Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS47272.roa
File:                     AS47272.roa (raw, json)
Hash identifier:          u1Uvm51i/yvmk7R4uCDqHAKylre5RuwfC+0ztYID95k=
Subject key identifier:   BB:46:23:B7:3A:8F:D1:FF:07:25:6D:EA:2D:17:77:7E:C1:B2:EC:E6
Certificate issuer:       /CN=57A9746FE543EB3EA0D449534244C93FC88F8503
Certificate serial:       416AB578151C42DA2F217274DFCCA088965122BF
Authority key identifier: 57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS47272.roa
Signing time:             Sat 18 Jan 2025 19:32:46 +0000
ROA not before:           Sat 18 Jan 2025 19:27:46 +0000
ROA not after:            Sat 17 Jan 2026 19:32:46 +0000
asID:                     47272
IP address blocks:        118.91.184.0/24 maxlen: 32
                          118.91.185.0/24 maxlen: 32
                          195.184.247.0/24 maxlen: 32
                          2a06:1281:1000::/36 maxlen: 36
                          2a06:1284::/32 maxlen: 32
                          2a09:54c6::/36 maxlen: 36
                          2a09:54c6:f000::/36 maxlen: 44
                          2a0a:6041::/32 maxlen: 40
                          2a0a:6044::/48 maxlen: 48
                          2a0a:6044:1::/48 maxlen: 48
                          2a0a:6044:2::/48 maxlen: 48
                          2a0a:6044:3::/48 maxlen: 48
                          2a0a:6044:4::/48 maxlen: 48
                          2a0a:6044:5::/48 maxlen: 48
                          2a0a:6044:6::/48 maxlen: 48
                          2a0a:6044:7::/48 maxlen: 48
                          2a0a:6044:8::/48 maxlen: 48
                          2a0a:6044:9::/48 maxlen: 48
                          2a0a:6044:a::/48 maxlen: 48
                          2a0a:6044:b::/48 maxlen: 48
                          2a0a:6044:10::/48 maxlen: 48
                          2a0a:6044:100::/40 maxlen: 48
                          2a0a:6044:7200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:6a:b5:78:15:1c:42:da:2f:21:72:74:df:cc:a0:88:96:51:22:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57A9746FE543EB3EA0D449534244C93FC88F8503
        Validity
            Not Before: Jan 18 19:27:46 2025 GMT
            Not After : Jan 17 19:32:46 2026 GMT
        Subject: CN=BB4623B73A8FD1FF07256DEA2D17777EC1B2ECE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:bd:c8:21:81:03:42:5d:f1:d0:5f:a5:c0:ef:
                    9e:f5:05:d4:9c:e9:bf:e2:90:56:2e:f7:63:b1:5f:
                    d2:ed:a0:ac:e6:a4:b8:82:a3:6e:37:60:54:77:92:
                    eb:27:e5:8b:98:10:dd:bf:2d:66:af:b0:55:68:c4:
                    26:80:da:03:90:08:69:9b:82:44:f5:39:70:2c:7d:
                    d8:b8:8d:27:3a:10:eb:42:35:a3:f6:f7:5a:89:27:
                    55:ae:06:83:28:03:ee:7b:d7:3b:de:35:9a:b5:30:
                    24:70:9b:2d:21:7f:c4:8d:00:18:e8:fa:1b:a8:ad:
                    dc:0f:e8:1d:43:c9:89:db:06:7a:20:af:cd:30:f4:
                    61:e3:fb:f0:37:8f:07:8a:0b:42:1c:27:a8:59:31:
                    01:dc:db:a7:46:62:12:07:55:84:c3:f7:68:a0:1b:
                    ea:72:1a:e6:e3:c5:2b:35:a6:fe:ff:d6:8c:c7:ef:
                    d9:18:46:78:5f:3e:7a:17:ae:7c:d7:75:d2:69:46:
                    ef:cf:3b:08:b7:a2:38:98:91:ea:a5:c6:f8:dd:94:
                    aa:65:d4:7b:1b:57:7a:3b:ca:5d:dc:ac:cb:90:e9:
                    cb:af:f4:60:b2:9b:13:53:c7:94:95:46:e9:fd:61:
                    8e:06:35:cb:75:df:bf:d2:57:53:34:d6:8b:43:7f:
                    97:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:46:23:B7:3A:8F:D1:FF:07:25:6D:EA:2D:17:77:7E:C1:B2:EC:E6
            X509v3 Authority Key Identifier:
                keyid:57:A9:74:6F:E5:43:EB:3E:A0:D4:49:53:42:44:C9:3F:C8:8F:85:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/AS47272.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.91.184.0/23
                  195.184.247.0/24
                IPv6:
                  2a06:1281:1000::/36
                  2a06:1284::/32
                  2a09:54c6::/36
                  2a09:54c6:f000::/36
                  2a0a:6041::/32
                  2a0a:6044::-2a0a:6044:b:ffff:ffff:ffff:ffff:ffff
                  2a0a:6044:10::/48
                  2a0a:6044:100::/40
                  2a0a:6044:7200::/40

    Signature Algorithm: sha256WithRSAEncryption
         6c:b0:bf:0c:ca:8b:38:d0:88:6c:8f:40:e6:e2:4e:f4:4c:86:
         a2:7b:c4:5d:04:b5:35:4f:c8:97:19:ed:13:41:b6:6d:08:56:
         31:38:a2:1a:e3:b4:93:22:c7:21:29:98:1a:77:6f:55:8a:d4:
         46:ca:23:41:e1:50:8e:fe:f5:58:d9:f2:da:e9:7b:97:25:92:
         eb:3e:71:44:c7:d9:51:af:e9:03:98:06:e6:9e:26:9a:53:6a:
         c7:94:b1:df:02:04:36:42:36:ef:89:87:36:ef:ac:3a:90:80:
         d8:b0:72:cd:5a:d6:7b:02:ee:b3:f5:e1:a9:cb:5a:39:ee:3d:
         40:18:ed:c0:22:71:03:75:d5:55:9e:2a:f9:95:39:61:93:bd:
         00:60:d5:c9:fa:64:a6:67:4c:64:24:1c:43:85:ef:f1:54:c8:
         ff:38:dd:8f:ad:9e:18:b6:61:41:78:5e:77:9f:cc:4b:9b:34:
         70:74:5e:ac:b4:b6:74:9b:85:d1:39:b9:ee:4b:0d:71:b3:a1:
         4a:2e:e8:dd:52:14:9a:3d:db:e5:29:ed:0c:0e:2b:a0:4c:c5:
         27:a8:6e:e6:2c:99:c4:55:18:c4:6c:d5:09:eb:b5:d1:f3:30:
         87:3c:f3:8b:9c:4b:86:02:9e:12:39:6c:2c:89:16:7c:f4:2d:
         05:7c:82:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 23 19:18:51 2025 by rpki-client on console.sobornost.net