Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199414.roa
File:                     AS199414.roa (raw, json)
Hash identifier:          jP+hnTMxKD4NfUfRd5p/EsJODlFFekDSt9XAnOzJRWU=
Subject key identifier:   15:4B:D3:98:54:10:AB:2A:B0:1C:CB:0D:D3:8B:D8:67:D9:19:05:8E
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       3D3008AE45A4EBA8D191704B1FEDCFE43FCBED2B
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199414.roa
Signing time:             Thu 10 Apr 2025 18:33:47 +0000
ROA not before:           Thu 10 Apr 2025 18:28:47 +0000
ROA not after:            Thu 09 Apr 2026 18:33:47 +0000
asID:                     199414
IP address blocks:        118.91.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:30:08:ae:45:a4:eb:a8:d1:91:70:4b:1f:ed:cf:e4:3f:cb:ed:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Apr 10 18:28:47 2025 GMT
            Not After : Apr  9 18:33:47 2026 GMT
        Subject: CN=154BD3985410AB2AB01CCB0DD38BD867D919058E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:11:e9:24:9a:14:42:d9:d9:9d:c8:f4:2b:d4:
                    a8:2e:a8:44:1e:dc:ce:56:c1:f7:47:23:bc:51:fa:
                    75:ec:2d:ce:f9:b5:1e:37:cc:02:05:9a:cd:88:28:
                    c3:62:c6:4c:4c:d0:56:d8:d4:d4:50:64:67:bc:c2:
                    1d:5c:c5:fa:4a:4b:96:d1:c8:7f:84:ae:90:bf:8a:
                    c0:a8:9b:7a:c3:51:3e:e3:42:a5:6e:12:f1:3e:2d:
                    89:1e:6f:9c:d7:5c:92:5c:08:bd:92:b0:7e:02:29:
                    00:16:70:de:aa:13:77:dd:6b:b8:b5:16:5b:f2:2b:
                    ea:bf:43:4d:e6:c8:55:da:21:d1:78:4c:55:57:f2:
                    47:63:b4:3b:fd:40:4e:21:eb:65:a4:52:c6:81:ed:
                    81:a4:1b:f7:cc:0b:4f:6a:00:22:dc:38:82:96:ff:
                    65:6c:c0:05:ce:f1:a6:d2:b4:15:29:19:bb:d1:6c:
                    a2:e8:60:ab:55:b4:bb:a0:6c:68:8b:ff:3e:b5:72:
                    7e:e0:fe:11:82:ab:51:93:ae:e9:4c:c2:d3:54:c3:
                    95:ea:8b:76:ed:a1:29:41:6a:e7:06:6e:41:4e:4c:
                    53:fe:76:b7:8b:2c:d6:53:76:48:a5:94:3f:c9:01:
                    58:90:79:c4:ff:e6:16:63:ec:62:a1:58:a5:5f:f9:
                    e2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4B:D3:98:54:10:AB:2A:B0:1C:CB:0D:D3:8B:D8:67:D9:19:05:8E
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS199414.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.91.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:8a:52:96:35:7d:e4:e4:42:ef:76:0c:17:cf:91:fa:34:3b:
         28:fd:a9:61:81:92:c4:e3:9a:b4:3d:36:dc:2b:9d:82:5a:1a:
         0d:09:d9:13:46:cf:46:7b:b2:aa:19:43:c6:e9:02:10:66:41:
         20:36:e1:0e:17:eb:c2:ce:2b:0b:98:55:d9:b7:e5:64:9f:72:
         e9:a6:51:97:74:cc:81:01:32:d3:4f:c0:6a:96:ff:29:04:9d:
         c6:e0:a2:e9:74:43:ff:7e:1b:11:43:e9:30:c1:16:af:9d:57:
         b2:0f:c1:eb:38:6e:83:9f:79:64:bd:ec:ba:af:d1:02:3e:6f:
         2f:2f:06:69:cd:ca:71:3b:03:ca:b7:08:cc:7e:8d:8a:b1:56:
         f8:9c:3e:52:84:2f:15:3d:b2:91:78:1b:96:b0:40:40:6d:d4:
         dc:a4:59:67:8e:cc:8e:d6:12:13:18:55:cd:20:fb:49:7a:4d:
         e6:df:f8:ea:5a:73:7d:79:b5:f9:c1:99:10:a3:95:af:1b:7f:
         bc:41:03:22:eb:68:14:43:7c:ff:ec:f0:e4:be:31:3f:60:cf:
         0d:98:45:85:bc:2f:b5:c6:8b:ae:c5:8c:0f:37:08:41:f7:0d:
         0d:ac:cc:23:ac:f4:93:a4:e6:12:95:7d:04:2b:58:31:c3:4e:
         06:e1:b2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:10 2025 by rpki-client on console.sobornost.net