Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38302e302f32322d3234203d3e203134363138.roa
File:                     34302e3138332e38302e302f32322d3234203d3e203134363138.roa (raw, json)
Hash identifier:          Ad8NhhJ1Pf7zeJS79PTIqoy1lT2QqQ52p5JV3imXXl0=
Subject key identifier:   4F:8C:E1:A2:4B:11:9A:9B:14:8A:BB:88:BD:30:5B:D3:BA:44:BE:D0
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       1862480DB5BB9FB332D860312893A7494EC224A0
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38302e302f32322d3234203d3e203134363138.roa
Signing time:             Fri 11 Apr 2025 22:51:35 +0000
ROA not before:           Fri 11 Apr 2025 22:46:35 +0000
ROA not after:            Fri 10 Apr 2026 22:51:35 +0000
asID:                     14618
IP address blocks:        40.183.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:62:48:0d:b5:bb:9f:b3:32:d8:60:31:28:93:a7:49:4e:c2:24:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr 11 22:46:35 2025 GMT
            Not After : Apr 10 22:51:35 2026 GMT
        Subject: CN=4F8CE1A24B119A9B148ABB88BD305BD3BA44BED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d2:e6:c9:21:09:73:cc:81:d1:7d:31:b5:94:
                    5e:eb:ea:42:9d:61:9a:da:65:c8:26:bc:75:d0:dd:
                    23:e0:be:0f:ea:78:0b:66:46:a0:26:6f:57:73:82:
                    0b:8b:2c:32:9a:fc:d5:b2:61:03:46:c9:93:05:d9:
                    53:17:0b:a1:18:db:53:b1:ef:38:21:24:6a:cf:4b:
                    49:74:00:3f:55:a4:5c:67:f3:ff:ba:0f:16:18:56:
                    28:2e:b6:b7:e9:37:da:64:61:8e:2f:b9:d4:81:cd:
                    62:1c:3e:4c:ff:dd:33:b9:9e:e0:6d:06:cc:3d:74:
                    3b:99:1e:6f:4a:78:89:5f:39:5b:01:5e:2d:ab:6f:
                    2f:3d:04:71:71:82:6b:67:b7:98:d7:d6:d6:db:8d:
                    84:22:1a:af:b1:b4:e7:a3:7e:b2:24:d0:7d:8b:00:
                    b8:ff:5e:49:6d:15:a6:87:63:9f:0f:02:b0:97:8b:
                    64:97:ad:51:c6:d7:58:fc:d2:52:3f:8e:2a:35:d6:
                    b1:27:a9:65:2b:91:4a:00:dc:7b:90:42:50:b7:db:
                    e2:74:22:63:2c:99:24:0b:13:bd:cd:ce:d4:ea:18:
                    b5:b3:8a:6c:bb:a1:cb:0a:b7:66:83:57:34:c1:8d:
                    39:96:d4:fd:4c:03:2b:12:cc:d8:04:64:1d:6d:30:
                    6c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8C:E1:A2:4B:11:9A:9B:14:8A:BB:88:BD:30:5B:D3:BA:44:BE:D0
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38302e302f32322d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         20:ac:40:c0:31:60:25:8b:5e:aa:11:a5:dc:44:52:e6:82:ee:
         6b:3e:c1:7b:c8:59:b2:de:a9:34:7d:d8:3d:b7:25:a7:8d:45:
         57:c7:16:c4:f7:b5:71:9f:a1:9f:34:21:7c:0d:f5:84:70:48:
         62:c1:f9:78:a8:ec:d0:7c:2f:8f:ca:75:28:2d:af:31:02:2b:
         53:30:9d:0f:2a:26:8e:c7:40:4a:05:7b:39:57:ae:47:2e:c7:
         f9:c3:ee:b2:d6:2c:9f:c3:21:de:49:ac:4d:da:9b:c6:d5:5f:
         3c:96:57:3c:05:25:df:cf:fd:a6:e3:b6:27:86:f1:3f:cd:d2:
         48:4d:45:88:7a:76:5a:14:0e:01:75:4a:d8:9d:40:72:04:0d:
         ec:7a:00:bc:78:a0:80:93:a0:b4:8f:0b:02:ea:bf:ee:c1:62:
         80:20:85:16:ec:9f:99:6f:fc:ab:90:49:26:2b:31:f5:e5:c9:
         80:09:53:0e:fa:bd:50:d3:08:39:04:e1:cb:c2:ed:77:79:40:
         2d:7a:af:df:66:c4:4f:14:08:2a:71:f9:0c:63:af:37:ca:47:
         e6:aa:7b:b6:2e:b4:20:97:aa:c6:8a:ba:27:6a:54:1a:f8:d9:
         ab:c3:05:f7:ec:3d:df:58:21:4f:ab:de:17:37:bb:de:db:68:
         2c:c5:ce:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net