Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/3130382e3136302e3231322e302f32322d3234203d3e203136353039.roa
File:                     3130382e3136302e3231322e302f32322d3234203d3e203136353039.roa (raw, json)
Hash identifier:          BgVuCn8NOT78vLfYN7IKwZQvxrVKR2+NrtR7mILeEUk=
Subject key identifier:   9B:EF:5E:53:DB:33:07:38:02:66:AE:29:AE:72:99:17:D6:B1:B7:51
Certificate issuer:       /CN=4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42
Certificate serial:       5133A89DB36D7D7F90CBDE38FE440756E321160F
Authority key identifier: 87:4A:35:3A:EE:F2:A6:07:A1:AB:A8:E4:3D:20:F1:8E:C9:41:1A:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/3130382e3136302e3231322e302f32322d3234203d3e203136353039.roa
Signing time:             Tue 15 Apr 2025 07:28:29 +0000
ROA not before:           Tue 15 Apr 2025 07:23:29 +0000
ROA not after:            Tue 14 Apr 2026 07:28:29 +0000
asID:                     16509
IP address blocks:        108.160.212.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:33:a8:9d:b3:6d:7d:7f:90:cb:de:38:fe:44:07:56:e3:21:16:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42
        Validity
            Not Before: Apr 15 07:23:29 2025 GMT
            Not After : Apr 14 07:28:29 2026 GMT
        Subject: CN=9BEF5E53DB3307380266AE29AE729917D6B1B751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1e:d6:96:f7:75:cb:ce:e7:2a:60:b9:ba:a4:
                    c6:cb:96:fd:3b:1e:be:a9:94:c9:7e:e4:00:0a:38:
                    46:c7:46:e4:d1:6f:78:5a:c2:fb:ee:27:f1:1c:2a:
                    fd:a4:59:54:80:6f:c0:60:5b:c2:23:89:d7:94:21:
                    6f:ad:81:75:6b:80:84:82:0c:5a:f8:08:14:72:c4:
                    58:90:13:62:6f:23:04:4b:fc:46:db:a2:e4:f5:09:
                    8a:6a:3f:b4:d5:1b:90:28:b2:40:49:c3:f9:d8:94:
                    5c:a9:14:89:0b:27:61:7b:16:a1:23:ba:0a:63:0d:
                    14:63:18:22:27:a6:47:50:19:d8:e4:13:54:15:37:
                    80:59:72:71:af:7e:36:e6:c2:47:2f:a4:17:22:df:
                    27:1b:48:d6:7b:a4:11:83:1b:79:36:4c:46:05:a6:
                    a5:d0:a7:80:97:95:e8:d4:58:d3:82:a5:11:dc:bc:
                    8d:9d:ca:d1:f8:bc:ef:cc:d2:11:09:c7:ed:9d:11:
                    9c:b4:e5:f3:ae:70:8b:6b:1e:84:45:80:69:a5:2a:
                    f4:b5:61:64:45:f1:ec:30:2a:36:e6:18:ad:46:65:
                    1e:1f:b7:ac:de:b1:77:f4:71:c4:45:29:bb:46:d0:
                    29:49:d2:18:67:6a:a4:de:ff:15:69:e8:b1:06:f5:
                    7f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:EF:5E:53:DB:33:07:38:02:66:AE:29:AE:72:99:17:D6:B1:B7:51
            X509v3 Authority Key Identifier:
                keyid:87:4A:35:3A:EE:F2:A6:07:A1:AB:A8:E4:3D:20:F1:8E:C9:41:1A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/874A353AEEF2A607A1ABA8E43D20F18EC9411AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/3130382e3136302e3231322e302f32322d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.160.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:66:75:fa:9d:8d:b9:13:8c:4f:a5:2f:1e:56:34:13:eb:01:
         41:cf:5b:3f:fa:f0:43:a6:0e:7f:d5:7a:51:7a:c7:43:93:d4:
         13:4f:e7:eb:8a:a3:89:4a:1e:31:61:87:40:42:71:df:81:23:
         3e:7d:cc:42:c1:7f:83:5e:68:b1:be:98:81:93:23:c0:73:b9:
         0a:03:a9:65:13:56:07:a9:b2:fb:15:39:bf:48:07:20:6d:e8:
         2b:b1:7f:67:8b:7b:22:5f:d6:c0:6c:56:87:2b:01:cd:d9:0f:
         56:c5:e0:e6:b3:b7:24:72:8f:6a:23:4b:d2:c3:13:1b:61:87:
         02:8b:da:7f:eb:9b:08:42:33:be:92:67:38:c4:5d:66:b0:ab:
         d4:05:b9:15:91:c2:dd:73:15:78:e8:e3:a5:ee:08:2d:97:7f:
         e7:80:7b:02:85:d7:b3:96:20:41:41:0c:c6:99:83:dc:c9:78:
         57:1a:77:c1:b7:23:33:4b:05:3e:67:73:de:b7:62:8d:c1:b2:
         52:59:e8:d5:e6:38:5e:ba:15:a9:69:3c:5e:86:bf:8c:77:75:
         46:0b:de:1c:55:13:7a:c6:32:70:35:ad:09:0b:c1:84:f4:33:
         d1:99:c9:a9:79:bb:4a:88:13:83:ea:8a:a4:b8:04:6a:e4:12:
         d9:aa:6d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:47 2025 by rpki-client on console.sobornost.net