Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS14315.roa
File:                     AS14315.roa (raw, json)
Hash identifier:          ksvKxy19XIKYt9eshfMLi3x3heO7IbJzQ/THzglpZxM=
Subject key identifier:   BD:47:8B:30:E7:3B:B2:8B:C7:03:0F:72:36:82:3E:E9:CE:16:69:A6
Certificate issuer:       /CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
Certificate serial:       3673E12C6F207E42E9AFD02995E67C223BA888C0
Authority key identifier: 4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS14315.roa
Signing time:             Mon 06 May 2024 12:44:10 +0000
ROA not before:           Mon 06 May 2024 12:39:10 +0000
ROA not after:            Mon 05 May 2025 12:44:10 +0000
asID:                     14315
IP address blocks:        64.202.96.0/24 maxlen: 24
                          75.102.6.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:73:e1:2c:6f:20:7e:42:e9:af:d0:29:95:e6:7c:22:3b:a8:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9
        Validity
            Not Before: May  6 12:39:10 2024 GMT
            Not After : May  5 12:44:10 2025 GMT
        Subject: CN=BD478B30E73BB28BC7030F7236823EE9CE1669A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:16:25:c3:f6:d1:66:02:d2:e5:80:c8:23:4d:
                    1f:1a:54:f2:1e:97:1e:b5:94:1e:d7:e4:cc:16:57:
                    5f:72:08:98:e6:19:af:69:65:d6:08:4d:6e:b8:73:
                    4b:a2:95:cf:4f:42:b3:35:3c:9e:e8:7f:69:6d:d8:
                    16:e5:c4:b9:0c:4d:04:7e:22:e0:49:52:ff:95:bc:
                    e5:f9:53:79:2c:b0:7f:c7:bc:b2:52:30:3c:83:09:
                    a0:a3:7d:c5:db:49:27:de:42:bc:76:0e:f3:87:c4:
                    6b:60:8d:e1:81:30:08:29:d1:59:17:95:9c:da:2e:
                    a1:25:6b:0f:1e:92:75:7f:da:2d:07:1b:5c:71:e0:
                    f1:08:5c:11:78:23:2d:f0:69:4b:b4:3d:25:ac:5d:
                    ba:54:b1:a1:b5:4f:8d:7c:ff:aa:44:ef:79:98:fd:
                    09:ca:3e:9c:b4:04:b9:ce:06:9e:3b:33:ab:dd:e6:
                    d4:f5:ba:2a:89:93:5c:08:63:82:64:76:65:7a:73:
                    dc:c5:d0:fb:d5:34:08:10:88:44:ea:60:ee:ea:21:
                    94:3a:7c:e6:ef:2e:19:be:2c:3b:95:f6:c6:b2:02:
                    83:ab:ba:1e:48:87:8f:7b:ac:32:25:3f:46:a0:fc:
                    69:30:3a:30:e9:e1:f1:c6:e9:bd:c2:5f:fa:7a:00:
                    8e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:47:8B:30:E7:3B:B2:8B:C7:03:0F:72:36:82:3E:E9:CE:16:69:A6
            X509v3 Authority Key Identifier:
                keyid:4F:06:1F:3A:B9:86:38:28:F7:63:3E:BC:46:30:0F:9B:7E:87:7A:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/4F061F3AB9863828F7633EBC46300F9B7E877ABC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/ad9b3010-3116-464e-8c58-9586500f1701/69626c2e0b964ed5e8ba6a6f3ed0fd636cf3645d6ccb6123b9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8693f0600186c6e7fd8d3660/0/AS14315.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.202.96.0/24
                  75.102.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:58:71:d1:64:29:ec:65:5f:44:37:9f:95:50:73:3b:1d:f7:
         ea:1c:1e:2e:10:33:68:a9:55:0c:b8:39:bd:79:e0:08:bb:61:
         1b:fb:ab:d3:d6:94:74:ad:44:b3:34:45:19:da:9c:f4:4f:d1:
         c8:5f:06:83:7e:4a:7d:74:fd:8e:8c:8f:99:ca:63:ab:1b:41:
         fe:2a:81:93:52:8c:54:ba:59:70:3c:0c:80:05:4d:c6:68:82:
         73:04:98:9a:8a:89:57:61:21:37:c3:89:d9:bc:de:3a:37:c0:
         43:40:81:a9:d5:bb:d2:43:2f:05:20:7c:49:85:59:4e:fa:6b:
         52:e6:03:8d:0b:f1:10:69:4b:f5:91:6b:55:c1:4a:84:c9:d9:
         54:db:67:18:22:29:3b:1c:8d:ff:1d:5e:96:85:21:20:09:34:
         93:44:27:94:0d:4c:1a:d0:6a:21:7d:36:df:80:04:9a:9d:4e:
         52:29:06:aa:21:dd:ea:a5:01:14:51:61:c2:a9:68:0c:2c:39:
         19:80:dc:e1:ba:41:6c:bd:8c:50:52:7f:72:ea:1d:98:45:71:
         13:47:aa:b2:f5:79:ca:14:84:67:14:61:01:d8:db:24:cf:7a:
         5f:0f:fd:14:c4:a0:a1:0c:ca:c9:f5:06:1b:7f:5c:47:38:64:
         01:9f:22:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 11 08:32:15 2024 by rpki-client on console.sobornost.net