Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS20359.roa
File:                     AS20359.roa (raw, json)
Hash identifier:          m8YbU4llzbykzlNeiiVuFljoH8unuh7qJldiHGd/xtQ=
Subject key identifier:   EF:D8:BC:F8:04:30:64:3A:5E:77:37:7A:58:AB:24:5F:6A:C4:B5:5F
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       7468AEA9E10B62FC32D976781BB80305CCD63978
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS20359.roa
Signing time:             Tue 31 Dec 2024 05:55:08 +0000
ROA not before:           Tue 31 Dec 2024 05:50:08 +0000
ROA not after:            Tue 30 Dec 2025 05:55:08 +0000
asID:                     20359
IP address blocks:        50.49.254.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:68:ae:a9:e1:0b:62:fc:32:d9:76:78:1b:b8:03:05:cc:d6:39:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Dec 31 05:50:08 2024 GMT
            Not After : Dec 30 05:55:08 2025 GMT
        Subject: CN=EFD8BCF80430643A5E77377A58AB245F6AC4B55F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:ac:2c:20:b9:7e:33:ae:3b:08:47:cc:c1:
                    b6:4c:0b:1a:9b:af:6d:f7:13:67:2d:25:1a:47:02:
                    25:e1:f8:d1:b3:f4:03:cf:62:45:4b:ba:29:3b:f6:
                    11:01:72:ea:b2:dd:5b:55:7c:a9:3f:ca:b2:b8:e1:
                    f0:f1:e6:bf:de:d6:1b:e9:bd:97:c1:b7:bf:ba:16:
                    bc:16:27:57:d6:82:ca:c0:5b:36:5e:51:93:d8:2f:
                    59:35:fc:2e:fa:7b:0c:bc:15:46:c8:2e:29:13:00:
                    a9:b1:22:78:b6:c9:a5:2b:60:aa:a3:6b:c3:44:40:
                    c3:e5:42:cb:19:53:9e:a7:1f:53:2f:58:75:8d:6a:
                    95:29:8e:a7:09:49:7d:4e:23:51:eb:eb:67:c2:66:
                    e9:dc:f3:69:e4:56:c6:51:fe:db:5b:de:45:e0:c5:
                    79:12:52:e0:4e:31:2d:1b:a2:73:39:26:75:26:7e:
                    3a:e2:4b:66:8c:1f:78:5c:47:35:bd:17:6f:83:99:
                    d7:3f:2e:5f:17:e1:23:d1:d2:cc:bf:a0:9c:0e:bb:
                    9b:eb:59:9b:ec:e2:12:a2:21:3a:44:f6:6b:b6:0c:
                    20:5d:f3:0f:07:6f:89:21:5a:d9:61:1f:37:45:5e:
                    fe:0d:89:e3:dd:66:4c:52:44:21:69:8b:b3:c9:e4:
                    7d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D8:BC:F8:04:30:64:3A:5E:77:37:7A:58:AB:24:5F:6A:C4:B5:5F
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS20359.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.49.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:05:18:8f:1e:ab:31:8a:bd:3c:3e:c8:ad:23:48:67:34:13:
         9a:c6:9c:51:79:5b:8e:c9:cc:29:01:15:5e:13:20:c0:cc:cd:
         ae:04:fe:bb:9c:a4:e5:07:cb:fb:89:59:0f:40:25:d1:9d:87:
         7f:cf:c5:99:01:33:da:91:05:cc:50:86:78:44:7b:0e:65:62:
         7e:c5:de:e9:9c:71:82:71:d6:1e:96:22:b6:fd:91:54:9e:5d:
         28:81:04:67:42:c5:63:fc:a1:d5:62:c0:06:80:38:81:54:e0:
         7a:77:5d:5a:de:0e:e4:55:58:69:dd:2c:ff:aa:84:3d:98:53:
         a9:41:49:ae:8c:05:96:b3:af:c0:67:62:a9:37:d7:5e:19:c7:
         d5:50:1a:09:6a:95:d9:f8:67:ce:89:66:2c:58:88:4c:b7:a2:
         60:2c:69:5c:01:e8:ce:96:51:1f:8b:f9:c1:f6:32:1a:7b:21:
         f0:4a:ec:5e:59:49:00:f9:b9:49:f9:d8:cd:2b:fb:40:43:d2:
         8e:73:0f:bf:49:67:7b:df:50:14:16:54:4a:cb:94:aa:6c:bb:
         58:22:46:1f:8c:22:6e:1c:1f:38:e3:0d:00:65:ea:1b:53:31:
         df:0c:aa:b9:02:90:79:05:c2:13:69:24:da:f5:33:26:d5:9b:
         c1:d7:26:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net