Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS265517.roa
File:                     AS265517.roa (raw, json)
Hash identifier:          /aeSBi0ZRQ7JNMOURbZ/DqAeNtU97wxpKu/MVnar8UE=
Subject key identifier:   48:24:FC:72:8F:D5:62:07:41:56:78:C0:77:AF:5B:5F:82:E6:67:94
Certificate issuer:       /CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
Certificate serial:       481A5AFD0F6E98EFCD77150786D016AE0F16FB95
Authority key identifier: AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS265517.roa
Signing time:             Mon 17 Mar 2025 03:12:28 +0000
ROA not before:           Mon 17 Mar 2025 03:07:28 +0000
ROA not after:            Mon 16 Mar 2026 03:12:28 +0000
asID:                     265517
IP address blocks:        206.53.56.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1a:5a:fd:0f:6e:98:ef:cd:77:15:07:86:d0:16:ae:0f:16:fb:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9
        Validity
            Not Before: Mar 17 03:07:28 2025 GMT
            Not After : Mar 16 03:12:28 2026 GMT
        Subject: CN=4824FC728FD56207415678C077AF5B5F82E66794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:4d:d3:0f:93:07:cb:87:11:f2:ab:1f:b0:
                    42:00:c0:b9:c7:50:ee:16:e1:d0:ca:7c:34:b2:f4:
                    4d:ee:fe:dd:65:16:93:f2:d9:4a:c5:d8:48:e2:c3:
                    c4:0f:62:e8:66:47:52:a1:f2:27:2e:db:8f:9f:2b:
                    fc:30:7d:ff:fc:b5:b7:de:5d:e3:3b:7e:53:44:b2:
                    51:ff:63:ab:15:2e:1f:f2:22:e1:31:f7:5c:c7:42:
                    f4:a0:41:7e:c4:91:de:91:2c:7e:8b:40:70:4d:aa:
                    df:3a:51:9b:bf:eb:f3:5f:00:1e:54:ff:06:20:5f:
                    23:a3:c9:ba:b4:41:aa:80:1a:74:b3:da:4a:28:4c:
                    fb:a6:08:13:42:ef:f0:7f:dc:2f:ef:e7:e8:72:cb:
                    91:4b:b4:3a:d9:03:fd:58:73:44:9c:b1:89:96:b9:
                    bb:be:dc:c7:2c:4d:be:d7:23:42:05:bf:d3:e6:7d:
                    58:42:34:d9:06:f7:65:e1:54:13:b5:81:8f:84:af:
                    b2:eb:fb:ba:0e:2c:94:35:48:40:ba:f9:1a:6c:8d:
                    c3:ec:88:5c:33:7f:97:4e:57:7b:5c:12:e0:c2:a1:
                    f4:7c:dc:33:7f:0a:d3:25:69:bb:3a:64:63:f5:8c:
                    7e:4c:26:32:c4:b0:b6:ab:42:1c:7c:49:30:60:a6:
                    68:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:24:FC:72:8F:D5:62:07:41:56:78:C0:77:AF:5B:5F:82:E6:67:94
            X509v3 Authority Key Identifier:
                keyid:AB:5C:AF:A9:57:06:33:73:38:93:D9:1E:E4:B0:5A:1F:0E:CC:D0:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AB5CAFA9570633733893D91EE4B05A1F0ECCD06B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f5e2e5b-c731-4db8-9b87-af9f8e58a1c6/72cc1fd28d4a04c8473c3ac0b19940270cbbf123f3c0b1f7f9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185c5cb9bcb2bac/0/AS265517.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:1a:29:69:d8:a7:65:c4:c5:d1:76:1f:38:b0:14:8f:33:dd:
         bc:4f:5b:f5:9e:b4:3d:df:0c:a0:33:0d:63:31:bc:40:1c:27:
         99:61:38:3f:69:d8:b5:a9:e9:4c:b5:8c:47:1e:78:aa:bf:f6:
         d2:6b:bf:b2:6d:7e:5f:a3:9e:87:3c:2b:1c:09:b1:83:de:fb:
         48:1e:01:e5:dc:48:08:e9:67:7d:86:9f:aa:5f:bd:4f:b9:e1:
         d8:e6:be:5a:85:89:bf:01:ac:d3:3f:d9:2a:56:2f:c8:7d:d3:
         a1:d1:40:84:7d:0e:da:b1:e4:30:36:b8:67:74:9b:ac:c1:01:
         06:93:fa:21:3b:64:bc:ac:5d:1f:9d:45:25:d7:9f:8f:5a:1f:
         77:f0:eb:42:27:87:b3:50:eb:f1:67:10:d7:21:a6:80:29:88:
         07:92:43:b9:82:45:b0:bd:61:dd:f3:77:7e:e5:de:21:1d:0d:
         c6:c6:36:76:a0:8d:9f:24:12:5d:4c:82:6c:cc:49:14:4f:b4:
         62:c1:9f:bc:c2:c5:ce:2c:08:cb:cb:2f:95:50:32:e0:18:62:
         15:3e:8e:24:53:8a:36:27:a7:9a:1c:79:aa:40:74:3d:ab:ff:
         07:cf:3a:ae:b2:6b:e9:e9:22:db:2a:f1:10:f6:86:56:98:43:
         a1:c2:2b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:06:31 2025 by rpki-client