Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215304.roa
File:                     AS215304.roa (raw, json)
Hash identifier:          bSvssc0eZFWPN9INAJbEiFYdX4WjSTKg/QWpqfwl0ts=
Subject key identifier:   D6:69:78:14:39:AA:DD:8C:AD:E0:6F:89:41:D9:AB:DC:5E:6F:DD:12
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1CF3F2ACF831DB196A4792D85882BD1ACB1B34B0
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215304.roa
Signing time:             Tue 31 Dec 2024 13:22:16 +0000
ROA not before:           Tue 31 Dec 2024 13:17:16 +0000
ROA not after:            Tue 30 Dec 2025 13:22:16 +0000
asID:                     215304
IP address blocks:        74.50.0.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f3:f2:ac:f8:31:db:19:6a:47:92:d8:58:82:bd:1a:cb:1b:34:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Dec 31 13:17:16 2024 GMT
            Not After : Dec 30 13:22:16 2025 GMT
        Subject: CN=D669781439AADD8CADE06F8941D9ABDC5E6FDD12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:86:1b:cd:e1:15:27:47:64:47:68:fd:dd:bd:
                    d7:e4:84:42:cb:ec:6e:eb:05:d4:a5:25:d4:4d:2a:
                    ac:c6:a5:ac:81:ef:c4:4c:37:2c:7f:ee:98:34:75:
                    f7:aa:1b:b4:4b:b7:04:96:23:a4:53:8c:bd:39:f8:
                    ac:e5:96:e5:fc:87:47:f1:4c:d8:26:f1:c4:00:dd:
                    51:37:de:1d:2b:8c:d4:d0:27:10:ad:ff:3f:91:f6:
                    35:53:54:68:62:c6:d4:13:de:c1:1b:3e:ce:a1:94:
                    b8:70:a8:27:52:43:36:e1:cf:15:6d:30:b3:e3:05:
                    05:96:7d:4a:27:92:f6:93:1d:ce:7f:32:b3:07:85:
                    85:eb:f5:dd:29:74:d2:d0:91:28:9f:52:78:40:0b:
                    5e:f1:77:75:6d:18:35:6d:4a:8a:1b:bf:05:31:92:
                    46:ca:2b:5e:ec:ee:c3:b6:3b:31:2c:2b:cd:83:a4:
                    4b:32:e0:75:d7:65:d7:9a:ad:0f:63:3a:bd:e3:e0:
                    a4:ec:54:60:27:fe:c9:16:89:4d:59:c2:c2:47:69:
                    4d:eb:ae:e9:59:4b:3a:9d:c4:cd:89:60:7c:eb:1e:
                    16:a1:81:2d:4d:9e:41:fd:98:73:d4:d5:1e:14:48:
                    70:24:25:c7:ed:b3:33:22:7c:f4:05:64:e2:ce:2c:
                    03:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:69:78:14:39:AA:DD:8C:AD:E0:6F:89:41:D9:AB:DC:5E:6F:DD:12
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS215304.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.50.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:53:19:53:42:f0:c4:6b:ac:02:f9:0f:df:58:e6:7a:f7:64:
         1b:c6:21:db:12:43:bc:79:f8:65:88:87:6c:d4:1c:d6:cb:2e:
         1c:d5:07:a2:7f:59:01:13:75:ca:3e:d0:70:48:b1:e1:96:63:
         9e:07:8d:d2:77:a8:89:27:52:a5:d1:e2:08:55:75:28:2e:4f:
         13:27:f2:cc:66:81:50:c4:cf:b3:82:7c:a3:6a:69:e5:15:ed:
         d1:a6:4a:31:af:83:50:32:0b:f4:7f:92:7c:26:aa:cb:7a:ea:
         31:16:05:46:44:f4:4e:82:e9:ad:80:c6:ff:3c:3d:89:78:52:
         22:a2:88:19:91:84:bc:1d:fb:ce:c5:64:b4:24:07:28:d3:ad:
         91:e2:4e:c0:a0:0c:c2:aa:af:60:82:94:bb:59:0f:25:46:72:
         cd:8b:22:a8:28:77:f7:65:d1:34:1e:83:d4:c0:a4:ef:54:af:
         e0:ab:e8:7b:4a:87:66:7b:73:d4:ad:ca:39:90:93:19:20:f6:
         ec:fb:d4:b0:e7:9b:25:8b:90:c9:4f:0c:78:d8:b0:73:44:9b:
         a1:f3:2c:51:9b:1b:e5:04:35:3e:46:cd:8d:be:63:92:44:5e:
         1f:1b:96:9e:e1:71:ac:f1:2e:dd:1e:1f:a1:1a:07:b2:f8:74:
         e4:5a:a0:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:26 2025 by rpki-client