Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3232352e302f32342d3234203d3e203535313534.roa
File:                     3230392e3230302e3232352e302f32342d3234203d3e203535313534.roa (raw, json)
Hash identifier:          +jAIr2sLiI7ZCKe+hNmyFNAV2HvM82KGA4R+uFiuRvs=
Subject key identifier:   50:49:54:B2:E8:DA:26:84:F2:33:B1:9B:5D:4A:FB:60:CC:55:B2:44
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       3BCFECC1BD33A6BD70052383BE6048197E3F5D49
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3232352e302f32342d3234203d3e203535313534.roa
Signing time:             Wed 16 Nov 2022 11:29:04 +0000
ROA not before:           Wed 16 Nov 2022 11:24:04 +0000
ROA not after:            Wed 15 Nov 2023 11:29:04 +0000
asID:                     55154
IP address blocks:        209.200.225.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:cf:ec:c1:bd:33:a6:bd:70:05:23:83:be:60:48:19:7e:3f:5d:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 16 11:24:04 2022 GMT
            Not After : Nov 15 11:29:04 2023 GMT
        Subject: CN=504954B2E8DA2684F233B19B5D4AFB60CC55B244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:4b:86:9f:f9:21:0f:0a:52:1c:45:d1:f3:3d:
                    61:42:60:7e:00:5c:14:b3:ef:52:e0:f5:24:b2:9d:
                    cb:3b:a7:e1:d5:68:cc:d5:86:c1:66:6d:92:25:78:
                    3c:29:a6:29:bb:3a:c8:69:12:8e:d6:4a:c3:61:5c:
                    6d:d6:22:1a:7e:d6:98:82:82:43:ab:7c:d5:db:66:
                    72:3a:5a:5d:3a:11:46:b6:7b:a8:c6:68:22:79:09:
                    6b:31:bc:66:63:8e:21:05:fe:f0:c7:8b:bb:1d:97:
                    9e:4b:49:a7:c1:48:76:8b:83:d1:99:ab:59:f2:7d:
                    50:d2:ef:86:6b:47:06:00:86:3a:5e:8f:aa:2f:98:
                    9a:b4:f3:cd:79:ca:ab:b2:4a:32:1f:2b:b5:d9:43:
                    35:fe:af:bf:dc:42:ee:86:fc:23:0e:32:76:60:5c:
                    05:9d:a3:80:f6:11:6a:cf:d8:82:f7:23:6e:de:7f:
                    35:fe:46:47:3c:01:87:5c:fd:f2:a4:93:e5:0a:a8:
                    93:96:9f:28:a1:98:d2:21:6a:d4:c6:50:60:98:9b:
                    92:c4:79:a1:c9:f7:34:4c:ec:73:21:06:25:a1:cb:
                    23:86:50:95:30:4b:d4:2f:a2:24:90:4e:99:95:64:
                    02:af:5d:bb:65:b0:7d:2f:5a:40:03:c9:89:d1:35:
                    61:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:49:54:B2:E8:DA:26:84:F2:33:B1:9B:5D:4A:FB:60:CC:55:B2:44
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/3230392e3230302e3232352e302f32342d3234203d3e203535313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:fd:4f:e7:4e:6f:e5:85:7d:7f:52:24:75:c3:3e:2e:f5:64:
         67:93:32:04:25:fa:43:d3:5f:70:86:df:cf:29:27:d8:85:f3:
         52:45:98:ba:e0:38:f8:f3:3f:74:80:89:bf:cc:ed:6e:22:79:
         65:e9:18:4a:61:ab:00:4d:5e:c5:ce:4e:98:27:fc:bf:25:56:
         78:38:79:af:86:bc:3b:cc:93:65:1d:e0:d4:12:a3:18:03:b5:
         2e:38:01:cb:a5:e1:c8:5d:c2:87:12:a9:62:9a:7f:2d:05:1d:
         e7:14:84:84:34:dc:59:f7:39:44:95:51:ba:3e:f5:e1:50:db:
         3f:57:af:3c:dc:20:ba:2f:82:c8:ac:b0:d2:a4:82:fb:0c:2c:
         31:68:d2:a7:9c:31:0c:61:21:03:67:90:29:78:eb:fd:6b:c9:
         42:78:e1:c9:36:b8:ed:38:b8:25:14:8d:f7:7f:11:97:b1:74:
         b7:95:ff:a4:e6:06:9a:89:ed:c7:d2:7e:7c:0d:c0:b1:27:89:
         90:90:d3:26:e1:5b:ca:80:97:7f:08:37:49:a0:17:69:90:bc:
         1e:d4:a2:a8:16:3c:0f:a6:73:bd:be:a1:22:bb:ff:1c:fb:7b:
         a5:43:f1:0f:36:a1:1f:fb:84:56:d3:4c:ab:ea:89:3b:fd:cd:
         68:6f:9e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:39 2024 by rpki-client on console-ams.rpki-client.org