Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38342e302f32322d3234203d3e20383334.roa
File:                     34302e3138332e38342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          JBKtAT7CEffNLUdpW5mCjvkMjBAeLJ05Fbp+1mgitHk=
Subject key identifier:   DA:E3:03:9F:13:06:81:87:74:98:D1:DF:9C:CC:81:09:0A:9F:F0:D9
Certificate issuer:       /CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
Certificate serial:       1630666BC55003C6BFE9871ECF57B3A1BD3705E5
Authority key identifier: 27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38342e302f32322d3234203d3e20383334.roa
Signing time:             Wed 09 Apr 2025 21:39:00 +0000
ROA not before:           Wed 09 Apr 2025 21:34:00 +0000
ROA not after:            Wed 08 Apr 2026 21:39:00 +0000
asID:                     834
IP address blocks:        40.183.84.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:30:66:6b:c5:50:03:c6:bf:e9:87:1e:cf:57:b3:a1:bd:37:05:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e
        Validity
            Not Before: Apr  9 21:34:00 2025 GMT
            Not After : Apr  8 21:39:00 2026 GMT
        Subject: CN=DAE3039F130681877498D1DF9CCC81090A9FF0D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:89:a3:9a:f1:8b:8d:ed:e7:ea:2d:35:cd:48:
                    d9:fa:77:66:af:b5:df:e2:c7:fc:c9:19:92:f8:53:
                    b5:6a:06:50:14:f1:c8:af:33:1d:6d:54:54:0a:16:
                    d9:8a:a7:dd:35:58:a7:1f:6b:25:37:eb:1f:f3:d8:
                    99:bd:d1:78:8a:97:b2:6a:fe:34:c8:19:6d:90:39:
                    9a:28:f9:a9:0a:0e:7f:c9:1a:51:a1:fe:49:e1:59:
                    51:8e:e5:7b:22:d6:b5:ab:34:f5:dc:64:c8:d4:aa:
                    0c:ee:6c:6c:7a:de:b6:5f:22:74:42:fc:90:7f:3c:
                    c9:d0:a4:de:03:09:8d:3d:c8:36:e7:5f:1e:d4:ab:
                    a4:20:0f:95:40:d6:f2:8d:db:65:51:81:a5:9c:80:
                    f1:de:75:58:2f:70:78:47:ef:a8:71:d5:9a:c9:76:
                    c1:bb:3f:1d:d1:a4:9a:55:e9:22:e3:6d:e8:87:04:
                    2d:da:9e:10:4f:92:92:86:df:50:da:26:d4:dd:f6:
                    2e:78:4b:7b:b8:36:a6:9c:ee:74:68:90:94:8a:a3:
                    17:06:33:30:0a:5c:ab:ff:09:b5:54:c7:ba:93:a3:
                    46:cd:82:2c:05:08:25:f7:29:d1:92:a3:7c:17:84:
                    20:cc:b6:66:d9:a9:d1:87:5a:cc:05:59:9c:2f:42:
                    2d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E3:03:9F:13:06:81:87:74:98:D1:DF:9C:CC:81:09:0A:9F:F0:D9
            X509v3 Authority Key Identifier:
                keyid:27:8A:E8:CA:B8:DB:6B:DD:82:D7:5E:DD:6D:85:0D:19:20:0D:1F:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/278AE8CAB8DB6BDD82D75EDD6D850D19200D1F93.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2a1354c7-abca-41b6-8b21-4e35a8d9c2b4/8981204b93413540f7d5b86f0f9e74f1daade31df0db0f388e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f753dc64119d/5/34302e3138332e38342e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  40.183.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:57:3d:c6:55:cf:d6:70:d8:7d:a3:85:dc:ee:44:3c:14:bb:
         ac:25:90:e6:d4:36:9b:9f:93:54:17:af:c8:08:bb:aa:bb:ad:
         c4:56:92:84:c0:10:f7:02:1a:77:05:87:31:e5:09:8d:97:73:
         97:ad:f2:ff:8f:dc:2a:c3:bf:bb:10:f4:42:c4:27:7c:55:0c:
         d4:2d:b3:a7:7b:b5:82:a8:66:44:9e:08:78:50:24:74:12:eb:
         24:d8:e8:c1:06:dc:06:6d:d0:5f:db:a7:6b:67:93:28:f5:23:
         bf:06:0f:8a:ce:7e:14:21:c5:7f:73:4c:1d:9e:89:d3:29:0b:
         31:54:d7:6c:87:8d:65:13:92:b4:3f:c8:d3:b4:55:d7:b8:0b:
         70:b7:05:df:70:fa:49:90:8c:5d:5f:2f:90:1c:c9:02:29:6d:
         1f:5a:9d:f5:d3:a3:d1:ee:1f:11:79:32:bd:9c:36:00:ef:69:
         93:62:da:1e:9e:cc:b1:05:ba:dd:09:a2:93:bd:1f:e7:ac:1c:
         d5:5b:5f:5c:ba:23:d5:71:8f:1d:56:35:cd:51:dc:d6:f6:e6:
         55:3d:1e:cc:fc:36:fa:55:27:07:45:b4:d8:3b:62:11:d2:ba:
         aa:f4:81:00:db:1a:a6:4c:ae:3b:ad:1a:c0:c3:d6:b3:80:1e:
         bf:1f:3b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net