Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS54309.roa
File:                     AS54309.roa (raw, json)
Hash identifier:          RRGWyALgAx6OgLExkG6x1EK57ifxITnHb8vfA3r5u08=
Subject key identifier:   5D:9B:CB:B5:D0:4B:EE:33:52:5C:F8:EE:16:48:ED:CA:43:29:C5:EC
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       73813B24C6F6B677B6164B3295A27BA57A1765BF
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS54309.roa
Signing time:             Fri 04 Apr 2025 17:40:18 +0000
ROA not before:           Fri 04 Apr 2025 17:35:18 +0000
ROA not after:            Fri 03 Apr 2026 17:40:18 +0000
asID:                     54309
IP address blocks:        85.90.220.0/24 maxlen: 24
                          85.90.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:81:3b:24:c6:f6:b6:77:b6:16:4b:32:95:a2:7b:a5:7a:17:65:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Apr  4 17:35:18 2025 GMT
            Not After : Apr  3 17:40:18 2026 GMT
        Subject: CN=5D9BCBB5D04BEE33525CF8EE1648EDCA4329C5EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7d:9e:67:bb:bd:2c:fd:38:dc:92:81:65:1e:
                    ad:82:1e:e4:f8:d6:77:ce:08:5b:f8:cb:d4:ef:6b:
                    35:e0:4d:91:d3:38:ad:f5:32:69:c7:fc:76:3a:99:
                    32:55:19:2d:50:35:b6:14:da:f3:0e:40:03:34:58:
                    54:c2:1b:43:4d:07:58:80:28:e8:61:8f:7b:99:9a:
                    81:07:f2:a2:93:ba:30:cc:fe:38:6c:72:73:af:2d:
                    18:20:f4:9b:dc:14:42:35:2c:b9:44:e5:38:c7:31:
                    c8:c7:92:a8:29:00:6d:b4:74:a8:35:94:93:9d:b6:
                    22:41:6b:5e:ac:d6:19:85:33:5d:85:5f:58:ac:25:
                    ed:7d:5a:a0:37:20:8b:50:0d:1f:46:9f:ff:eb:93:
                    85:4f:1f:90:f1:52:8a:21:a9:40:77:fa:74:e2:7f:
                    e0:11:84:d6:dd:52:f8:55:28:5e:5f:12:7e:6f:8c:
                    36:9b:d2:03:46:5b:6f:7c:db:70:57:7b:f6:d2:fb:
                    2a:33:bb:2b:7e:e2:cd:55:eb:de:30:29:9f:a1:46:
                    b9:94:58:ff:c2:9e:00:11:3a:83:14:0a:ea:02:84:
                    ab:ca:62:54:9b:19:b5:bf:de:2c:69:30:65:ad:06:
                    7e:c7:56:94:0f:9f:8f:90:7d:67:4b:bd:4e:e4:50:
                    06:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:9B:CB:B5:D0:4B:EE:33:52:5C:F8:EE:16:48:ED:CA:43:29:C5:EC
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS54309.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.90.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:09:04:52:16:97:82:5f:6d:78:f4:13:69:e2:ab:33:61:1d:
         26:40:17:3f:e2:47:fd:30:ed:9e:0f:fc:8b:e2:e3:01:91:7f:
         5e:88:bc:24:c9:e0:27:52:b9:b6:a1:7c:d6:76:de:fc:a1:a1:
         33:0d:24:57:50:16:4c:07:88:a9:c4:4e:54:68:4f:bc:c6:13:
         c8:0a:73:b0:ec:d8:d8:85:05:1b:e9:fc:d2:a9:2f:a2:c8:ac:
         be:8e:2a:6c:53:73:e8:2b:60:4e:71:62:3a:96:e3:67:a0:eb:
         06:e5:66:1d:ca:c0:b5:d7:a2:72:af:58:db:a4:09:78:59:3d:
         d2:2d:dd:75:df:4d:4d:75:48:2e:17:08:3e:a0:2f:f1:58:c1:
         92:e8:a2:2c:e5:7b:16:25:fd:0c:bc:a2:46:5f:fd:ed:eb:d3:
         e6:b6:55:c4:18:48:29:45:12:7f:da:b6:66:6d:37:29:41:95:
         03:d8:31:87:4a:82:06:0f:27:3e:0d:00:ad:c2:84:5b:89:aa:
         8d:1f:58:da:10:78:43:5f:35:df:c4:6b:71:12:7e:3d:8a:84:
         e0:10:4c:d4:65:1e:9b:fc:23:6c:9c:ad:3b:47:f3:d2:09:61:
         c3:3f:c0:ba:be:9d:4a:f9:f2:6c:51:42:18:d6:9b:f0:fc:e3:
         f9:9a:f2:ed
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUc4E7JMb2tne2FksylaJ7pXoXZb8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNTA0MDQxNzM1MThaFw0yNjA0MDMxNzQwMThaMDMxMTAvBgNV
BAMTKDVEOUJDQkI1RDA0QkVFMzM1MjVDRjhFRTE2NDhFRENBNDMyOUM1RUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEfZ5nu70s/TjckoFlHq2CHuT4
1nfOCFv4y9TvazXgTZHTOK31MmnH/HY6mTJVGS1QNbYU2vMOQAM0WFTCG0NNB1iA
KOhhj3uZmoEH8qKTujDM/jhscnOvLRgg9JvcFEI1LLlE5TjHMcjHkqgpAG20dKg1
lJOdtiJBa16s1hmFM12FX1isJe19WqA3IItQDR9Gn//rk4VPH5DxUoohqUB3+nTi
f+ARhNbdUvhVKF5fEn5vjDab0gNGW29823BXe/bS+yozuyt+4s1V694wKZ+hRrmU
WP/CngAROoMUCuoChKvKYlSbGbW/3ixpMGWtBn7HVpQPn4+QfWdLvU7kUAZPAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQUXZvLtdBL7jNSXPjuFkjtykMpxewwHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
NTQzMDkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAFVWtwwDQYJKoZIhvcNAQELBQADggEBABcJBFIWl4Jf
bXj0E2niqzNhHSZAFz/iR/0w7Z4P/Ivi4wGRf16IvCTJ4CdSubahfNZ23vyhoTMN
JFdQFkwHiKnETlRoT7zGE8gKc7Ds2NiFBRvp/NKpL6LIrL6OKmxTc+grYE5xYjqW
42eg6wblZh3KwLXXonKvWNukCXhZPdIt3XXfTU11SC4XCD6gL/FYwZLooizlexYl
/Qy8okZf/e3r0+a2VcQYSClFEn/atmZtNylBlQPYMYdKggYPJz4NAK3ChFuJqo0f
WNoQeENfNd/Ea3ESfj2KhOAQTNRlHpv8I2ycrTtH89IJYcM/wLq+nUr58mxRQhjW
m/D84/ma8u0=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:10 2025 by rpki-client on console.sobornost.net