Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS35916.roa
File:                     AS35916.roa (raw, json)
Hash identifier:          9DRUoNTrDamo35zjVIk5mR+vXOUBKWyno5FvexIgz8E=
Subject key identifier:   21:FD:F5:73:EA:CD:9D:18:A9:22:24:CB:B2:BD:1B:FE:0D:0E:AD:A1
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       07781F4A7466DD2FA5714CE83264B124561C7F11
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS35916.roa
Signing time:             Wed 02 Apr 2025 14:28:26 +0000
ROA not before:           Wed 02 Apr 2025 14:23:26 +0000
ROA not after:            Wed 01 Apr 2026 14:28:26 +0000
asID:                     35916
IP address blocks:        157.254.218.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:78:1f:4a:74:66:dd:2f:a5:71:4c:e8:32:64:b1:24:56:1c:7f:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr  2 14:23:26 2025 GMT
            Not After : Apr  1 14:28:26 2026 GMT
        Subject: CN=21FDF573EACD9D18A92224CBB2BD1BFE0D0EADA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:34:07:d8:aa:b4:d6:5a:4f:7b:91:dd:12:8f:
                    f2:ae:d3:ef:8f:73:42:60:22:5e:38:d0:b7:13:b9:
                    7e:45:7e:59:f4:fc:00:1e:e3:7b:4a:d4:52:4e:b0:
                    c7:26:60:bf:0a:5c:93:83:e4:a4:9c:56:b3:dc:a9:
                    ab:40:86:35:14:eb:76:7c:47:ac:7d:4a:df:ca:13:
                    f1:5f:1f:fc:f9:6f:93:4d:fa:05:b2:89:40:46:03:
                    4f:68:7d:71:c2:3b:35:74:66:a7:7b:8b:a7:48:47:
                    8d:9d:90:b1:60:fa:73:73:51:af:38:d6:0d:c1:91:
                    50:26:08:4a:51:0e:be:3d:4b:fa:81:52:1f:d0:62:
                    2a:f7:0f:84:f9:0a:ba:78:e0:f8:05:97:ad:fc:e3:
                    1a:5d:86:09:6b:1e:96:64:2e:80:17:bc:cb:ad:2d:
                    f6:02:e7:04:33:ef:1e:c4:97:fe:bc:81:2e:ef:8f:
                    07:8f:03:c0:0c:40:48:2e:eb:83:11:31:74:a3:d4:
                    e5:85:ec:e5:d9:e1:ce:c6:66:90:c1:27:04:bb:48:
                    5d:4a:b2:99:29:f9:b0:a3:84:38:c6:24:67:5a:04:
                    52:0c:3c:d1:7c:2f:99:90:52:3e:1a:26:c4:e7:5d:
                    a0:25:d1:4e:f0:61:07:b5:1f:99:c4:24:ee:03:04:
                    fa:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FD:F5:73:EA:CD:9D:18:A9:22:24:CB:B2:BD:1B:FE:0D:0E:AD:A1
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS35916.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:73:f5:01:8d:b8:a8:00:94:f6:df:aa:8b:09:23:94:8d:86:
         e8:f2:f5:83:20:67:3d:57:16:10:e9:3d:ca:4b:27:c1:9a:9c:
         5e:c2:4c:ff:47:ad:5f:82:97:44:79:10:c8:29:b9:b9:0e:6e:
         da:d3:44:77:de:90:40:b1:2a:c1:7a:3d:1b:75:04:b0:13:98:
         f2:e3:06:3c:ba:76:57:87:f6:1f:94:ba:5a:6d:6a:6f:d0:d1:
         16:80:ef:66:bd:86:aa:c9:f3:ef:8f:81:d6:e1:55:4b:98:84:
         fb:de:ec:ff:f1:54:63:03:b3:7e:da:3c:c0:12:6a:e0:95:15:
         2b:7c:2d:67:a0:94:de:95:1a:4c:6b:e5:b7:e4:c0:db:dd:10:
         7c:d0:02:5c:a3:49:94:56:50:18:42:64:54:a8:61:d3:8d:e9:
         0d:cc:d9:df:a1:e0:91:c1:eb:52:db:58:e3:b4:27:4b:f9:53:
         1b:ae:d6:f3:e5:d3:53:9c:dc:6c:9a:91:a0:89:6a:8b:00:59:
         16:27:eb:e3:35:79:73:8d:12:df:0a:bf:bf:ee:fb:8a:2e:4b:
         f3:aa:7c:bc:4b:1e:c7:c8:1e:ee:bc:82:90:93:2a:a2:45:6d:
         7c:20:39:d7:e4:b1:d2:83:63:4c:83:48:71:a1:af:7a:6c:54:
         82:07:ea:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net