Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS22580.roa
File:                     AS22580.roa (raw, json)
Hash identifier:          21Vvj26b3MpEcEet7tsZzhuYh845PzIQOs3YoHF8wuc=
Subject key identifier:   18:05:F7:A1:5A:88:05:48:C2:FB:97:C1:8E:9E:42:07:F8:F6:7F:2F
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       677AE01A780A5322666A55FA8F92B3E955AB50EF
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS22580.roa
Signing time:             Wed 18 Dec 2024 05:55:08 +0000
ROA not before:           Wed 18 Dec 2024 05:50:08 +0000
ROA not after:            Wed 17 Dec 2025 05:55:08 +0000
asID:                     22580
IP address blocks:        199.224.104.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7a:e0:1a:78:0a:53:22:66:6a:55:fa:8f:92:b3:e9:55:ab:50:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Dec 18 05:50:08 2024 GMT
            Not After : Dec 17 05:55:08 2025 GMT
        Subject: CN=1805F7A15A880548C2FB97C18E9E4207F8F67F2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e9:0c:5a:dc:00:f9:9f:90:84:0b:a7:4d:80:
                    da:3c:ec:8c:03:4a:df:8d:ee:5b:84:23:64:60:a4:
                    ff:cb:8b:b5:f8:9d:af:e2:b9:69:14:21:87:7a:ff:
                    8d:f9:11:06:69:10:41:7e:4c:08:e8:cb:6f:9a:14:
                    c2:0e:d5:ef:0e:26:69:65:bf:2d:35:40:cf:ab:c0:
                    13:4e:04:ba:86:bf:e3:0f:44:f8:81:5b:1a:08:03:
                    8c:6f:cb:bd:43:38:a2:0c:5d:ef:0a:1b:ea:c8:1c:
                    1e:be:08:73:45:f4:aa:96:5e:bb:ea:ae:72:b6:2c:
                    b3:38:27:33:fb:64:3a:4e:fa:71:ab:06:82:11:c6:
                    98:ee:03:d1:63:90:ce:43:4c:9b:db:b2:49:c4:0d:
                    e7:24:98:ef:b9:7b:30:8c:3d:cd:5c:f6:d6:7d:d5:
                    a9:b7:aa:8f:49:f1:a9:e6:30:b9:bd:0c:b7:8c:ba:
                    33:4b:61:4a:05:ca:27:eb:b1:2b:81:e4:0a:9d:7d:
                    77:eb:b7:f5:be:5a:a4:3b:dd:96:0d:2d:d0:20:03:
                    78:25:d5:05:55:71:84:8f:c1:19:4a:0f:67:f5:ce:
                    ba:db:b7:32:ac:c1:f0:83:d4:f0:26:30:bb:05:ff:
                    2a:44:68:33:4c:55:a5:86:98:c0:0b:9e:57:bd:aa:
                    b3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:05:F7:A1:5A:88:05:48:C2:FB:97:C1:8E:9E:42:07:F8:F6:7F:2F
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS22580.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.224.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:dd:f2:9f:9b:5d:c6:25:6c:54:3b:67:8f:7c:e4:a2:5b:00:
         49:f8:d0:36:93:05:6c:6d:93:d6:ea:f9:db:b4:60:98:8e:a9:
