Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS19318.roa
File:                     AS19318.roa (raw, json)
Hash identifier:          8d300h7P+F1/PO+quyOVbe40QGrwdixRp57td+DCjiA=
Subject key identifier:   73:2B:B6:19:55:25:A9:A5:51:FF:62:2E:39:99:E2:66:A7:E4:C8:9E
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       688840DF4C8CFD0077F14EA3271F8895CA079249
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS19318.roa
Signing time:             Tue 11 Feb 2025 20:17:50 +0000
ROA not before:           Tue 11 Feb 2025 20:12:50 +0000
ROA not after:            Tue 10 Feb 2026 20:17:50 +0000
asID:                     19318
IP address blocks:        23.95.162.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:88:40:df:4c:8c:fd:00:77:f1:4e:a3:27:1f:88:95:ca:07:92:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Feb 11 20:12:50 2025 GMT
            Not After : Feb 10 20:17:50 2026 GMT
        Subject: CN=732BB6195525A9A551FF622E3999E266A7E4C89E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:be:7d:b3:0c:33:ca:0b:a4:26:ef:43:cf:
                    73:61:2d:37:e3:d8:da:09:7a:e7:df:91:0b:12:1f:
                    f4:7b:10:92:e7:ff:da:f0:b8:45:19:8c:56:e5:d2:
                    44:57:3c:9c:e8:a0:f7:0a:82:b4:ca:ba:42:9f:8c:
                    c0:5e:6e:96:30:3a:d8:21:f2:fe:fe:26:c6:84:8e:
                    c8:36:8e:42:91:45:4a:fc:40:95:6c:1e:92:69:e2:
                    b0:79:84:42:a2:a5:c6:a3:9a:7e:7b:00:b3:da:71:
                    70:08:f1:de:ff:80:59:b8:93:d0:ba:a0:db:20:ba:
                    15:e8:e0:84:74:64:28:1a:3d:f0:9d:05:aa:ef:a4:
                    a6:5d:66:a6:71:fc:1f:92:2d:c6:a1:d8:0d:08:79:
                    4d:bd:65:5a:4a:60:2c:aa:ef:c1:ca:a0:91:8b:ec:
                    85:f2:84:1f:a9:86:fc:e5:c7:3a:ed:06:a3:33:8d:
                    0b:01:36:4a:54:da:4d:06:ff:74:f8:f7:e3:7b:29:
                    09:a4:8a:f9:b5:aa:6c:d6:d9:34:27:73:4b:5c:3d:
                    c7:fc:bd:1a:68:04:4c:ca:8a:fa:b4:6e:94:8d:70:
                    82:a2:16:61:50:05:c0:59:1a:4a:5b:4f:37:8f:c5:
                    70:74:c8:60:9c:bc:5a:b2:ff:04:88:9f:12:34:29:
                    29:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:2B:B6:19:55:25:A9:A5:51:FF:62:2E:39:99:E2:66:A7:E4:C8:9E
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS19318.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:a1:00:d9:9e:6e:e7:81:84:fa:4d:84:e7:ba:b3:a4:f3:b2:
         54:65:e0:86:87:90:5e:e8:ac:72:4d:3c:59:78:c9:3f:3a:58:
         44:2f:78:8c:a3:f7:9f:75:4f:52:8a:5c:e6:cb:7d:b6:e0:9d:
         65:26:d0:c7:07:ad:21:7b:1c:40:4d:45:f0:33:05:b3:a3:aa:
         e2:47:32:0c:91:ff:f2:8a:b5:76:20:fa:78:6b:13:04:04:28:
         ee:b4:6a:5f:9b:f7:07:99:67:73:da:e4:c2:09:f8:b2:5f:d9:
         6a:7d:b0:b1:1b:99:84:3e:28:06:9e:a9:49:a1:2c:20:5d:df:
         d4:c3:4d:f9:8b:43:b6:a3:de:93:f1:86:64:cd:57:f4:07:f6:
         f4:7d:e5:9c:7e:2f:ae:db:bd:0a:07:44:16:dd:58:42:77:58:
         8a:b9:db:57:94:ad:af:da:0b:6c:fd:6c:41:5d:a6:f7:1a:9a:
         14:f9:b2:d3:a4:95:fa:0e:f9:c1:4e:c7:6d:43:16:d6:01:5b:
         d5:4d:4c:d5:f1:15:41:76:5e:52:00:3e:be:cf:09:77:ba:96:
         bd:06:64:4e:a6:83:e5:66:da:2a:53:ef:f5:7e:a4:b4:49:08:
         03:68:68:8e:e8:19:6f:85:96:76:24:c3:4d:60:33:d5:89:72:
         e2:d4:60:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:32:23 2025 by rpki-client