Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS25369.roa
File:                     AS25369.roa (raw, json)
Hash identifier:          pCTqXgmRGXlrzKDFVBa1A96as2nPZZWoKmBxTtFt2W4=
Subject key identifier:   6D:36:5A:51:32:A6:35:7C:80:36:A5:E5:AB:64:09:CE:5A:59:48:0C
Certificate issuer:       /CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
Certificate serial:       29B7324850B6CE4C06385D7F60A424E995985F14
Authority key identifier: 90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS25369.roa
Signing time:             Thu 10 Nov 2022 13:38:26 +0000
ROA not before:           Thu 10 Nov 2022 13:33:26 +0000
ROA not after:            Thu 09 Nov 2023 13:38:26 +0000
asID:                     25369
IP address blocks:        74.50.12.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b7:32:48:50:b6:ce:4c:06:38:5d:7f:60:a4:24:e9:95:98:5f:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66
        Validity
            Not Before: Nov 10 13:33:26 2022 GMT
            Not After : Nov  9 13:38:26 2023 GMT
        Subject: CN=6D365A5132A6357C8036A5E5AB6409CE5A59480C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:6f:bb:a5:18:0a:83:5e:cd:09:ef:db:9b:
                    59:37:1b:86:c3:c7:db:25:f1:95:ae:38:d0:ce:78:
                    99:96:44:6c:66:ec:e0:90:03:2f:c2:e4:72:ba:93:
                    02:29:dc:6b:69:4c:18:ff:06:c8:b5:c9:e8:5d:4b:
                    6e:7b:65:5c:c6:4a:fa:95:44:9d:c5:d3:89:c6:7d:
                    71:dc:fc:3d:bf:74:37:15:0a:fa:78:a6:1a:0a:d3:
                    e2:df:53:dd:3c:87:86:ab:6b:c1:30:55:21:a7:6a:
                    43:64:b2:94:f8:7d:07:a1:0c:c8:b3:35:f8:2f:25:
                    1c:3a:77:b2:d4:b3:85:7a:8a:9f:75:c7:e3:5f:54:
                    ea:b8:af:5a:1a:bc:dd:5f:a0:e0:c2:9a:fe:97:28:
                    79:d6:b2:18:18:9f:9f:0b:70:40:49:a7:2a:25:14:
                    d3:23:85:70:45:51:64:99:aa:61:41:26:44:3e:dd:
                    bc:9e:9f:a1:0a:61:d5:9a:ec:54:f0:de:4a:ce:f8:
                    42:a9:ab:27:2e:49:ff:94:f3:33:49:65:44:6a:f7:
                    35:cb:bc:3b:fd:d4:a1:16:96:44:b6:20:90:91:5b:
                    3d:bd:d5:d5:9b:fe:10:f7:27:48:2d:bf:83:b6:7b:
                    95:31:26:0c:5c:a6:e9:52:ce:57:c4:1d:ec:48:19:
                    26:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:36:5A:51:32:A6:35:7C:80:36:A5:E5:AB:64:09:CE:5A:59:48:0C
            X509v3 Authority Key Identifier:
                keyid:90:B3:71:62:ED:9D:B1:57:13:49:44:03:4E:D0:ED:BA:37:81:8D:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/90B37162ED9DB157134944034ED0EDBA37818D6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d10325405f634d3d034a7bd94ff468f7b216797a45d66.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/0/AS25369.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:88:24:4c:21:30:1e:4e:1d:88:37:d2:fb:d8:c4:27:91:14:
