Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63025.roa
File:                     AS63025.roa (raw, json)
Hash identifier:          EvDw8qsCuVQxMxOVq2dsXkWtQHS0uXF15/gq2emRpSA=
Subject key identifier:   59:CD:E0:75:8F:DF:E5:8A:9A:1D:62:FE:CB:89:59:F9:99:4C:CC:19
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       7579DD794054F25573B102465096AEE336ECBD13
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63025.roa
Signing time:             Tue 08 Apr 2025 15:47:29 +0000
ROA not before:           Tue 08 Apr 2025 15:42:29 +0000
ROA not after:            Tue 07 Apr 2026 15:47:29 +0000
asID:                     63025
IP address blocks:        104.234.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:79:dd:79:40:54:f2:55:73:b1:02:46:50:96:ae:e3:36:ec:bd:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Apr  8 15:42:29 2025 GMT
            Not After : Apr  7 15:47:29 2026 GMT
        Subject: CN=59CDE0758FDFE58A9A1D62FECB8959F9994CCC19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4d:df:01:79:94:ed:13:e4:54:e0:4b:67:72:
                    fc:77:6e:24:7b:1c:b4:c2:bf:c3:e5:60:37:4e:ba:
                    35:01:39:cf:71:6d:6a:60:84:0e:e0:75:53:64:e6:
                    ab:60:75:ff:1c:c0:a7:d4:7c:fe:b4:f2:39:4f:59:
                    17:75:6a:34:60:ff:ac:66:f4:5e:c2:84:ee:df:77:
                    95:87:19:b0:ef:46:b4:fb:1c:6a:70:e4:a9:8f:e7:
                    f2:d5:c9:99:7f:0b:1d:b9:9d:b1:07:80:4c:b4:fb:
                    bf:00:9b:e9:26:17:65:bc:11:38:b1:5f:91:9c:3d:
                    47:71:8d:d4:db:e5:14:e8:3b:3b:e9:7c:4c:dc:ee:
                    05:5c:f2:6c:0b:b8:fb:f0:39:0d:f7:04:cb:7c:bf:
                    0c:51:82:8a:29:84:dc:40:a9:63:0b:a8:28:ad:63:
                    32:81:d4:d7:36:50:18:a0:fb:a3:de:42:25:70:9b:
                    e8:8c:3c:3b:10:ae:7f:89:c4:73:0c:33:7c:44:68:
                    29:11:11:a5:ea:bc:9b:1b:94:e4:76:25:13:6c:9f:
                    c5:fa:4b:de:ff:71:0a:9b:07:83:37:3d:a2:b1:07:
                    7b:52:47:06:0e:c9:4c:5a:09:af:a1:1d:a2:9b:2b:
                    e1:6d:00:d3:ae:a4:5d:4d:c9:8d:ac:53:a4:06:1b:
                    31:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:CD:E0:75:8F:DF:E5:8A:9A:1D:62:FE:CB:89:59:F9:99:4C:CC:19
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS63025.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.234.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:20:3f:a0:71:ba:20:91:63:45:d4:dd:9f:d2:29:71:42:05:
         3e:5b:84:1e:f4:82:78:e2:4d:7e:13:57:38:82:45:84:65:51:
         1e:24:36:cc:8f:3e:95:c9:f6:c5:6c:a5:b8:42:6f:1f:06:09:
         ae:ca:63:ef:a2:e3:b8:ac:c3:39:cd:0d:5e:65:2b:e9:e7:83:
         de:84:f4:50:6f:f9:7d:de:8a:88:57:26:7b:9c:0b:19:f1:6d:
         f3:5b:0a:91:a0:dd:58:bc:1d:7a:59:76:df:b4:a7:de:c3:61:
         ee:3c:10:b6:da:30:5a:dc:24:1c:0f:17:fd:da:3d:bb:bc:9d:
         a9:7c:68:c6:2c:d5:66:8e:26:4f:13:b2:0a:6c:17:fd:38:8d:
         3f:66:a2:b3:a9:de:c1:db:dc:1d:84:33:7e:ee:e9:8e:78:f1:
         17:24:bd:9e:66:a8:4b:c3:80:24:82:78:ab:5d:e6:49:17:0a:
         9b:cf:c3:47:c2:33:4a:74:a7:03:6d:d7:95:d1:55:67:2c:4d:
         6f:94:f4:57:c1:ff:1e:1e:c5:a1:02:a8:05:e9:49:09:14:da:
         e0:d9:e4:75:5d:97:5d:04:33:71:4b:17:c9:be:97:30:df:7c:
         b4:c6:12:4f:38:e5:c4:6c:3b:cb:9c:99:a5:99:7e:b5:7e:68:
         1d:4c:d4:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:09 2025 by rpki-client on console.sobornost.net