Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS31862.roa
File:                     AS31862.roa (raw, json)
Hash identifier:          Wct9Nm+B8mFmkyp6rvUrca/LA9LJ/VSruCAohZuzUeQ=
Subject key identifier:   D1:48:2C:1F:78:B4:1A:DF:C4:D1:22:1B:14:A0:18:F2:2E:2B:A0:48
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       59B0190961CCB7E12CD653BC30EB381C9890CA93
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS31862.roa
Signing time:             Tue 31 Dec 2024 05:55:09 +0000
ROA not before:           Tue 31 Dec 2024 05:50:09 +0000
ROA not after:            Tue 30 Dec 2025 05:55:09 +0000
asID:                     31862
IP address blocks:        50.49.252.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b0:19:09:61:cc:b7:e1:2c:d6:53:bc:30:eb:38:1c:98:90:ca:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Dec 31 05:50:09 2024 GMT
            Not After : Dec 30 05:55:09 2025 GMT
        Subject: CN=D1482C1F78B41ADFC4D1221B14A018F22E2BA048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3d:2a:e1:14:10:78:52:dc:58:72:ca:c3:74:
                    24:6a:bc:92:5b:39:44:91:7f:08:94:df:0a:a2:aa:
                    c0:78:b5:d7:de:c5:bd:4a:bb:21:31:a8:63:b9:94:
                    d2:20:f9:5c:f3:10:f4:34:13:e0:08:ce:86:8a:1e:
                    c4:b6:1b:56:9b:7b:91:85:9e:23:2f:94:89:20:48:
                    df:93:cd:ec:fa:3b:10:d9:1f:ea:25:8a:93:69:5b:
                    d7:4c:a6:51:69:5e:30:02:66:1e:44:6b:80:65:1a:
                    56:a2:22:46:85:f8:ed:2b:aa:5d:53:a3:a2:7d:30:
                    e6:3a:93:20:10:5c:a5:16:6d:fb:e8:29:c3:c6:10:
                    60:79:d8:87:b2:74:be:6b:91:27:fb:b2:35:ef:13:
                    df:3d:fd:02:8d:53:f5:1b:57:34:7f:bb:36:1d:33:
                    41:b1:28:81:84:0c:6d:40:6c:fe:f0:5a:fa:82:3a:
                    ea:30:3a:e6:4a:7d:54:61:42:c6:bb:a1:33:f1:40:
                    35:96:12:7e:52:4d:06:c7:59:cd:6d:84:21:b4:8e:
                    d9:15:17:6c:c0:ba:2b:f0:4f:82:48:45:7d:c9:16:
                    17:60:61:88:6a:e2:a7:0a:07:9a:d5:84:78:4a:31:
                    84:e1:c4:d9:8b:68:b4:3a:a3:19:68:45:ea:7e:57:
                    13:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:48:2C:1F:78:B4:1A:DF:C4:D1:22:1B:14:A0:18:F2:2E:2B:A0:48
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS31862.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.49.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:4e:7e:a8:4b:8a:d1:aa:91:00:fb:e3:12:59:77:d8:b1:52:
         b2:8d:94:69:f7:69:48:0f:d8:a0:21:f6:cb:ba:25:13:14:3a:
         9a:9e:27:76:01:27:7a:5e:98:2f:09:8b:25:88:46:a6:d7:34:
         68:4e:50:73:00:59:ef:0f:2d:9f:01:88:02:9d:14:59:07:1e:
         99:77:54:e2:b2:ab:f6:e2:bc:15:92:04:59:ef:e5:74:93:e1:
         82:9e:76:9f:e7:4d:44:e7:91:56:7e:7c:dc:87:c2:90:f6:6d:
         c8:dd:44:be:89:f3:08:e3:7e:af:ae:0e:37:a3:5a:a3:00:36:
         9c:b7:bb:2c:1c:d3:fd:b7:28:65:b7:06:91:47:8f:1b:35:2b:
         77:9d:28:01:27:92:5f:8b:eb:e1:ef:e0:5f:54:27:c2:a8:99:
         86:55:76:75:8d:9e:4e:c0:1d:76:1c:c9:ac:39:6f:66:7f:2c:
         0f:37:a1:08:a5:16:ab:f3:a2:02:ca:27:aa:55:6c:fe:f8:b9:
         38:70:5c:bf:f4:8a:52:ea:38:cc:94:09:ac:d5:7f:19:4d:50:
         3a:ad:0a:9f:fd:f2:11:da:88:2b:73:2a:97:a3:34:32:d1:23:
         77:40:57:c9:d3:3f:d2:60:9f:f4:c7:db:9f:73:0b:8a:16:e5:
         50:3c:e8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net