Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139332e3132382e302f31372d3137203d3e2035363530.roa
File:                     34372e3139332e3132382e302f31372d3137203d3e2035363530.roa (raw, json)
Hash identifier:          zzFsOppKfcWpaRfVkmE0rqymGzKMKhgybIEeIoeXNrI=
Subject key identifier:   1B:6F:B1:9C:8C:28:80:85:D9:63:98:73:33:67:23:2B:F9:85:E5:BE
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       6E682A413F873C0C6C54D852B0B0A7699EB69CBC
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139332e3132382e302f31372d3137203d3e2035363530.roa
Signing time:             Tue 25 Feb 2025 05:08:51 +0000
ROA not before:           Tue 25 Feb 2025 05:03:51 +0000
ROA not after:            Tue 24 Feb 2026 05:08:51 +0000
asID:                     5650
IP address blocks:        47.193.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:68:2a:41:3f:87:3c:0c:6c:54:d8:52:b0:b0:a7:69:9e:b6:9c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Feb 25 05:03:51 2025 GMT
            Not After : Feb 24 05:08:51 2026 GMT
        Subject: CN=1B6FB19C8C288085D96398733367232BF985E5BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:df:c1:18:b6:3a:8d:cc:3e:29:35:f2:4d:61:
                    55:e0:13:a3:e8:af:77:c6:5c:29:36:94:82:04:90:
                    6f:0e:64:38:4c:cc:68:61:5f:15:6c:27:9b:e4:7d:
                    e5:ca:58:0c:f1:a0:9e:17:69:45:4c:c9:62:da:c7:
                    e8:e7:52:6f:a2:23:e7:44:92:c9:5a:75:40:05:1c:
                    d3:f2:df:07:cd:d1:3a:d1:fc:4c:cb:83:23:5d:6a:
                    99:45:0a:ff:6f:93:0d:ee:5e:16:05:c3:8a:3f:61:
                    08:5a:29:b1:1f:06:df:99:c4:28:59:16:84:04:39:
                    06:d3:76:e7:9f:31:67:b5:ce:e7:51:90:77:60:9c:
                    8d:cd:3f:17:18:3b:f1:d8:31:ca:0d:06:3b:f8:5d:
                    d7:89:89:d8:7a:65:c2:bb:8d:15:fe:7b:0d:e2:01:
                    a0:3c:74:06:e1:df:ea:89:43:b7:43:3e:46:0a:9e:
                    d0:41:af:f4:30:7f:1b:e4:b5:64:e9:80:d0:82:40:
                    56:7f:75:d0:53:f4:78:db:ca:aa:4a:69:f9:8c:3c:
                    0d:29:6d:31:98:24:b9:79:7d:fc:13:81:e1:b8:9a:
                    a6:ea:97:dc:79:c1:88:b1:d8:af:3e:37:45:ec:f8:
                    79:44:94:41:85:64:36:4b:79:53:df:5a:1f:15:36:
                    1a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:6F:B1:9C:8C:28:80:85:D9:63:98:73:33:67:23:2B:F9:85:E5:BE
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/34372e3139332e3132382e302f31372d3137203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.193.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         72:98:65:24:18:0c:e2:de:66:17:04:27:9a:02:94:36:c8:a3:
         1c:d8:36:7c:d6:8b:50:8c:d4:ec:06:ba:02:97:03:b9:28:7d:
         97:44:c0:27:8c:31:20:9b:c8:13:09:fb:6c:0e:f4:5b:91:30:
         72:77:47:26:25:a9:45:82:73:05:3c:e2:d2:f6:23:e7:03:44:
         1c:91:d1:b3:dc:5d:87:d9:8e:6f:3c:95:e7:f4:c1:f5:7e:e8:
         f1:8e:a8:a0:e4:f4:e5:f1:bf:66:e5:74:0b:a7:99:4d:94:36:
         64:7e:07:70:1b:25:56:66:a2:7a:41:8c:c1:4e:11:4d:d1:a5:
         88:5d:30:7e:2e:3b:1d:be:74:4c:07:43:69:5b:96:c2:41:4d:
         db:2b:a4:3f:6b:45:2c:ee:27:2b:fd:90:32:0f:88:77:a1:9d:
         70:57:8b:24:fb:c2:99:b8:04:1c:19:ce:19:1d:6e:c9:f2:ec:
         eb:ce:0b:0d:36:c4:5d:4c:9e:b7:5d:a0:e8:4e:2e:9c:3c:e2:
         14:b4:c2:39:f4:6d:5e:25:5d:3d:67:4e:30:ba:6d:bb:e3:96:
         da:4b:4b:6c:0c:e5:44:26:7e:28:79:c7:c7:11:d5:e8:ec:9f:
         6f:1c:63:c9:ef:d0:18:05:d4:5c:ad:27:12:a9:86:a8:e2:7c:
         14:bc:4e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:58:35 2025 by rpki-client