Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3139322e302f32302d3234203d3e20383334.roa
File:                     34302e3138332e3139322e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier:          bjMPMOyiyyWy3BimGZHKS2FxvmtwKXFmiSCHa0MA5lE=
Subject key identifier:   EC:F2:5A:C0:2F:68:DE:0B:A1:91:AB:06:AD:DB:0F:5A:10:C2:2B:BC
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       01B4B0AFCDA9C27D708F256FD37841E4966CDA7B
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3139322e302f32302d3234203d3e20383334.roa
Signing time:             Tue 08 Apr 2025 06:55:55 +0000
ROA not before:           Tue 08 Apr 2025 06:50:55 +0000
ROA not after:            Tue 07 Apr 2026 06:55:55 +0000
asID:                     834
IP address blocks:        40.183.192.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:b4:b0:af:cd:a9:c2:7d:70:8f:25:6f:d3:78:41:e4:96:6c:da:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr  8 06:50:55 2025 GMT
            Not After : Apr  7 06:55:55 2026 GMT
        Subject: CN=ECF25AC02F68DE0BA191AB06ADDB0F5A10C22BBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:49:e6:94:1e:d5:83:30:fe:a5:93:36:8e:
                    20:ed:69:e5:d9:74:46:2e:5e:b2:2d:ae:0d:a1:05:
                    0f:a2:2f:61:65:a3:5f:a6:09:8d:2e:22:62:97:0a:
                    9a:91:f8:34:df:e7:26:35:62:30:27:ca:2e:bd:64:
                    2f:7e:52:3a:ac:85:7a:1d:41:c0:8d:9e:fa:71:2f:
                    95:cf:7b:37:4c:03:8c:23:7d:de:8e:81:40:72:6b:
                    b5:b7:49:9c:a4:41:c6:b8:d7:b4:04:f5:ad:29:ca:
                    b6:b2:dc:58:cd:29:bc:32:ac:57:84:57:13:24:7b:
                    09:d4:ff:fa:9a:ee:f5:49:f1:6d:13:16:43:96:98:
                    e9:ae:d4:92:17:e0:6e:01:4d:2c:fd:8d:21:8f:d2:
                    12:05:4c:18:f3:48:4a:1b:8a:d6:f2:70:42:91:89:
                    06:0f:eb:a6:d3:5e:55:a3:30:8b:d8:95:18:69:98:
                    08:0a:0d:7f:90:29:8d:27:19:a9:8b:ef:76:99:8a:
                    1f:22:bb:c4:1a:20:9b:19:98:15:57:7c:df:ed:4e:
                    6e:72:e8:e5:3c:26:d4:6e:39:01:0b:ad:ef:02:70:
                    1e:8c:05:d4:ee:49:ac:12:3b:f6:57:f5:81:7f:31:
                    47:1c:d5:b8:a6:49:6b:c1:14:ee:44:a1:bc:1d:e4:
                    9e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F2:5A:C0:2F:68:DE:0B:A1:91:AB:06:AD:DB:0F:5A:10:C2:2B:BC
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e3139322e302f32302d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:27:9c:8a:26:3c:a2:0b:05:14:ff:4f:38:94:45:02:75:da:
         9a:ac:9e:62:ac:0f:ab:ca:68:a3:67:04:ed:33:8c:04:74:38:
         63:22:96:20:4b:42:81:bc:f1:d3:46:cd:2a:f4:ad:75:a5:f7:
         72:b5:ab:65:ad:6d:42:68:6d:89:d4:d8:57:09:22:c8:eb:0b:
         f6:9b:6a:14:59:57:04:38:c8:15:c4:33:d9:11:67:42:84:8c:
         d7:d2:2f:83:ab:7b:51:2b:e7:9d:66:ac:8c:55:03:b1:88:4e:
         a3:1c:05:41:b9:8a:b9:ba:38:21:45:e3:e8:08:d9:0c:f4:e3:
         1f:b5:6e:dc:86:28:b3:6f:42:70:c4:70:3a:a5:b7:bd:f5:f2:
         97:90:0e:27:8a:e7:d3:86:ed:ec:16:62:9d:ff:d7:9a:1c:9c:
         ab:64:6d:99:21:08:b6:57:fa:68:0f:7b:da:30:fa:48:83:07:
         53:32:4a:e9:f9:df:9e:46:21:79:a3:8a:8c:ae:fb:d8:9d:18:
         37:bc:c1:d8:de:a2:e2:87:d6:70:fd:19:1d:79:ac:12:03:31:
         03:42:25:81:d0:c7:7e:cf:fe:ba:dd:46:3a:50:0e:2e:ef:3a:
         ef:4c:2d:62:2a:03:ee:69:c7:51:bd:d1:e5:4c:e2:cc:41:5b:
         b6:92:24:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net