Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS21743.roa
File:                     AS21743.roa (raw, json)
Hash identifier:          r3NYHDiut5bJeLJ6ORbAG2tHlEvACiRJTJLswBSH/Zk=
Subject key identifier:   41:27:23:BE:79:6A:D7:A5:42:F0:18:AE:D2:29:A2:07:AE:04:14:3D
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       30A1209B0E714930F820B0334A4914C20E7871B2
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS21743.roa
Signing time:             Thu 02 Jan 2025 00:28:23 +0000
ROA not before:           Thu 02 Jan 2025 00:23:23 +0000
ROA not after:            Thu 01 Jan 2026 00:28:23 +0000
asID:                     21743
IP address blocks:        64.50.167.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a1:20:9b:0e:71:49:30:f8:20:b0:33:4a:49:14:c2:0e:78:71:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jan  2 00:23:23 2025 GMT
            Not After : Jan  1 00:28:23 2026 GMT
        Subject: CN=412723BE796AD7A542F018AED229A207AE04143D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:24:2c:c5:1b:43:9a:35:55:f6:48:5e:da:
                    97:cf:38:4b:5c:2b:e3:4f:a1:eb:a6:45:ee:9d:d1:
                    c9:29:72:10:34:d7:e6:94:83:dc:07:42:ab:6a:21:
                    7d:fa:93:bc:08:55:6c:2c:04:ec:c5:e9:be:fd:38:
                    70:48:99:14:34:b5:dc:ed:01:ae:56:56:a5:6c:d7:
                    61:a6:0f:90:28:c0:40:1e:e9:b9:8c:0c:02:88:61:
                    ba:5e:cb:14:54:6d:91:e7:ce:88:ec:6f:66:32:52:
                    69:eb:d2:2c:8e:bf:1d:de:57:34:67:6c:79:ab:09:
                    6f:f6:e4:1a:62:f3:06:c3:a0:7e:dc:81:e1:2d:b3:
                    b4:a9:14:af:fd:47:f2:40:69:eb:f2:f5:3e:c6:01:
                    3d:b8:3d:d2:3d:c8:df:91:26:85:18:d5:76:93:de:
                    db:ac:4d:9a:75:1b:4c:ed:a0:9b:c6:bc:86:a1:0e:
                    25:42:d6:98:97:14:63:90:83:51:3c:d1:3b:27:e8:
                    22:ba:8a:a9:d4:5a:13:11:1c:5e:7e:88:97:e7:3b:
                    bb:19:eb:36:5a:32:fc:98:db:07:05:d3:86:f6:c8:
                    10:9d:60:72:03:2c:b3:f2:cf:e2:d9:4e:7a:18:1a:
                    01:33:2b:ed:db:0e:c6:dc:63:73:ca:82:e9:ef:b4:
                    36:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:27:23:BE:79:6A:D7:A5:42:F0:18:AE:D2:29:A2:07:AE:04:14:3D
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS21743.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:cd:7f:39:cc:62:b1:11:f1:14:7c:ce:91:d6:7b:21:fb:0b:
         d4:4b:83:7e:23:93:5f:6e:35:37:0a:b8:ec:55:8c:f1:71:60:
         28:21:5b:d0:43:6a:57:ae:c6:92:23:ac:1c:f5:57:9f:78:86:
         35:48:cd:ce:93:85:20:19:89:f1:77:12:17:60:c9:0b:21:2e:
         80:69:b3:93:23:89:dc:29:ad:8a:04:0b:ca:44:e2:fe:3d:a0:
         91:54:cc:e4:86:0d:0f:80:35:36:cf:39:b6:b3:69:4c:93:84:
         3e:b0:72:12:b9:78:d2:10:8a:f0:bb:a8:68:d7:52:24:75:74:
         d8:65:e7:ea:0d:dc:ed:a0:f3:ef:4d:e3:1d:4e:e5:09:ba:51:
         b4:9c:b2:29:b6:35:88:e9:0b:d3:fe:c8:bd:5a:0e:bd:f8:10:
         d3:a3:fb:f9:a4:01:ae:dc:2c:6e:01:d6:8c:83:06:c5:e4:34:
         20:37:38:7d:df:a2:de:5b:0b:97:f5:fb:15:a5:e3:48:fb:66:
         a6:60:e0:5f:3f:fc:71:7f:6c:aa:3f:8e:c4:49:36:62:38:52:
         51:7f:7c:2a:8d:a7:7d:76:68:29:52:ce:e9:a3:6b:ec:2e:19:
         e4:36:68:28:60:dd:70:76:e7:7e:da:0d:11:59:c3:82:e2:7f:
         d6:79:8f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:20:03 2025 by rpki-client