         da:97:e9:97:96:4b:d0:15:a2:69:e1:82:20:70:f3:c8:5c:6e:
         44:c5:61:19:ef:c6:d7:0b:cd:49:de:f9:27:6b:a2:7a:e6:7e:
         06:f5:ae:d1:48:f7:9f:bb:18:d0:bd:42:16:b9:e9:c0:ea:0e:
         99:92:16:25:16:57:a2:f2:db:ac:ce:f6:c5:82:c5:09:b5:54:
         b2:9a:5d:87:7c:8b:4d:54:d0:d9:44:6b:f3:d3:25:12:b3:12:
         6f:d0:f8:09:cf:29:3d:f7:3c:64:ba:12:95:ca:89:9b:19:aa:
         ac:a6:d0:90:42:a5:56:8c:59:3c:7a:e5:1e:7f:68:52:4e:54:
         e8:49:fe:77:6e:00:49:ad:4f:f3:10:e4:fc:45:73:ac:74:2a:
         b2:57:25:5e:f0:a0:27:8d:2e:d2:10:1c:96:b7:02:80:bc:a5:
         a8:0b:8f:d5:2c:b5:97:be:e1:56:ff:47:1a:8a:4d:12:58:78:
         9a:d9:39:db:8a:1f:74:ca:7c:98:ff:e3:79:6e:f5:47:2a:41:
         71:73:ac:e3:10:2d:5f:25:92:1d:62:d6:df:27:fe:e7:b0:ce:
         a5:b7:14:d5:7a:26:fe:53:c6:85:8c:a7:2c:cb:5a:99:34:04:
         46:d3:8b:42
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUKbcySFC2zkwGOF1/YKQk6ZWYXxQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjU0MDVmNjM0ZDNkMDM0YTdiZDk0ZmY0
NjhmN2IyMTY3OTdhNDVkNjYwHhcNMjIxMTEwMTMzMzI2WhcNMjMxMTA5MTMzODI2
WjAzMTEwLwYDVQQDEyg2RDM2NUE1MTMyQTYzNTdDODAzNkE1RTVBQjY0MDlDRTVB
NTk0ODBDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvHBvu6UYCoNe
zQnv25tZNxuGw8fbJfGVrjjQzniZlkRsZuzgkAMvwuRyupMCKdxraUwY/wbItcno
XUtue2Vcxkr6lUSdxdOJxn1x3Pw9v3Q3FQr6eKYaCtPi31PdPIeGq2vBMFUhp2pD
ZLKU+H0HoQzIszX4LyUcOney1LOFeoqfdcfjX1TquK9aGrzdX6Dgwpr+lyh51rIY
GJ+fC3BASacqJRTTI4VwRVFkmaphQSZEPt28np+hCmHVmuxU8N5KzvhCqasnLkn/
lPMzSWVEavc1y7w7/dShFpZEtiCQkVs9vdXVm/4Q9ydILb+DtnuVMSYMXKbpUs5X
xB3sSBkmnwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFG02WlEypjV8gDal5atkCc5a
WUgMMB8GA1UdIwQYMBaAFJCzcWLtnbFXE0lEA07Q7bo3gY1uMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzAv
OTBCMzcxNjJFRDlEQjE1NzEzNDk0NDAzNEVEMEVEQkEzNzgxOEQ2RS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNTQwNWY2MzRkM2QwMzRhN2JkOTRmZjQ2OGY3YjIxNjc5N2E0NWQ2Ni5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMC9BUzI1MzY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASjIMMA0GCSqGSIb3DQEBCwUAA4IB
AQBfiCRMITAeTh2IN9L72MQnkRTal+mXlkvQFaJp4YIgcPPIXG5ExWEZ78bXC81J
3vkna6J65n4G9a7RSPefuxjQvUIWuenA6g6ZkhYlFlei8tuszvbFgsUJtVSyml2H
fItNVNDZRGvz0yUSsxJv0PgJzyk99zxkuhKVyombGaqsptCQQqVWjFk8euUef2hS
TlToSf53bgBJrU/zEOT8RXOsdCqyVyVe8KAnjS7SEByWtwKAvKWoC4/VLLWXvuFW
/0caik0SWHia2Tnbih90ynyY/+N5bvVHKkFxc6zjEC1fJZIdYtbfJ/7nsM6ltxTV
eib+U8aFjKcsy1qZNARG04tC
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:07 2024 by rpki-client on console-fra.rpki-client.org