Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS5733.roa
File:                     AS5733.roa (raw, json)
Hash identifier:          sbEFzFr/7E8YhIC+RSCzMpVsJ281bX9ucdzR5uypqjc=
Subject key identifier:   28:C8:42:81:80:2F:17:5E:99:10:9C:7F:A2:05:D6:44:9D:18:79:33
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       107EEBD4293DD863B1720A61F2089D9EEBACEDA6
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS5733.roa
Signing time:             Tue 31 Dec 2024 05:55:08 +0000
ROA not before:           Tue 31 Dec 2024 05:50:08 +0000
ROA not after:            Tue 30 Dec 2025 05:55:08 +0000
asID:                     5733
IP address blocks:        173.84.13.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:7e:eb:d4:29:3d:d8:63:b1:72:0a:61:f2:08:9d:9e:eb:ac:ed:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Dec 31 05:50:08 2024 GMT
            Not After : Dec 30 05:55:08 2025 GMT
        Subject: CN=28C84281802F175E99109C7FA205D6449D187933
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dc:b4:2e:7e:0b:02:89:d5:c2:a8:f7:72:5c:
                    63:57:63:cd:0d:54:bc:a8:f3:f7:70:8c:e0:1d:f1:
                    86:2d:2b:b1:fd:02:c6:7c:98:5a:03:99:7f:7b:a9:
                    87:59:95:c8:13:4e:ec:21:eb:0b:a5:dc:16:ad:6a:
                    65:4e:1e:d2:2d:96:3e:de:11:56:1e:70:3d:f0:d5:
                    6a:5b:a7:db:59:72:3d:f8:8c:bf:d6:98:6e:d8:66:
                    2a:f7:38:0d:17:7f:4a:2a:2c:5f:9d:16:41:d2:65:
                    d1:01:ed:57:30:22:6a:41:71:99:60:f5:68:33:54:
                    1e:10:89:61:7d:4a:48:ba:21:72:61:78:d9:e9:dc:
                    3b:99:d7:bd:e7:e2:2e:e6:1d:63:f3:60:84:d1:64:
                    78:64:45:b4:c2:e7:fe:76:90:d4:25:41:08:23:07:
                    75:67:92:62:9c:a5:f5:f0:1a:81:7e:58:44:a3:fc:
                    58:bf:9c:22:64:42:79:48:0c:bf:c6:ef:25:da:44:
                    ff:43:af:28:db:c3:fb:26:d4:31:e9:f9:0a:cc:f3:
                    cb:18:cb:66:da:b5:e2:7a:4d:c9:ad:3c:dd:82:59:
                    48:c1:7e:f2:b7:ef:1f:95:f3:a7:c5:0a:86:42:23:
                    4a:84:23:bd:09:93:55:95:36:88:a5:4f:59:b3:21:
                    dc:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C8:42:81:80:2F:17:5E:99:10:9C:7F:A2:05:D6:44:9D:18:79:33
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS5733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.84.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:0a:94:d7:6d:b6:7e:91:49:87:b2:61:50:f0:0a:a7:a8:d6:
         a5:86:f4:2f:4e:d4:f0:37:90:30:a2:47:ab:1c:39:3c:aa:94:
         0c:71:a2:7c:a9:20:91:73:4f:6a:6c:2e:f1:5d:99:03:45:72:
         ff:81:7c:62:69:18:3d:e7:28:dd:6e:f1:cf:72:f7:db:90:67:
         48:f7:78:0f:ae:0e:e9:9b:df:52:5a:29:c1:da:92:d1:d8:ee:
         34:76:a3:64:cd:6c:ea:86:e2:82:6d:44:68:88:89:f8:a8:3e:
         a1:23:48:5f:a3:09:ea:73:d5:41:99:08:05:27:29:80:67:82:
         f6:4f:54:5a:86:16:6d:5e:b7:8b:c9:f0:bd:ee:4a:a8:1c:99:
         55:49:b2:dc:d5:58:87:5d:d2:f9:43:fe:bb:e9:bc:d1:06:c2:
         74:de:1a:11:f8:7d:c1:9d:9e:78:6c:33:67:f4:13:e7:16:f4:
         85:74:6c:1f:63:d0:fe:8e:a7:e6:bb:6c:56:34:ec:dd:4a:3b:
         9b:bc:c4:fb:55:36:c4:65:2b:6d:ae:72:2d:60:1b:a6:53:6d:
         fb:ab:b7:27:eb:43:a8:0f:6d:32:b7:d3:71:e8:e3:00:a1:cc:
         e5:f4:d2:b3:d5:93:72:81:e8:9c:be:01:26:5d:e7:eb:0f:27:
         97:d3:ee:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net