Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          Xx9Mv2cvVivmaBUHLgW249AhNA0aHcfanpSGHauEJMc=
Subject key identifier:   88:E4:26:31:9A:96:6D:2F:21:37:C7:63:1D:F8:D6:E3:FB:E9:CC:05
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       41CCBF59805C3910959D3FF838FBC8331BCD71D9
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa
Signing time:             Thu 03 Apr 2025 22:49:19 +0000
ROA not before:           Thu 03 Apr 2025 22:44:19 +0000
ROA not after:            Thu 02 Apr 2026 22:49:19 +0000
asID:                     20473
IP address blocks:        64.50.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:cc:bf:59:80:5c:39:10:95:9d:3f:f8:38:fb:c8:33:1b:cd:71:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Apr  3 22:44:19 2025 GMT
            Not After : Apr  2 22:49:19 2026 GMT
        Subject: CN=88E426319A966D2F2137C7631DF8D6E3FBE9CC05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:3b:7b:f3:13:56:aa:db:c5:77:1a:cd:01:0c:
                    c1:5d:70:9d:e4:a7:28:99:38:4f:c0:0b:72:59:ae:
                    b1:ef:8b:1e:96:72:d6:16:67:f1:0f:1f:eb:22:c6:
                    42:b1:66:d1:f9:f3:f3:f8:68:d3:9f:3f:55:a8:7b:
                    bc:1b:0a:b7:da:ae:9f:36:39:8a:18:0b:85:0d:ad:
                    db:f7:e7:1b:07:60:64:5f:d2:95:05:55:b3:85:97:
                    ea:38:bc:1c:12:e7:66:84:95:9e:42:9f:e7:e2:e5:
                    94:5b:7a:7c:c3:ab:21:3b:60:4a:f7:8a:fb:ce:fa:
                    0a:66:93:ea:26:4f:1c:63:77:6f:5e:af:26:cf:b3:
                    93:f8:84:93:fb:d2:b4:2e:f9:3a:a3:29:00:6d:e0:
                    69:f5:82:22:18:e1:fd:b0:1f:e7:69:d7:0c:9a:04:
                    57:36:3a:95:13:48:0f:a4:68:1f:41:7a:5f:b5:df:
                    df:5c:47:41:a1:d8:61:7a:e0:e8:f1:6d:b5:47:b4:
                    43:f1:6f:01:f5:96:1c:23:ff:ed:11:4d:8d:f2:46:
                    b8:b0:6b:83:7e:51:75:ad:39:84:0b:94:e9:09:36:
                    fe:95:a1:3d:ed:37:22:54:40:6b:da:0e:58:dc:fe:
                    47:f8:0d:96:8c:16:a7:31:a5:3d:59:24:41:e3:d4:
                    9d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:E4:26:31:9A:96:6D:2F:21:37:C7:63:1D:F8:D6:E3:FB:E9:CC:05
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:46:74:13:a3:fd:10:0c:1b:f1:f1:25:80:49:b7:02:c8:de:
         5c:4e:ff:6b:72:a1:9d:01:5b:be:09:1c:d6:4c:1f:fe:1f:aa:
         e2:5f:df:06:0a:75:1c:54:0a:78:60:1b:8e:94:c7:94:ec:be:
         45:87:1d:9b:2f:50:26:4e:0a:f0:01:ac:0e:91:93:37:0f:34:
         b9:c1:c5:85:5c:4a:b8:f0:50:cb:49:40:0e:69:e8:8f:9a:fd:
         28:d9:ff:bb:51:85:4f:28:0c:06:8b:3c:71:16:bf:41:a1:50:
         90:ff:a1:9d:04:e4:a8:bc:65:24:01:bd:10:03:da:2c:0b:f9:
         f5:bc:11:88:8a:65:60:ae:e4:cf:68:f3:33:dd:89:65:7d:47:
         15:63:65:42:57:ba:5f:02:e8:a0:d7:81:fb:b9:07:4a:10:5f:
         58:7a:72:1a:cc:c6:ee:55:e4:0b:c9:9f:e3:d9:c9:89:53:36:
         c6:65:22:f2:0b:c7:49:1a:cd:3b:46:fc:f4:42:a2:44:7d:2e:
         00:e4:ad:3f:d9:03:85:ed:38:d1:61:7e:58:b0:89:6b:2c:40:
         1b:9e:7b:3f:60:21:b9:00:46:f5:fb:a4:25:b2:3e:6f:c5:fa:
         68:9d:bc:b1:2e:81:89:b3:07:41:e6:d8:e4:8a:b2:32:50:48:
         cd:c0:a7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:26:49 2025 by rpki-client on console.sobornost.net