Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS49484.roa
File:                     AS49484.roa (raw, json)
Hash identifier:          wGc3WCeHCEi68IrxgcDfKJY+f1CVjyUhOsczExi62Uw=
Subject key identifier:   98:51:6A:8F:45:70:DE:A8:8E:F0:B5:CD:3E:B3:80:B4:47:DC:20:D2
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       0F5A5618DEC102D96EFE2FE14B674B12ACD34A49
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS49484.roa
Signing time:             Thu 10 Apr 2025 20:54:53 +0000
ROA not before:           Thu 10 Apr 2025 20:49:53 +0000
ROA not after:            Thu 09 Apr 2026 20:54:53 +0000
asID:                     49484
IP address blocks:        66.225.239.0/24 maxlen: 24
                          204.93.164.0/24 maxlen: 24
                          204.93.186.0/24 maxlen: 24
                          204.93.201.0/24 maxlen: 24
                          205.234.156.0/23 maxlen: 24
                          205.234.244.0/24 maxlen: 24
                          216.246.96.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:5a:56:18:de:c1:02:d9:6e:fe:2f:e1:4b:67:4b:12:ac:d3:4a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Apr 10 20:49:53 2025 GMT
            Not After : Apr  9 20:54:53 2026 GMT
        Subject: CN=98516A8F4570DEA88EF0B5CD3EB380B447DC20D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:1d:f2:52:be:6e:90:41:1a:ed:5f:24:79:ac:
                    10:7d:4b:c8:7a:fa:86:bb:e2:b1:32:6a:2d:32:0a:
                    5d:84:bb:b0:32:61:8e:cc:c3:6a:05:f8:08:41:b8:
                    a5:e2:ed:f5:04:59:ac:ba:6c:35:2b:aa:9a:01:1d:
                    4f:80:28:26:8e:f3:e9:51:47:1a:81:19:b1:28:1f:
                    0c:39:2c:15:1d:7f:1d:bc:5d:a0:4f:14:52:06:c2:
                    75:2b:68:52:a7:09:35:8c:a8:37:58:d8:91:79:56:
                    9a:77:67:10:8a:4c:e9:52:a7:1e:0b:a7:02:d3:94:
                    cf:cf:65:a6:44:d9:09:48:91:cf:bd:23:67:d5:16:
                    f3:64:54:61:69:c5:52:3a:6f:9c:55:7d:5d:e2:d7:
                    c3:1f:69:03:33:42:08:40:11:a8:f0:74:dd:99:ba:
                    be:7f:f6:cf:90:4a:6a:3a:d7:60:4a:85:21:68:b3:
                    aa:e3:04:61:73:57:aa:a2:3c:ce:8b:3a:52:ff:cb:
                    ab:16:3d:67:0f:3d:c5:d4:a9:9f:fd:dd:ca:79:15:
                    8b:e4:59:52:e4:8c:9b:94:b3:d3:d5:33:3c:76:99:
                    77:31:5b:03:a8:77:b7:23:a1:48:a8:f8:80:0c:c3:
                    7a:9e:20:00:e1:9f:84:3f:2a:2f:df:e7:77:d3:0b:
                    e2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:51:6A:8F:45:70:DE:A8:8E:F0:B5:CD:3E:B3:80:B4:47:DC:20:D2
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS49484.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.225.239.0/24
                  204.93.164.0/24
                  204.93.186.0/24
                  204.93.201.0/24
                  205.234.156.0/23
                  205.234.244.0/24
                  216.246.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:01:f8:eb:78:31:af:b0:30:04:76:91:b2:38:bb:9c:fa:80:
         d2:75:fc:09:61:26:dd:df:45:49:13:fd:a3:da:7f:8d:b0:81:
         e7:69:74:1f:19:6a:8c:01:01:50:cb:d4:01:38:f3:38:82:f6:
         e2:a3:2c:3b:e7:35:a7:14:04:31:48:29:4b:bd:91:20:c7:43:
         19:21:ee:e9:04:9a:4d:64:42:ed:30:7b:d4:e2:d2:a2:72:c7:
         2a:00:85:87:fe:de:04:6b:06:24:01:26:cb:0a:ce:60:35:87:
         34:59:39:6c:94:5e:66:1f:bd:98:f3:14:05:90:19:34:eb:13:
         3c:72:ee:a4:07:da:b8:4e:53:fe:3e:06:8d:2a:71:aa:4d:05:
         2f:3a:43:59:38:4e:47:e3:29:54:ea:92:cf:f2:20:ad:3e:56:
         0a:9d:2c:28:bf:74:13:c8:ce:6c:25:2e:90:7b:53:77:c2:d8:
         02:b8:f9:be:5a:7d:e1:00:4c:c6:b8:79:63:33:b6:99:d8:8a:
         54:8d:d7:e5:98:14:33:fa:b4:17:1e:96:29:8c:9a:49:2e:53:
         9e:a6:27:cf:1f:be:33:3a:4c:09:e2:13:6c:bc:59:41:01:cb:
         3a:e1:df:e0:0b:b2:d1:15:1c:83:28:c1:aa:b1:6a:49:b8:ee:
         cf:89:ae:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:11 2025 by rpki-client on console.sobornost.net