3c:a8:46:e6:cf:b9:92:
                    30:b1:96:cf:4f:dc:50:e4:9a:5d:9b:04:28:8e:d9:
                    27:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:12:1C:E6:B7:C8:B3:35:1B:8A:69:4C:09:C2:17:15:74:F5:30:9A
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS36530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.99.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:a7:0f:3c:2e:2b:78:c7:9e:c2:2f:42:20:e2:58:e0:25:38:
         3b:bb:ee:97:db:ec:a4:87:10:6e:75:a8:3d:88:48:cc:43:77:
         75:a5:9d:17:1b:9b:4c:c1:14:dc:36:17:39:6a:91:d0:33:b7:
         ed:90:59:39:8e:77:61:f1:62:f6:94:1b:06:d7:24:89:6d:76:
         57:05:3d:b3:5b:6a:58:3b:99:35:c3:bd:73:57:5c:2d:fb:99:
         98:34:18:a2:a3:21:18:59:8e:b8:d8:0e:7e:cd:a7:ce:b1:e3:
         f4:81:02:77:29:cc:56:e6:16:61:17:ca:bc:e1:cc:98:9e:4d:
         0d:69:86:6c:72:75:3d:08:35:6a:69:10:f0:a2:39:ed:5d:68:
         d9:2c:fb:47:56:11:1c:1d:25:04:2b:6f:4b:be:69:3c:05:e0:
         3d:22:2e:38:c6:04:9a:7e:89:98:cd:02:d7:44:e4:ff:77:fb:
         e6:c0:6c:7f:17:5c:c4:b1:df:db:29:f1:68:a5:ed:8d:26:4f:
         12:cc:0c:b9:fe:7d:04:07:c4:86:8e:db:20:40:a6:e4:78:e0:
         a5:34:c8:d7:fe:4e:a0:b6:41:7d:db:9c:57:ea:2f:40:0a:67:
         b1:11:44:80:54:ac:4a:e0:f6:6b:79:ff:59:37:11:8d:f3:b5:
         f1:1b:f6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net