Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/32332e3134332e3137362e302f32342d3234203d3e20393137.roa
File:                     32332e3134332e3137362e302f32342d3234203d3e20393137.roa (raw, json)
Hash identifier:          MuNrUb+Xwj+JP9bnHOLNk0963EzzJTKxW46PlhtrOAw=
Subject key identifier:   47:A4:5D:0B:CD:D2:58:6E:00:65:1C:14:E1:3C:2C:C3:25:95:A4:39
Certificate issuer:       /CN=06fc27b2b4e72b9a46de1abc1bedee255e8a50e5e626098e31
Certificate serial:       1EBF8430A0852AEDA1B245F5A8030524DF6DE1C7
Authority key identifier: 16:93:1D:F4:91:69:3F:02:F4:41:1C:3C:35:6A:DF:EE:35:71:3A:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4e72b9a46de1abc1bedee255e8a50e5e626098e31.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/32332e3134332e3137362e302f32342d3234203d3e20393137.roa
Signing time:             Tue 14 Jun 2022 23:15:05 +0000
ROA not before:           Tue 14 Jun 2022 23:10:05 +0000
ROA not after:            Tue 13 Jun 2023 23:15:05 +0000
asID:                     917
IP address blocks:        23.143.176.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bf:84:30:a0:85:2a:ed:a1:b2:45:f5:a8:03:05:24:df:6d:e1:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4e72b9a46de1abc1bedee255e8a50e5e626098e31
        Validity
            Not Before: Jun 14 23:10:05 2022 GMT
            Not After : Jun 13 23:15:05 2023 GMT
        Subject: CN=47A45D0BCDD2586E00651C14E13C2CC32595A439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:51:0e:ed:e9:ee:fd:f9:02:1f:71:25:b0:16:
                    24:e9:c3:4a:cd:f1:a3:8e:ad:bd:af:b3:1b:35:3c:
                    65:29:11:cc:be:e0:b9:c1:c8:f4:b5:0a:da:22:b1:
                    67:f7:c3:c1:78:32:cf:27:46:15:0b:0a:ed:89:2e:
                    88:fe:31:60:66:db:0c:f6:eb:b8:2f:82:46:e2:92:
                    40:d7:d2:f2:cf:b9:5e:59:7a:c5:12:b0:31:2b:7d:
                    de:e5:fa:29:43:4f:bd:45:21:47:cc:be:ad:6f:73:
                    9b:56:32:ac:8c:88:ec:6f:6b:21:9d:3e:ae:cc:50:
                    e9:8d:ad:a0:5a:ee:2e:70:cb:e6:e5:3c:2c:17:07:
                    6e:a7:68:78:1d:30:96:4f:b0:56:50:d0:3a:99:a5:
                    2a:7f:c8:08:d3:3e:93:27:e3:0a:98:4b:d8:d8:3d:
                    35:f9:d3:c2:c8:e4:8c:13:2b:62:9a:3e:99:f9:50:
                    b3:3f:eb:11:3e:2e:8d:55:bc:85:ca:68:9f:78:1e:
                    c7:f8:8a:e6:10:70:54:5e:bb:8b:bb:3c:61:3b:60:
                    56:5f:7d:b4:5e:ba:06:21:cc:eb:e0:f6:71:ab:ab:
                    a4:97:d9:78:1e:a9:2c:66:a9:d9:3c:96:58:61:84:
                    c5:11:b6:4a:3b:5e:28:fb:c9:8c:21:8f:33:a3:aa:
                    d0:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:A4:5D:0B:CD:D2:58:6E:00:65:1C:14:E1:3C:2C:C3:25:95:A4:39
            X509v3 Authority Key Identifier:
                keyid:16:93:1D:F4:91:69:3F:02:F4:41:1C:3C:35:6A:DF:EE:35:71:3A:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/16931DF491693F02F4411C3C356ADFEE35713AA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4e72b9a46de1abc1bedee255e8a50e5e626098e31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/32332e3134332e3137362e302f32342d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:1c:53:f5:a7:8f:c9:66:18:bf:44:f0:07:f2:2e:da:55:ea:
         22:c7:3a:2f:e7:6f:22:15:4b:cf:0e:83:3a:49:3d:f9:13:9c:
         21:6e:b0:f8:14:a1:c5:d0:52:3b:26:48:19:96:01:14:1d:13:
         53:ca:12:1c:a8:c4:94:d4:0d:9a:cd:4f:06:1e:32:a2:7c:05:
         37:e7:0c:e7:9a:7f:2f:9f:9e:64:bf:94:39:6a:2f:f9:74:8a:
         13:f6:10:5a:96:e9:4a:c6:1a:9b:7b:5e:b4:24:c5:ed:39:c1:
         44:4b:b2:93:ef:f8:18:f7:42:ea:16:91:79:d1:8a:47:3c:c6:
         35:e9:a7:7f:c6:f0:58:ad:7f:b8:6c:6c:fd:9a:04:98:51:18:
         34:64:79:0a:6d:7d:e0:9f:ac:2a:f8:9a:8c:40:03:c4:d0:3c:
         34:7c:f5:45:d2:fa:aa:1a:2f:c7:f1:c6:c2:d9:bf:e5:f5:45:
         31:65:e4:04:43:d3:81:36:89:12:03:67:f3:cc:78:79:9d:94:
         48:57:db:f4:59:e6:51:e4:0c:8b:24:73:e0:09:bc:95:8d:67:
         4d:4c:3e:49:10:02:3d:0b:12:bc:4f:2a:6a:77:78:8d:d7:59:
         c0:c0:09:8f:39:36:23:71:bc:5a:41:02:f3:8c:96:b9:5d:21:
         3c:0e:94:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:04 2025 by rpki-client