Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa
File:                     AS9304.roa (raw, json)
Hash identifier:          oaCigXHgICRpSn4OBmAC/GTJ+1B8B6H3W2rVY86QHIs=
Subject key identifier:   D4:F1:E6:E1:01:29:08:D3:71:75:0E:BE:11:5D:44:52:2C:13:A3:87
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1837984DB25BA15E3AF76119C666DE4DBED1055F
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa
Signing time:             Fri 24 Jan 2025 13:46:42 +0000
ROA not before:           Fri 24 Jan 2025 13:41:42 +0000
ROA not after:            Fri 23 Jan 2026 13:46:42 +0000
asID:                     9304
IP address blocks:        23.95.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:37:98:4d:b2:5b:a1:5e:3a:f7:61:19:c6:66:de:4d:be:d1:05:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jan 24 13:41:42 2025 GMT
            Not After : Jan 23 13:46:42 2026 GMT
        Subject: CN=D4F1E6E1012908D371750EBE115D44522C13A387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7d:2c:4a:9e:b9:d6:00:be:55:b5:14:a7:e6:
                    40:2e:59:40:a3:27:d1:28:90:da:89:22:0a:99:da:
                    28:60:03:6a:4e:2a:42:a3:5a:f0:49:d6:c4:58:e8:
                    8e:5f:c6:67:59:70:0a:f5:4f:20:e3:e9:66:6f:42:
                    62:5a:70:91:1f:9f:94:a2:2e:7f:8a:01:3d:eb:26:
                    3d:62:4b:56:3d:50:84:f6:0a:28:6c:8f:70:ab:ee:
                    43:b9:db:fe:95:30:c8:a3:46:01:74:90:93:1d:f5:
                    84:26:db:ab:c9:77:67:4e:9c:c3:a3:10:82:78:f4:
                    e3:a1:01:d6:ee:fa:88:6e:f6:77:1b:d9:1b:6f:4f:
                    d7:fe:e8:c9:8f:cd:62:7d:2e:26:6f:12:d1:ff:63:
                    d6:70:ac:67:28:25:9d:25:f7:54:fe:b4:6c:dc:0d:
                    28:b5:04:2a:69:1f:b5:95:44:3a:ac:9b:04:19:0b:
                    27:82:4e:62:57:8e:a0:05:26:9e:ec:bf:4f:6b:d8:
                    c5:1a:94:64:88:d2:74:7d:5b:02:7d:5e:8d:e8:86:
                    1e:ad:26:de:a4:ad:5d:e9:15:70:d2:4f:4f:47:9c:
                    0c:28:30:dc:26:97:8e:8c:13:a1:ae:3e:7f:f7:ff:
                    c3:36:a5:53:f3:ca:7c:34:05:87:a4:09:c9:78:11:
                    14:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:F1:E6:E1:01:29:08:D3:71:75:0E:BE:11:5D:44:52:2C:13:A3:87
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS9304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:30:14:4c:90:15:5a:28:c4:03:16:83:1c:f6:48:c1:60:8c:
         18:21:24:ef:1b:81:7b:21:e5:a4:90:14:fb:95:96:0c:47:05:
         c8:69:cb:71:6a:09:92:e0:b2:ea:a0:8d:f6:8c:30:cd:9e:89:
         9d:f3:c7:ec:cb:7f:68:20:0b:a2:8e:e6:77:7d:d8:e2:83:ed:
         dd:5f:b9:96:f7:71:36:e7:f7:2d:6d:fa:2b:cd:00:93:88:c6:
         40:d7:a4:bc:ac:89:e3:08:10:62:78:2c:24:a4:68:f2:97:f9:
         95:7f:f4:45:dd:d3:47:e3:72:8f:11:a0:eb:98:52:64:40:e9:
         94:93:fe:fb:d2:88:1b:dd:2d:ce:30:ca:f2:0d:34:5c:bd:c8:
         0b:c9:e4:c1:fc:2a:67:bd:7e:34:18:f8:68:1e:93:da:50:19:
         78:55:3d:0d:81:09:79:b9:bd:d6:80:cf:35:a2:dd:c6:8a:bc:
         d5:b0:0c:89:31:7f:06:ee:9b:93:a3:4a:b2:60:d2:08:b7:58:
         43:36:fc:70:d8:3f:30:96:80:5a:3d:0d:6c:ca:4f:8c:10:69:
         59:07:f3:41:ee:32:eb:ff:4f:8d:60:1b:78:61:0f:f1:23:7e:
         78:8d:d8:e6:44:bd:29:30:79:25:da:2b:e8:b3:fc:24:8e:cb:
         2f:de:4b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 03:29:13 2025 by rpki-client on console.sobornost.net