Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38302e302f32322d3234203d3e203136353039.roa
File:                     34302e3138332e38302e302f32322d3234203d3e203136353039.roa (raw, json)
Hash identifier:          ijOiRMy7lHvpleSiXx4g2sKdc3iZ/nYC1TvejH6RVYk=
Subject key identifier:   C9:11:A1:A9:55:19:E0:29:6C:12:EC:71:54:D6:DF:D4:5B:5F:FB:6B
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       73FA325CAB4E6E7A153C403315A18B967A759977
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38302e302f32322d3234203d3e203136353039.roa
Signing time:             Fri 11 Apr 2025 22:51:35 +0000
ROA not before:           Fri 11 Apr 2025 22:46:35 +0000
ROA not after:            Fri 10 Apr 2026 22:51:35 +0000
asID:                     16509
IP address blocks:        40.183.80.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:fa:32:5c:ab:4e:6e:7a:15:3c:40:33:15:a1:8b:96:7a:75:99:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr 11 22:46:35 2025 GMT
            Not After : Apr 10 22:51:35 2026 GMT
        Subject: CN=C911A1A95519E0296C12EC7154D6DFD45B5FFB6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:80:d4:0e:ab:db:9e:f1:6f:9d:e9:59:c2:65:
                    11:cf:64:25:a6:f3:fd:19:a2:55:a0:99:0d:39:a5:
                    3e:20:2e:04:19:45:3e:38:c4:f0:c0:d5:51:35:36:
                    c9:7a:c3:c3:84:cc:7a:91:8a:26:7d:85:79:4c:f9:
                    29:41:c1:1a:3c:94:3e:b4:03:d6:fe:ef:cc:72:1b:
                    c3:c6:b7:d3:12:4d:96:b7:c9:8e:6c:0d:5a:51:8d:
                    f2:20:9d:80:51:b8:48:76:4f:57:87:e7:a1:27:ec:
                    55:56:3e:2c:70:63:aa:4f:e1:eb:b4:32:14:a0:d1:
                    26:15:d6:70:8c:58:34:f9:f8:85:73:60:12:9e:be:
                    4f:4f:9a:ba:bb:54:4b:a2:2c:17:39:6c:23:61:8e:
                    7e:93:36:12:51:9e:26:29:b2:7a:e9:e5:2e:06:4f:
                    a1:4b:ae:0b:73:f3:a5:ac:d8:f8:41:ee:47:3e:c4:
                    90:a4:47:55:58:25:60:97:09:9a:e8:92:21:2c:09:
                    04:15:8f:38:af:d3:cc:bb:4e:cb:e8:0c:8d:62:64:
                    c8:26:04:4e:23:04:99:3e:71:c1:13:d0:e8:f9:ec:
                    e7:f6:df:7f:0e:91:b9:45:9a:69:26:a6:ba:e0:2f:
                    d5:35:18:3d:a7:33:47:39:ce:c7:97:f1:0d:2f:55:
                    91:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:11:A1:A9:55:19:E0:29:6C:12:EC:71:54:D6:DF:D4:5B:5F:FB:6B
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38302e302f32322d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         58:29:f4:11:56:d5:5a:b7:60:8a:d8:87:da:04:68:18:77:01:
         be:89:dd:5d:24:3c:cd:dd:49:10:47:dc:09:ad:22:56:cb:a5:
         05:65:28:bd:20:26:a3:42:63:d6:49:4a:e6:9f:f4:87:63:40:
         b1:2e:8b:87:92:16:aa:1a:24:2f:62:86:ff:f4:86:7a:77:52:
         f0:fe:4f:2d:c9:46:bf:6d:79:a1:d0:2a:16:21:81:28:f2:60:
         90:52:65:33:c2:3a:39:55:20:7e:a0:6c:e9:ea:ef:14:bd:81:
         fc:23:00:1a:a8:94:39:d9:ec:53:ea:ec:e7:51:1f:0b:05:33:
         60:b3:42:c2:e9:d2:b7:7b:07:64:38:9b:37:ba:2f:89:38:a3:
         70:2d:be:34:4a:5d:4b:2a:e1:39:85:73:3e:ee:7b:ab:18:ae:
         75:a2:2c:d2:3c:79:b1:a5:f6:22:69:ad:8e:b1:de:04:d2:a9:
         41:9e:00:e1:04:a1:23:cd:51:c2:4e:86:75:07:fd:b2:0f:0f:
         c6:94:8c:af:7b:71:b8:81:a9:d8:03:5c:35:37:50:ed:4f:04:
         69:4e:33:17:58:42:7f:00:3e:07:15:fb:81:0a:7f:52:89:08:
         72:1c:42:16:f4:d4:48:95:d5:32:c9:a9:f6:85:a4:a4:61:3b:
         ae:a2:2d:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net