Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS33185.roa
File:                     AS33185.roa (raw, json)
Hash identifier:          2yimtowE1lRpc7MjulXKEuGbUVk8bIlQNf0n8rVrJRE=
Subject key identifier:   71:AB:A8:DC:A6:0F:22:C5:ED:88:0E:07:66:07:24:D8:52:11:5B:EA
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       526CD119C26625CFF0A41590A92FCB2253D19F7F
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS33185.roa
Signing time:             Tue 01 Apr 2025 23:56:20 +0000
ROA not before:           Tue 01 Apr 2025 23:51:20 +0000
ROA not after:            Tue 31 Mar 2026 23:56:20 +0000
asID:                     33185
IP address blocks:        104.234.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6c:d1:19:c2:66:25:cf:f0:a4:15:90:a9:2f:cb:22:53:d1:9f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr  1 23:51:20 2025 GMT
            Not After : Mar 31 23:56:20 2026 GMT
        Subject: CN=71ABA8DCA60F22C5ED880E07660724D852115BEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:46:2d:59:f8:94:22:70:72:d2:9c:d9:63:
                    2a:25:2f:77:92:4b:cf:75:ec:50:03:eb:f6:76:55:
                    4d:bd:e3:09:54:c6:e8:dd:1e:16:08:51:83:a5:e1:
                    e2:2b:2a:da:fc:da:84:b1:2e:5f:44:26:b3:7f:93:
                    4f:c6:db:7e:72:cd:08:96:d5:1c:5b:e7:ed:46:9e:
                    34:b8:30:c2:c1:b6:99:06:34:e9:f4:e3:68:81:2e:
                    08:86:e0:6d:ea:0f:55:3a:b3:38:c0:0b:9a:c0:6e:
                    7e:2c:2d:4d:bc:b9:f3:61:75:d6:6b:33:fc:d1:83:
                    7d:3d:82:92:2d:fb:d0:19:66:2e:42:3d:d3:e8:40:
                    3a:25:cc:2b:c1:ac:e3:b3:f6:df:4c:6d:0d:62:98:
                    76:5a:c5:46:6c:5d:ca:7e:3c:b1:5f:63:a0:ce:82:
                    93:eb:a2:26:ab:d8:c9:dd:d6:7b:d0:67:3a:ee:3f:
                    e0:dc:ea:40:7d:54:57:32:6e:86:42:b9:e4:1b:97:
                    31:17:57:8a:e5:de:23:77:fd:f7:e1:2a:a4:82:c3:
                    a5:60:30:ba:a3:8a:a3:a1:e4:b6:48:d6:69:34:40:
                    58:4d:3a:1b:dd:87:d5:27:0c:a5:2a:4e:c5:c9:28:
                    bd:83:bc:d7:ab:e7:bb:32:ba:bf:f9:1f:32:17:ee:
                    03:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:AB:A8:DC:A6:0F:22:C5:ED:88:0E:07:66:07:24:D8:52:11:5B:EA
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS33185.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:69:6a:c8:7d:27:3d:47:1b:a9:59:fe:0e:42:6c:de:e2:e5:
         03:a0:9d:2f:27:01:6d:27:a8:12:2f:01:85:28:b5:29:da:c1:
         15:e3:78:c7:d2:62:ca:e2:3b:9b:fe:87:22:40:80:1b:f1:5e:
         5e:b3:b0:b2:e1:09:e5:0c:bf:1b:39:c6:66:cb:8f:ae:64:64:
         fb:ed:a9:0f:6a:c9:9d:bf:fc:d4:d8:00:26:98:8d:9c:ac:d7:
         09:a5:c6:6a:6e:74:f7:2f:09:1e:f4:9d:3c:a4:9d:5d:92:17:
         28:8e:f4:39:f1:fa:9e:ca:01:7d:6b:dc:93:c0:6e:18:cb:e6:
         4b:77:7d:9d:01:3c:5d:25:4b:e0:04:e9:55:5e:0d:82:44:77:
         8e:82:38:b6:66:e7:dc:6e:c2:b4:e3:a2:7d:74:6a:e0:26:d7:
         57:0f:92:33:28:07:b6:c4:9b:f7:b8:9f:07:b4:29:cf:27:b2:
         b0:df:c1:13:8f:80:12:d4:58:43:6b:10:38:43:25:e4:71:c0:
         c5:c2:c6:8b:a5:22:2c:a7:33:10:fb:3f:11:6e:8f:69:d4:9b:
         c2:27:0e:01:ff:2d:fa:11:14:aa:75:b2:0a:66:17:38:27:a5:
         88:a4:9d:c7:77:85:85:7b:a8:14:80:2d:44:95:7f:5f:19:18:
         4b:ef:33:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:09 2025 by rpki-client on console.sobornost.net