Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37362e302f32342d3234203d3e20313532363732.roa
File:                     3230342e31342e37362e302f32342d3234203d3e20313532363732.roa (raw, json)
Hash identifier:          es859MnSI0yMJcbt+HlhpJ8cTPTC1DgR4TNYzyy9M/U=
Subject key identifier:   12:2B:41:D0:2E:D1:16:A4:E5:8C:AA:E8:76:3E:EA:D7:5A:F6:E0:B2
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       15F5641CF972C8D829A7F80FABF5DD9E97B5DECA
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37362e302f32342d3234203d3e20313532363732.roa
Signing time:             Sat 12 Apr 2025 16:28:29 +0000
ROA not before:           Sat 12 Apr 2025 16:23:29 +0000
ROA not after:            Sat 11 Apr 2026 16:28:29 +0000
asID:                     152672
IP address blocks:        204.14.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:f5:64:1c:f9:72:c8:d8:29:a7:f8:0f:ab:f5:dd:9e:97:b5:de:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Apr 12 16:23:29 2025 GMT
            Not After : Apr 11 16:28:29 2026 GMT
        Subject: CN=122B41D02ED116A4E58CAAE8763EEAD75AF6E0B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:43:6f:ff:47:05:13:bf:a0:82:88:ee:5b:86:
                    9b:f0:97:46:5e:bf:9e:65:69:62:72:8f:28:c3:07:
                    d2:60:32:c2:03:39:92:9e:b6:ac:1f:33:83:0b:56:
                    52:fe:72:b4:3a:81:f0:8d:11:d5:23:72:6d:29:46:
                    92:c0:cd:70:4f:0d:39:d3:81:15:07:3e:0d:63:ac:
                    e8:7f:6b:22:23:ff:76:bf:9a:ee:77:98:49:e2:05:
                    19:1e:f4:6e:69:8b:5a:ef:3b:9f:e4:95:8f:b0:e7:
                    69:f6:f0:36:79:d1:90:e5:79:bd:0e:14:07:43:50:
                    62:0f:09:55:23:64:e5:25:3e:00:e4:01:31:1c:db:
                    b3:dd:7f:a8:9a:48:50:7d:12:07:b1:61:27:88:f7:
                    b9:f2:19:7e:11:03:0f:07:f6:84:8f:51:ac:66:09:
                    9c:94:19:f7:92:7b:bc:0e:8b:42:0b:73:aa:97:b4:
                    69:15:e4:aa:ac:8f:10:fa:3e:b8:77:e4:72:f0:a2:
                    f0:bc:72:4f:90:8e:6d:6f:9a:d1:82:c9:84:76:c6:
                    b1:33:42:85:36:3b:d5:4c:39:fd:2e:f8:28:64:76:
                    95:9b:67:2f:02:c5:09:76:eb:45:86:c0:d5:2e:c3:
                    b2:37:a8:c9:f5:70:12:94:30:78:86:7d:32:4d:3a:
                    68:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:2B:41:D0:2E:D1:16:A4:E5:8C:AA:E8:76:3E:EA:D7:5A:F6:E0:B2
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37362e302f32342d3234203d3e20313532363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:7b:0a:b4:38:2f:d9:b6:c2:f3:39:9f:28:29:fb:a2:4c:4a:
         c4:a7:58:5b:47:f5:3f:47:36:4c:e2:c7:a3:48:e5:f6:d0:39:
         57:4e:5e:e3:74:45:8c:c0:c6:3c:84:10:f3:dd:99:39:48:22:
         44:98:fb:9e:1a:8b:76:79:df:b1:b3:0e:31:87:90:38:5c:6a:
         a7:2c:d2:7f:ad:df:02:5b:ce:fe:4d:a3:15:19:2e:31:21:f4:
         9a:a7:b2:a5:c0:18:d9:a2:74:9a:ce:92:a9:aa:98:40:9b:ec:
         c3:2e:e8:56:26:0d:5d:83:ca:67:0e:a3:c7:87:fc:d4:51:76:
         0f:a2:95:4a:f9:05:81:af:cd:70:18:30:3c:ee:2e:1d:c8:61:
         1c:a5:c2:67:ec:0d:ac:6a:25:66:dd:8b:9a:b1:cd:06:a5:9f:
         5d:26:5b:2e:f9:3c:75:40:d9:02:eb:34:85:b7:ec:f1:3f:00:
         75:69:39:b1:3d:bf:9c:1f:e7:26:b2:a6:48:a2:31:7e:61:a8:
         41:1c:cc:9c:0e:c9:6b:07:38:b6:40:4c:80:79:36:c4:cb:17:
         40:1e:ac:c2:db:e7:f9:72:19:05:d6:aa:3e:aa:a0:8f:54:e9:
         56:2c:d1:c5:ad:28:67:28:79:f3:ea:0c:f4:34:a7:0a:fe:39:
         7d:cf:29:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 08:08:49 2025 by rpki-client on console.sobornost.net