Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS577.roa
File:                     AS577.roa (raw, json)
Hash identifier:          2YYs6Z+JvzTXO2XKLD5xvYAc82D1lHMab3/mUGmJ01o=
Subject key identifier:   10:7B:9E:17:11:2F:08:2D:86:CB:80:2A:DE:60:D7:FA:C2:20:C6:58
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       7E631F91A7E26CACDC5201DC6C4D084101EA5B53
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS577.roa
Signing time:             Sun 13 Apr 2025 00:28:29 +0000
ROA not before:           Sun 13 Apr 2025 00:23:29 +0000
ROA not after:            Sun 12 Apr 2026 00:28:29 +0000
asID:                     577
IP address blocks:        157.254.49.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:63:1f:91:a7:e2:6c:ac:dc:52:01:dc:6c:4d:08:41:01:ea:5b:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Apr 13 00:23:29 2025 GMT
            Not After : Apr 12 00:28:29 2026 GMT
        Subject: CN=107B9E17112F082D86CB802ADE60D7FAC220C658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ca:35:e2:8e:3f:36:09:f2:ff:0b:f4:46:43:
                    03:4e:75:80:8d:fd:c1:62:f1:60:75:f6:84:d0:82:
                    e5:38:e9:10:1c:1f:21:a8:3b:e2:9b:cb:d1:6e:c0:
                    e3:97:1f:78:af:26:ed:a6:50:f9:a7:89:18:e7:e8:
                    66:34:b7:58:d1:54:99:1f:52:70:96:cb:de:27:12:
                    7f:a8:3e:4e:db:bf:e5:14:27:55:d4:f4:8d:8c:a3:
                    8f:50:f8:b0:11:13:39:e7:6c:88:79:93:23:ac:5b:
                    c8:6a:c4:ba:55:4a:1d:09:75:eb:a5:c9:eb:ab:49:
                    05:a2:5b:c8:3b:64:06:65:54:e4:fd:49:9f:4c:f9:
                    4d:74:f2:ed:86:81:86:87:3b:65:23:66:bf:33:8e:
                    d3:e3:a1:bf:b5:f0:7e:dd:15:00:a8:d0:14:b8:ab:
                    f9:0d:53:43:a5:07:61:39:5e:bb:19:bc:55:36:ca:
                    65:6c:29:c4:71:14:78:e4:ac:de:e8:30:c7:90:e6:
                    b9:17:47:d0:27:ca:c7:d5:a4:a7:2c:8a:34:c7:8d:
                    38:6b:45:c3:ca:78:96:6c:69:ee:4b:7b:16:ac:a8:
                    cf:f4:3f:50:c8:2e:cd:35:8f:1f:20:a0:57:f9:0f:
                    32:b7:45:49:aa:02:a5:a5:eb:5d:9d:00:89:56:2c:
                    d0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:7B:9E:17:11:2F:08:2D:86:CB:80:2A:DE:60:D7:FA:C2:20:C6:58
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS577.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:47:91:b4:e7:e5:7d:e6:de:c2:0f:61:8c:d1:15:8e:05:cc:
         e4:ff:6f:aa:1e:91:75:36:61:7c:d7:61:84:d2:dc:86:41:e8:
         3f:52:f9:b8:7e:ab:d2:80:49:23:c6:13:32:c0:26:66:21:86:
         3c:fe:35:45:2d:84:76:ed:05:1a:70:1e:e2:e0:74:9b:13:6b:
         f9:f8:a9:fb:d9:db:30:5c:f9:e9:4d:e0:f3:4f:93:e0:9d:cf:
         a4:d3:d4:ad:59:88:7d:d6:85:3c:6e:2f:11:cb:1d:af:9a:f0:
         b0:6b:4e:c2:0c:2a:7d:97:2e:c0:70:69:42:2f:a3:0c:cc:89:
         12:30:c3:d4:74:f2:c0:b3:ac:a8:f2:dd:31:3b:94:7d:46:b5:
         d1:01:51:62:a1:4d:12:87:51:7a:2e:1e:fc:7c:10:88:47:2c:
         53:e8:f7:db:7b:d3:2c:2e:fb:02:9b:26:df:14:7e:09:b8:82:
         39:78:a5:c2:3f:da:8f:97:c5:5c:23:b2:35:08:3f:54:92:d7:
         49:cb:7d:3a:00:d5:4b:f4:e6:51:f7:3a:06:26:f9:1e:d8:8d:
         b6:92:66:f2:2f:35:6c:e1:4f:92:6f:63:00:40:98:32:d4:5a:
         6b:a0:f3:76:0e:54:06:eb:aa:01:75:84:0c:4b:b8:ca:e5:8b:
         c7:da:e7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:36 2025 by rpki-client on console.sobornost.net