Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS54603.roa
File:                     AS54603.roa (raw, json)
Hash identifier:          xJdYqFiEzMhankCbWiqa99WZNXhMJdVL3C5CGEe2WxY=
Subject key identifier:   C7:2F:AA:D9:C3:B7:58:F1:43:60:99:3C:35:FC:88:C4:61:79:4F:FC
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       0827FC68F404700F6384083C5D49CDFBFE47E238
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS54603.roa
Signing time:             Tue 31 Dec 2024 05:55:08 +0000
ROA not before:           Tue 31 Dec 2024 05:50:08 +0000
ROA not after:            Tue 30 Dec 2025 05:55:08 +0000
asID:                     54603
IP address blocks:        74.39.145.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:27:fc:68:f4:04:70:0f:63:84:08:3c:5d:49:cd:fb:fe:47:e2:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Dec 31 05:50:08 2024 GMT
            Not After : Dec 30 05:55:08 2025 GMT
        Subject: CN=C72FAAD9C3B758F14360993C35FC88C461794FFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:39:17:51:18:8d:b5:ab:cb:5e:6b:2c:32:3e:
                    8c:1d:6a:e3:b5:d1:d9:a8:16:7e:d5:71:6a:ff:eb:
                    a6:da:ef:c2:4d:b2:89:48:89:c7:5b:b3:dc:c5:62:
                    0f:09:e3:39:88:1d:46:7e:22:31:52:a8:39:54:52:
                    4f:dd:87:53:97:d0:eb:5a:6f:f5:75:46:4c:87:71:
                    85:1e:39:5c:66:ac:73:28:6a:c5:87:59:c1:dc:01:
                    3b:bd:dc:bb:cb:04:70:de:12:10:cb:d9:00:9e:90:
                    76:5d:80:e5:ba:6f:8d:6a:b2:e8:5a:d9:d4:43:a4:
                    05:9c:41:f3:9c:3b:bb:38:68:ce:d0:d7:05:0a:83:
                    93:2e:59:0a:10:9e:ac:58:2b:0e:d6:5b:af:0b:7c:
                    ac:70:52:fe:44:ba:a6:32:10:a1:ec:6a:46:e3:ae:
                    3c:ba:18:c4:ff:69:08:b9:6a:e7:f1:bc:5f:88:a2:
                    34:c0:17:de:e5:b2:f2:50:6f:e5:44:d3:8b:bd:36:
                    b8:85:2b:f5:9b:38:f4:d6:33:a0:82:93:51:12:26:
                    c1:54:5e:4a:77:c4:84:bd:61:56:55:e7:9a:54:76:
                    57:a0:1d:71:85:69:04:90:b4:ff:21:e8:75:ca:07:
                    2f:f3:bc:2c:30:be:9e:ee:5f:8d:f2:80:bc:f5:ca:
                    38:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:2F:AA:D9:C3:B7:58:F1:43:60:99:3C:35:FC:88:C4:61:79:4F:FC
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS54603.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.39.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:16:7f:d8:bd:20:e5:f7:6a:62:69:b2:ce:3f:87:3b:9d:62:
         af:a2:3a:00:65:f6:d4:50:15:c3:e1:b1:fa:65:fc:c7:d2:40:
         45:24:31:49:36:46:9d:a6:63:f4:54:cb:ab:a9:bf:7e:80:84:
         e0:cd:a2:ce:ae:90:63:36:a4:92:08:be:de:3c:ff:ff:2a:41:
         c0:f1:cb:a3:05:76:ea:a8:4b:22:0e:9d:82:35:76:4e:74:d8:
         7c:a3:0a:15:6c:de:3f:dd:bd:b3:2e:76:24:89:1d:38:52:77:
         54:d6:e6:4d:ca:53:e8:5c:b5:91:ec:54:5e:31:dd:6c:f9:83:
         63:6a:07:a0:e7:da:26:e5:4f:93:cb:1c:e0:2e:bb:96:6f:b8:
         0b:a5:a9:75:a6:ab:72:b4:59:e2:f3:2d:ca:af:30:ab:7b:c5:
         b9:90:ca:e9:0c:34:e9:cb:a1:fc:c7:a5:41:ac:42:9c:5b:2c:
         fe:b3:3e:d0:ea:68:22:d0:24:f6:4c:3d:67:ae:b4:28:41:8e:
         6c:5d:2c:6c:8f:4a:23:3f:da:61:55:c9:02:77:af:60:f5:09:
         9d:9f:99:ee:7a:f2:41:fe:37:29:ba:92:63:67:7e:68:bd:54:
         a7:c2:68:bc:31:a6:d7:69:3b:ad:33:97:82:f5:32:2f:de:21:
         97:6b:c5:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net