Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS32647.roa
File:                     AS32647.roa (raw, json)
Hash identifier:          G0BdRdlnT575MDZXcCGuGmhvlBL4/yByVDzB+mm4vpA=
Subject key identifier:   CA:9B:75:46:5F:79:49:B1:0D:9A:37:49:78:C2:D0:5B:87:44:D8:54
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       1D994803A7A36AA4383F4C9C3E762B3973258659
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS32647.roa
Signing time:             Wed 26 Mar 2025 13:42:34 +0000
ROA not before:           Wed 26 Mar 2025 13:37:34 +0000
ROA not after:            Wed 25 Mar 2026 13:42:34 +0000
asID:                     32647
IP address blocks:        45.54.74.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:99:48:03:a7:a3:6a:a4:38:3f:4c:9c:3e:76:2b:39:73:25:86:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Mar 26 13:37:34 2025 GMT
            Not After : Mar 25 13:42:34 2026 GMT
        Subject: CN=CA9B75465F7949B10D9A374978C2D05B8744D854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d1:9b:4a:51:10:43:38:07:28:f6:5d:a6:5c:
                    53:cf:3a:e4:61:10:8c:92:1b:aa:bb:1a:f4:a0:fe:
                    91:29:50:c7:47:2f:6c:b2:f0:63:de:ba:5b:e1:a9:
                    a0:b7:97:91:fa:27:47:5c:23:8f:7d:a1:d8:45:47:
                    f0:8f:ea:de:e5:aa:92:7f:c2:f2:ea:e8:08:99:a8:
                    7e:31:17:4a:41:99:1c:ec:00:1d:d4:62:3f:c3:3e:
                    83:78:70:eb:36:51:42:75:ed:2d:fc:3b:ef:22:fc:
                    3d:58:55:3f:43:9f:c3:04:a4:b7:e5:a9:03:79:c6:
                    31:6c:9c:78:19:a5:4e:3f:b3:0e:33:ad:47:3f:ae:
                    ea:0d:a9:d6:8a:d5:c9:58:01:75:46:59:66:f0:e7:
                    5c:10:76:e7:ab:c1:03:1c:9a:39:5a:5b:e9:e1:08:
                    6b:e1:42:9b:d6:29:44:c9:05:88:f5:78:fa:8e:0f:
                    d1:14:c4:f1:54:f4:e8:b4:a4:fa:3c:9f:cd:4c:1b:
                    2a:37:56:a8:7e:6c:34:5f:fb:6e:e0:ff:b9:c8:7c:
                    8b:38:0d:b5:92:7f:ed:b6:50:73:99:eb:0d:63:4f:
                    c3:74:85:82:37:0e:14:24:e6:d7:30:6f:ae:fb:c6:
                    a0:58:2b:84:44:06:44:ab:bf:eb:93:0d:87:b0:aa:
                    20:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:9B:75:46:5F:79:49:B1:0D:9A:37:49:78:C2:D0:5B:87:44:D8:54
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS32647.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.54.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:f3:4b:44:34:38:81:60:42:9e:c5:7f:66:db:44:ed:3a:b4:
         88:2f:ca:25:e4:35:aa:43:7c:3b:7e:7d:d7:88:a7:41:d3:84:
         3a:ba:da:60:49:80:e3:77:36:c9:9e:31:f1:fd:a0:0b:61:e6:
         a8:a9:14:92:58:04:ea:90:e7:3b:36:81:9a:8a:71:35:cf:6b:
         8b:bf:b5:94:5d:9f:05:74:3f:0f:72:c5:ad:dc:45:36:30:6e:
         08:d1:31:50:db:b7:9c:7d:cc:b8:82:95:c8:52:f0:9d:54:01:
         c9:9e:6a:1f:17:c6:64:3b:8e:a1:ba:45:1f:e2:0c:84:81:82:
         b7:cd:15:6e:3a:e8:e8:b2:60:41:0a:a5:17:e3:30:96:64:22:
         4d:06:a6:70:00:a4:a0:cd:25:56:bd:6e:a3:14:29:32:cd:f4:
         1b:c6:16:e2:f2:24:5d:ba:5e:44:0f:b1:29:06:5b:6a:36:1e:
         d8:95:cc:5c:6c:50:07:fd:e7:fa:4e:6f:95:45:4b:53:68:e0:
         1f:ad:ba:bd:77:e9:0c:30:44:2f:69:9a:78:67:93:5e:5e:e2:
         89:e7:84:67:84:97:8b:92:60:f5:e9:7f:69:5e:eb:22:6e:4d:
         84:ba:17:91:61:08:82:70:c6:4d:5c:a7:25:99:79:38:aa:e2:
         40:70:d2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:24:46 2025 by rpki-client