Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS63172.roa
File:                     AS63172.roa (raw, json)
Hash identifier:          wbKf4EUM1cacMV4t5Aj1Za4qKxrcnLzsBXVM7a6Jse0=
Subject key identifier:   6F:42:2D:FF:B0:33:D7:64:11:59:6A:16:3B:77:85:3E:B5:09:B3:53
Certificate issuer:       /CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
Certificate serial:       3F16DFF4660A2DC6A2E4FE504AB05E60DAD476FF
Authority key identifier: CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS63172.roa
Signing time:             Tue 31 Dec 2024 05:55:08 +0000
ROA not before:           Tue 31 Dec 2024 05:50:08 +0000
ROA not after:            Tue 30 Dec 2025 05:55:08 +0000
asID:                     63172
IP address blocks:        104.169.5.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:16:df:f4:66:0a:2d:c6:a2:e4:fe:50:4a:b0:5e:60:da:d4:76:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfe09c2077886b104a9de53bf61bcb90616abe755c93385775
        Validity
            Not Before: Dec 31 05:50:08 2024 GMT
            Not After : Dec 30 05:55:08 2025 GMT
        Subject: CN=6F422DFFB033D76411596A163B77853EB509B353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d1:df:40:72:35:bb:7c:93:f5:1c:98:55:7f:
                    86:78:09:7c:e9:6f:8b:ff:02:ce:cd:ad:e4:e3:20:
                    66:6c:ec:94:0a:c6:02:6b:24:72:2a:6c:26:0a:00:
                    5b:e9:24:42:e1:0f:f0:1d:bd:69:99:d1:e3:92:31:
                    93:a2:78:8a:ea:2a:ba:64:d2:8d:10:c4:57:86:79:
                    bd:2b:15:7a:65:ec:e3:6f:bb:59:62:01:80:7e:e2:
                    f9:1e:9a:0b:20:75:bb:b0:42:b9:69:8b:f8:43:fc:
                    f7:2d:88:cc:a9:b6:66:4b:04:cd:9e:35:cb:1b:05:
                    13:3e:d6:e9:2d:a6:fd:a6:d3:95:7c:38:33:a9:52:
                    47:0e:ce:08:ee:0f:be:72:1d:ca:95:3c:c0:e4:b7:
                    79:92:39:d7:0f:1f:bd:a4:ec:5c:26:bc:35:d1:28:
                    62:de:5c:d5:14:50:19:4c:fb:3c:02:c8:e8:30:99:
                    29:34:76:61:60:eb:ee:40:97:39:9d:7a:45:31:df:
                    4d:68:6c:aa:32:6d:e8:22:c4:ad:fb:15:96:30:f1:
                    50:7e:84:a5:04:79:d2:ea:23:6d:fd:a2:3a:e2:f8:
                    59:b0:9a:c5:fa:4f:c6:ec:16:fc:5f:88:eb:be:bd:
                    63:b5:77:c2:fd:2a:ff:b8:d6:3d:d0:e2:39:ec:32:
                    f0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:42:2D:FF:B0:33:D7:64:11:59:6A:16:3B:77:85:3E:B5:09:B3:53
            X509v3 Authority Key Identifier:
                keyid:CA:C1:1D:8E:79:F4:4C:E3:F2:E8:0B:14:69:DD:B1:93:55:8B:D2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/CAC11D8E79F44CE3F2E80B1469DDB193558BD2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/06af24e7-1c13-4430-bd79-db05f6dc0643/dfe09c2077886b104a9de53bf61bcb90616abe755c93385775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/4/AS63172.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.169.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:b4:91:7f:45:e1:af:d1:73:dd:f0:14:36:6c:be:4c:8e:fd:
         13:8f:73:8f:6f:4c:f7:f7:7e:0c:4a:22:dd:45:53:81:70:f7:
         d7:b0:8a:1a:d8:a8:e0:62:14:2a:08:5e:bb:39:4b:6e:6a:c8:
         32:3b:55:59:b2:b4:22:66:37:ce:35:0d:5b:06:17:36:a4:79:
         a4:cf:b0:b7:d6:e4:c8:0a:b3:88:ac:64:6a:02:da:ca:86:53:
         d7:0d:c9:16:2b:0a:45:34:90:5e:66:75:96:8d:5b:9e:54:fc:
         b4:46:b2:10:15:f9:9f:6d:dd:e8:f3:22:d7:ab:7a:6b:51:ef:
         da:af:26:c7:76:a3:8f:ee:8d:b8:c8:80:aa:c7:c3:b7:cc:02:
         19:6e:2f:73:cd:20:65:d0:0a:22:a8:a0:d9:af:c6:c1:f1:81:
         3d:18:f6:f5:28:bc:b2:1a:10:bb:24:d8:e9:2f:97:95:55:77:
         0c:fe:22:76:32:7f:89:cf:61:39:f4:b1:40:03:d4:c5:43:d2:
         bb:86:8b:72:bb:b0:d3:cf:00:b6:e0:e0:d6:88:55:31:27:97:
         75:5d:ae:2d:7a:31:07:4c:a2:5e:91:82:d9:7d:c8:30:c5:d2:
         53:70:48:4e:23:d1:bc:ee:4b:d2:df:d0:1a:13:60:91:96:dd:
         38:95:e4:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 23:32:35 2025 by rpki-client on console.sobornost.net