Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3139342e3230312e302f32342d3234203d3e20323132323338.roa
File:                     39312e3139342e3230312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          QmL89u4GVpjwnNhG22tYRegC5W0jnub6gKRO0wvYQA0=
Subject key identifier:   09:5F:96:56:10:76:44:0B:F2:AB:EC:36:92:8D:F8:92:49:AA:53:7A
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       4943AF54FD143CFA36FF52FEBD9BEB0922B030D1
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3139342e3230312e302f32342d3234203d3e20323132323338.roa
Signing time:             Tue 08 Apr 2025 15:28:27 +0000
ROA not before:           Tue 08 Apr 2025 15:23:27 +0000
ROA not after:            Tue 07 Apr 2026 15:28:27 +0000
asID:                     212238
IP address blocks:        91.194.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:43:af:54:fd:14:3c:fa:36:ff:52:fe:bd:9b:eb:09:22:b0:30:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Apr  8 15:23:27 2025 GMT
            Not After : Apr  7 15:28:27 2026 GMT
        Subject: CN=095F96561076440BF2ABEC36928DF89249AA537A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:39:34:1b:48:c3:e9:27:2d:c1:f3:6a:07:4f:
                    b1:35:61:9d:1b:04:36:ab:7f:b4:0b:fd:da:ba:0d:
                    96:d2:47:bb:19:4e:f2:d8:6a:ff:a7:25:34:6b:fc:
                    8c:08:ec:ee:62:81:e6:c9:9d:af:cd:26:91:c8:00:
                    ae:ae:75:31:1a:68:06:7e:6e:da:c3:b8:92:13:d1:
                    de:30:a4:59:75:42:a0:a6:20:7d:76:1c:8f:fe:c9:
                    ec:65:b7:a2:c3:a6:64:2a:c6:90:26:11:03:a4:e3:
                    4e:d9:e8:4d:19:ad:11:8f:34:59:c4:d1:57:30:89:
                    a6:65:34:b8:a8:9a:a9:0e:c8:50:b6:ad:6a:27:c0:
                    aa:34:e9:50:66:70:d2:cc:9b:22:23:71:91:09:23:
                    73:9f:9a:78:fd:48:d8:1e:ff:b0:bc:e4:e0:da:8b:
                    e8:cd:8b:c7:86:51:e5:8c:ac:34:5b:6d:f9:de:17:
                    19:f2:79:9c:48:cc:d4:4d:9b:0b:7d:2d:e6:38:1d:
                    e8:0f:52:97:49:ea:40:75:19:de:d8:70:b0:1a:2c:
                    f5:42:4a:b8:13:0c:3e:34:59:a4:06:61:dd:e0:85:
                    76:7c:e7:a3:36:af:ea:a2:59:76:58:8d:8c:d7:04:
                    33:f2:fe:37:85:94:af:9d:a2:98:d6:71:56:a3:73:
                    1d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:5F:96:56:10:76:44:0B:F2:AB:EC:36:92:8D:F8:92:49:AA:53:7A
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3139342e3230312e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.194.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:26:76:ee:95:93:59:32:18:e4:3d:3e:19:48:53:55:b5:33:
         2d:76:e4:f8:8e:97:04:db:9a:8f:2e:95:a4:d8:8e:5b:be:da:
         5e:c9:d3:3c:6c:25:0f:fc:b5:b8:b1:13:8e:4b:ea:94:2e:6d:
         45:96:2e:3a:5c:6a:1b:de:7b:52:6d:75:36:d7:61:d3:57:84:
         30:89:28:1e:08:dc:9c:e1:be:64:ef:89:88:23:33:d1:3d:9e:
         bd:2e:12:b0:4f:24:a1:de:54:95:05:89:0f:6a:88:83:0d:45:
         93:71:34:b5:35:60:f1:24:84:5a:9e:e3:0c:cb:4f:90:85:77:
         4f:7c:0c:81:0d:e9:d3:a2:0d:fe:05:6a:68:66:a7:b7:16:89:
         10:38:3f:4b:6a:6d:d5:12:c5:34:cf:ba:f1:78:c7:11:34:ef:
         56:56:63:cf:2f:9c:df:ab:83:40:29:07:c1:62:f5:18:e9:ef:
         e2:6a:81:4f:a5:5c:9f:1f:74:96:75:d3:ba:a2:c4:90:a2:0a:
         40:25:00:77:bc:b7:d7:a3:d6:b0:8e:f5:b2:83:d1:8b:59:69:
         de:10:dd:f8:45:ac:af:39:00:e0:47:87:ac:29:82:fb:60:b1:
         0b:ee:08:d1:5d:3c:aa:1e:94:a9:35:ea:9f:1a:08:41:17:0d:
         52:3a:13:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:49 2025 by rpki-client on console.sobornost.net