Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS40534.roa
File:                     AS40534.roa (raw, json)
Hash identifier:          nQ8bDpTc9H2hXkgbJNIQpUBcmmjTV4pSfs4W+UPvqFY=
Subject key identifier:   8E:13:E5:F8:78:9F:7A:10:5C:4E:BB:14:41:A9:75:31:E7:4F:60:BC
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       5672457F60224413820AD4DB44B236C316AE6722
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS40534.roa
Signing time:             Tue 31 Dec 2024 05:55:08 +0000
ROA not before:           Tue 31 Dec 2024 05:50:08 +0000
ROA not after:            Tue 30 Dec 2025 05:55:08 +0000
asID:                     40534
IP address blocks:        50.124.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:72:45:7f:60:22:44:13:82:0a:d4:db:44:b2:36:c3:16:ae:67:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Dec 31 05:50:08 2024 GMT
            Not After : Dec 30 05:55:08 2025 GMT
        Subject: CN=8E13E5F8789F7A105C4EBB1441A97531E74F60BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e3:e1:e7:06:eb:5e:e5:bb:8c:2c:d7:8d:1a:
                    37:1f:65:26:f9:79:76:1f:ce:b9:87:1b:60:51:3f:
                    ca:4e:b7:7e:51:4e:ee:4d:e1:21:0d:2e:61:e4:e2:
                    ad:11:e8:84:40:f3:f8:63:98:f9:61:af:07:29:cb:
                    8e:0d:bc:6b:1a:f0:f9:6f:9f:5f:42:54:88:44:cf:
                    a0:35:19:d5:26:6f:82:0c:39:28:6a:79:a0:18:e1:
                    ca:a0:6b:2d:6c:48:fb:8b:1f:b9:ad:b8:c7:4b:c5:
                    b0:ee:05:40:d7:84:62:d0:dd:9c:7d:dc:ec:a0:b7:
                    b1:9e:32:0e:35:bc:48:1a:89:1d:a8:24:09:c9:96:
                    fa:77:b9:71:74:fb:ad:b8:f9:d3:c2:66:39:11:09:
                    a0:fb:9f:2e:4d:e0:2d:98:b1:f6:91:5b:f8:73:6a:
                    d5:38:81:91:19:93:eb:ea:b2:2a:33:de:9e:26:8a:
                    b5:9e:4e:2a:8d:11:35:8d:b0:a4:a3:26:07:fd:7a:
                    81:15:67:24:dc:5e:df:51:a2:9f:12:bd:d9:0f:ef:
                    cc:39:7f:65:bd:d1:f4:a1:26:39:6e:7b:c0:88:06:
                    4b:73:eb:56:00:ee:54:da:da:59:e4:78:0b:20:85:
                    13:06:0d:28:40:9c:6e:b9:0f:96:a4:4e:ea:9a:b9:
                    cb:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:13:E5:F8:78:9F:7A:10:5C:4E:BB:14:41:A9:75:31:E7:4F:60:BC
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS40534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.124.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:0c:85:e8:8d:56:f1:48:a7:2b:c2:a8:bc:1e:30:ba:1e:d6:
         61:76:0e:8e:13:70:93:dc:11:19:79:23:e2:6b:8d:68:be:e6:
         5b:6e:3e:cf:81:d3:79:4e:c8:e2:96:84:e6:ec:80:76:a6:01:
         4f:07:3a:f9:e0:0b:28:a7:eb:91:88:5a:68:65:0e:33:86:0e:
         de:46:f7:43:6c:e8:93:9c:4e:00:2d:ff:b1:3b:c2:eb:06:23:
         b1:d9:ee:af:b7:eb:b1:a4:8c:68:cf:bc:ab:0a:d8:ee:cc:ef:
         d9:5e:e0:4b:bb:30:c1:33:5d:49:31:a0:d6:19:41:e5:b0:3c:
         38:cd:c7:71:90:98:20:7a:2a:a7:71:b1:1d:ac:0a:76:2f:ce:
         a2:16:9e:6b:29:57:e1:fb:2d:64:d6:16:f1:94:93:01:fb:c8:
         71:17:5d:f6:de:8d:dc:9a:69:e4:70:5f:ff:51:56:c3:8b:d7:
         2d:5f:e1:91:9b:d3:a1:03:4e:82:d4:bf:1e:fe:2e:9e:c1:5e:
         8e:8d:52:b6:3b:1e:d8:01:47:91:c8:8d:4b:b8:94:23:28:84:
         0d:22:c2:78:d2:fa:5b:3f:a2:9a:0f:1e:3c:c3:2a:b4:53:2b:
         35:ca:ea:0f:c1:c1:eb:13:16:1e:8f:ab:e8:b4:bb:65:6d:88:
         62:8c:08:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net