         5d:18:8f:06:8d:43:54:8e:cb:43:3d:36:67:6b:02:40:ce:53:
         99:e1:b6:91:0d:82:f2:a8:4d:95:ce:61:4e:b0:e2:9c:3c:bc:
         eb:ed:57:80:d3:b1:99:3e:8f:c7:04:db:a6:3e:55:3d:aa:26:
         b4:49:a2:83:13:6d:d6:6a:3d:c8:e2:56:3f:e9:a6:44:a7:97:
         5d:2b:03:2e:9d:7b:58:a4:f5:3a:f5:ce:36:6d:36:90:6c:5b:
         92:1c:a0:69:3f:98:72:58:c0:ae:e3:b6:24:db:df:f5:0f:8d:
         bc:89:a2:5b:23:47:21:14:40:86:a5:70:df:57:c6:52:50:fd:
         d0:c0:d4:e2:9f:a9:aa:f1:b1:20:57:06:1c:54:28:97:5b:56:
         02:36:7f:f6:9a:8f:e3:ff:60:3f:74:6b:da:9f:af:9b:35:6a:
         44:57:85:a4:ea:b2:db:75:4f:0e:07:bf:e1:0d:b8:66:3f:85:
         e9:9c:0b:66:57:f1:e1:f8:25:14:f0:e0:32:14:ef:c9:7c:5d:
         99:de:9f:19:fb:18:2d:e2:86:f5:6e:05:85:27:a5:22:fe:58:
         d1:55:76:d4
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUZ3rgGngKUyJmalX6j5Kz6VWrUO8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZGZlMDljMjA3Nzg4NmIxMDRhOWRlNTNiZjYxYmNiOTA2
MTZhYmU3NTVjOTMzODU3NzUwHhcNMjQxMjE4MDU1MDA4WhcNMjUxMjE3MDU1NTA4
WjAzMTEwLwYDVQQDEygxODA1RjdBMTVBODgwNTQ4QzJGQjk3QzE4RTlFNDIwN0Y4
RjY3RjJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+kMWtwA+Z+Q
hAunTYDaPOyMA0rfje5bhCNkYKT/y4u1+J2v4rlpFCGHev+N+REGaRBBfkwI6Mtv
mhTCDtXvDiZpZb8tNUDPq8ATTgS6hr/jD0T4gVsaCAOMb8u9QziiDF3vChvqyBwe
vghzRfSqll676q5ytiyzOCcz+2Q6TvpxqwaCEcaY7gPRY5DOQ0yb27JJxA3nJJjv
uXswjD3NXPbWfdWpt6qPSfGp5jC5vQy3jLozS2FKBcon67ErgeQKnX1367f1vlqk
O92WDS3QIAN4JdUFVXGEj8EZSg9n9c6627cyrMHwg9TwJjC7Bf8qRGgzTFWlhpjA
C55XvaqzXwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFBgF96FaiAVIwvuXwY6eQgf4
9n8vMB8GA1UdIwQYMBaAFMrBHY559Ezj8ugLFGndsZNVi9L5MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzQv
Q0FDMTFEOEU3OUY0NENFM0YyRTgwQjE0NjlEREIxOTM1NThCRDJGOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzA2YWYyNGU3LTFjMTMtNDQzMC1iZDc5LWRiMDVmNmRjMDY0My9kZmUw
OWMyMDc3ODg2YjEwNGE5ZGU1M2JmNjFiY2I5MDYxNmFiZTc1NWM5MzM4NTc3NS5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4NzI4OTU3ODAxODczMmE5MGEy
ZjA5N2YvNC9BUzIyNTgwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+BoMA0GCSqGSIb3DQEBCwUAA4IB
AQCW3fKfm13GJWxUO2ePfOSiWwBJ+NA2kwVsbZPW6vnbtGCYjqldGI8GjUNUjstD
PTZnawJAzlOZ4baRDYLyqE2VzmFOsOKcPLzr7VeA07GZPo/HBNumPlU9qia0SaKD
E23Waj3I4lY/6aZEp5ddKwMunXtYpPU69c42bTaQbFuSHKBpP5hyWMCu47Yk29/1
D428iaJbI0chFECGpXDfV8ZSUP3QwNTin6mq8bEgVwYcVCiXW1YCNn/2mo/j/2A/
dGvan6+bNWpEV4Wk6rLbdU8OB7/hDbhmP4XpnAtmV/Hh+CUU8OAyFO/JfF2Z3p8Z
+xgt4ob1bgWFJ6Ui/ljRVXbU
-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net