Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS395645.roa
File:                     AS395645.roa (raw, json)
Hash identifier:          7vJn2vsmiOVcHWTGZxHJkFD2jDe4ZuCy/Ah8CkXB+sA=
Subject key identifier:   6D:18:C1:FE:B6:8E:AF:42:25:E6:4D:A2:7C:B0:CF:8F:59:DE:64:85
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       4771B58EEA37FE8B56AC63D39C91D8A7A5638734
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS395645.roa
Signing time:             Tue 14 Jan 2025 06:55:11 +0000
ROA not before:           Tue 14 Jan 2025 06:50:11 +0000
ROA not after:            Tue 13 Jan 2026 06:55:11 +0000
asID:                     395645
IP address blocks:        184.14.174.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:71:b5:8e:ea:37:fe:8b:56:ac:63:d3:9c:91:d8:a7:a5:63:87:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Jan 14 06:50:11 2025 GMT
            Not After : Jan 13 06:55:11 2026 GMT
        Subject: CN=6D18C1FEB68EAF4225E64DA27CB0CF8F59DE6485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:54:e1:19:05:86:73:7d:2e:f8:96:17:88:9d:
                    f2:6d:b8:d0:f2:02:69:e9:23:3d:a9:09:3e:15:7b:
                    ff:dc:39:80:02:02:f6:44:11:08:8d:e0:9d:66:b7:
                    cc:08:ad:aa:c9:9d:86:dc:f2:5d:b0:ed:e2:33:99:
                    27:b3:b6:b0:67:61:51:ca:c7:e4:2c:2a:e2:d6:16:
                    2f:71:b9:4a:d5:44:27:ec:26:e7:c3:ed:d3:c0:ba:
                    94:b3:9c:bc:18:e2:3a:5a:d5:1c:fe:b6:76:5a:33:
                    9a:4c:ca:52:e1:78:32:de:10:65:b7:5a:dc:73:4b:
                    ad:86:ee:86:1e:eb:7e:cc:52:05:7c:ea:f4:74:b0:
                    16:23:b6:8a:c3:e3:10:0c:91:5c:a9:59:21:b0:c3:
                    a2:35:15:52:75:35:ce:dc:1f:35:01:74:80:61:e3:
                    e3:9f:20:56:89:bc:51:e5:05:39:8e:41:49:dd:66:
                    f8:51:23:72:6c:05:1f:55:0b:8c:bd:df:20:1e:c0:
                    bd:a5:64:ab:a3:dc:3e:28:a8:33:69:ce:fa:2b:c9:
                    37:6b:43:18:c0:c7:ac:8d:40:13:ae:17:f4:07:cf:
                    f4:26:c3:03:c9:10:7a:fb:21:54:30:21:e9:dd:09:
                    9d:67:fa:16:9f:43:ba:7d:6f:42:d4:9c:51:82:a9:
                    81:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:18:C1:FE:B6:8E:AF:42:25:E6:4D:A2:7C:B0:CF:8F:59:DE:64:85
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS395645.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.14.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:f0:38:c3:d2:f1:d6:59:9c:54:aa:3e:01:a7:bc:6c:cc:2a:
         9c:4f:7c:82:95:b8:2d:3c:82:14:14:ba:65:99:e0:8f:7b:fe:
         29:b2:ad:1c:39:92:6a:40:69:00:59:81:3d:35:93:1f:94:e9:
         e5:1a:7e:f8:ea:41:da:fc:2c:77:8f:0a:12:1d:b5:36:ec:1e:
         31:60:59:eb:45:47:64:0d:37:8f:bd:e2:e9:a4:18:39:9f:7e:
         14:63:4a:04:09:55:99:9a:84:00:ef:fc:12:c7:6e:8d:e2:83:
         df:13:ba:eb:1a:b4:75:e0:6e:5c:17:e8:3c:8a:54:10:30:25:
         78:7f:d2:b3:08:b8:96:96:3b:99:14:ac:b5:16:bb:02:d9:41:
         d5:f1:9c:9f:b9:5a:cf:f6:bf:fa:89:74:ca:32:74:28:7d:d1:
         5e:c9:d0:a4:d1:9d:67:3b:e5:8c:4a:8e:25:5b:42:45:d4:e4:
         87:5c:b2:27:d4:58:f4:33:a0:50:98:85:05:f9:f8:57:26:a4:
         2f:11:1f:73:05:35:52:39:76:fe:b4:6c:0c:36:86:c5:ea:f0:
         d6:a5:b7:1f:ec:8a:ec:72:9c:86:f6:27:4f:89:87:c9:22:bb:
         33:8f:0d:50:c7:6e:d9:5e:96:dd:18:57:64:c5:eb:23:07:49:
         fc:f6:2f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----