Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS399045.roa
File:                     AS399045.roa (raw, json)
Hash identifier:          oUTjlaVWFxeUO8PpPxGuchfFdY2fjhqXEANHHLj/g6Q=
Subject key identifier:   69:00:66:78:07:F9:85:D9:D9:21:B3:11:03:50:DF:A7:5D:6F:2E:EF
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5EEAD462BE24538F1BBD20CD318AF11448C3666B
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS399045.roa
Signing time:             Sun 02 Jun 2024 20:31:42 +0000
ROA not before:           Sun 02 Jun 2024 20:26:42 +0000
ROA not after:            Sun 01 Jun 2025 20:31:42 +0000
asID:                     399045
IP address blocks:        23.94.89.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ea:d4:62:be:24:53:8f:1b:bd:20:cd:31:8a:f1:14:48:c3:66:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jun  2 20:26:42 2024 GMT
            Not After : Jun  1 20:31:42 2025 GMT
        Subject: CN=6900667807F985D9D921B3110350DFA75D6F2EEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:de:9e:8f:7d:48:4f:96:02:8c:af:4c:ea:2a:
                    d4:f2:ba:60:df:1f:f2:76:68:86:48:df:01:25:93:
                    75:cc:53:ea:55:98:9a:20:1a:db:a6:e8:e1:33:44:
                    02:27:0d:ed:c6:cb:2d:65:f0:92:10:3b:2b:a7:10:
                    34:77:e6:a9:a0:be:06:62:f8:e2:f7:0d:92:a7:e9:
                    49:73:63:64:70:74:79:46:55:89:e8:4e:09:bd:35:
                    5b:b8:a7:cf:22:92:62:b1:83:64:21:45:2d:a4:3a:
                    02:63:d1:36:f6:1d:f4:a7:c9:93:a6:a7:0b:90:30:
                    2f:e4:7f:5a:9a:73:9a:d2:ec:1e:cc:a2:af:3e:08:
                    6c:09:db:eb:99:49:96:a4:2b:5d:d8:7e:93:4f:d2:
                    e7:00:3c:58:c9:2d:83:92:64:ba:e6:38:ac:15:a8:
                    98:26:02:4e:ce:9d:94:21:d0:06:aa:27:fb:49:8e:
                    cf:c2:74:f4:d4:4c:2c:1d:ae:22:b6:e4:88:8c:69:
                    5d:fe:cd:f4:20:d5:d5:b5:c1:be:ef:62:55:f5:93:
                    18:0b:ef:f0:c9:fd:dc:5e:36:ed:dc:c7:83:bb:6e:
                    62:fa:6d:33:e1:31:41:b0:41:71:25:ee:b6:23:57:
                    53:f8:ca:45:36:3b:55:ba:28:94:b2:00:12:03:05:
                    bb:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:00:66:78:07:F9:85:D9:D9:21:B3:11:03:50:DF:A7:5D:6F:2E:EF
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS399045.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:87:33:67:59:32:e5:84:73:6b:ec:42:4b:fd:8d:6d:e0:d6:
         21:7e:6c:fb:5e:7b:66:54:28:19:1c:c4:f4:93:95:b6:8d:d3:
         fc:6d:75:ab:9a:64:17:78:bd:a9:0f:14:1b:5b:7d:b7:61:63:
         75:4f:fd:18:40:92:fc:b0:8f:76:cd:a3:c9:f6:74:f1:2f:e1:
         37:c9:ad:0a:2c:aa:2a:5b:b8:f0:bc:2b:c5:35:f0:9c:0a:6b:
         4f:be:20:98:70:1b:fd:18:89:8c:0c:4d:fc:28:e9:0d:63:ff:
         ba:05:2d:c9:3e:e8:47:52:4a:46:bc:57:f8:0d:c9:c4:40:62:
         5b:1a:ef:e4:c9:6a:51:b7:54:4b:2f:5b:f2:dc:d9:b7:49:4f:
         ea:93:44:d9:27:77:31:29:63:5d:1b:8b:ef:a0:62:dc:2e:a2:
         e6:3b:7b:18:aa:ea:d4:33:e7:9e:f0:7f:12:6e:f2:0a:12:54:
         b7:95:ac:87:aa:9b:03:85:21:a3:54:74:30:91:41:ae:ce:f1:
         05:aa:0b:c1:68:01:6d:46:a9:cf:2c:db:f4:a3:26:62:8c:1b:
         e1:9c:e4:46:f3:e2:f4:19:4d:68:0f:1f:1e:3a:82:6b:8f:92:
         53:5b:28:dc:da:af:2e:27:3b:7a:48:51:52:5d:f6:19:cb:11:
         cc:a5:07:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:02 2025 by rpki-client