Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS55286.roa
File:                     AS55286.roa (raw, json)
Hash identifier:          7ioGcd/62OysJpZ5rHz2jia6l02h8O6kFsocdD13OTg=
Subject key identifier:   E1:8C:3C:6D:C3:B2:A4:01:48:5F:7B:FB:1A:F9:9F:E3:EA:CF:75:21
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       72DD3DE0D2D165E435DA9374F666EF69F23BBF55
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS55286.roa
Signing time:             Fri 07 Feb 2025 14:28:26 +0000
ROA not before:           Fri 07 Feb 2025 14:23:26 +0000
ROA not after:            Fri 06 Feb 2026 14:28:26 +0000
asID:                     55286
IP address blocks:        172.245.0.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:dd:3d:e0:d2:d1:65:e4:35:da:93:74:f6:66:ef:69:f2:3b:bf:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Feb  7 14:23:26 2025 GMT
            Not After : Feb  6 14:28:26 2026 GMT
        Subject: CN=E18C3C6DC3B2A401485F7BFB1AF99FE3EACF7521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a7:31:1e:e1:31:c4:f1:96:be:4d:17:7c:83:
                    5c:3c:30:c5:54:dc:23:c5:ad:62:69:20:1e:cf:cc:
                    ad:66:06:ba:d4:a6:cd:b9:1b:04:6c:8b:54:5d:6b:
                    ae:68:21:8b:46:0e:a1:d6:9d:6a:bb:9a:65:0d:32:
                    89:c1:32:b4:9d:9b:79:aa:e9:4d:63:d6:45:2c:5f:
                    40:28:99:dc:55:30:66:9f:a0:c1:6c:14:e9:74:73:
                    e0:e7:89:76:8d:d3:3a:37:18:70:1e:ac:4f:f7:3e:
                    74:01:5e:c3:16:e4:a0:ad:f3:19:52:08:8c:70:84:
                    3b:92:9b:06:85:24:12:ac:4a:0d:fc:56:c1:45:5c:
                    70:56:20:37:b5:df:a5:ce:60:7c:2e:fd:41:ef:35:
                    f1:1e:4b:b8:b9:9b:65:a5:6b:8f:f9:33:63:2d:cc:
                    81:bc:51:45:44:99:a1:98:ad:e8:b1:f2:d0:03:9e:
                    b8:e1:6c:88:44:df:8c:cc:01:80:2c:a8:78:c0:7f:
                    8f:3e:a5:70:f0:e8:9f:93:85:bb:5e:3e:86:45:17:
                    4a:25:4e:ca:64:fa:e6:2c:f0:88:59:f8:1b:4d:58:
                    a7:19:79:67:1c:fe:37:e6:e6:00:1f:a4:79:8a:5a:
                    28:0d:90:8a:5a:31:4c:49:8b:e0:0e:d2:36:ec:8b:
                    a6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8C:3C:6D:C3:B2:A4:01:48:5F:7B:FB:1A:F9:9F:E3:EA:CF:75:21
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS55286.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.245.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         66:d1:7b:a5:ea:b7:5e:8b:1c:9e:f8:8c:47:0f:79:bf:a9:f2:
         e0:04:36:24:44:7f:50:67:9d:f9:9b:f9:fe:a0:9a:5d:03:ff:
         17:96:35:2e:7a:72:bf:95:cb:b5:cf:99:ac:59:f0:30:e0:4c:
         67:76:55:18:a1:0c:ec:96:7a:ec:47:76:2e:11:f5:58:79:91:
         94:2e:32:d6:08:d5:35:b7:ed:e6:68:85:7b:06:7d:70:0c:ed:
         92:ca:3f:57:55:8a:c8:60:40:b2:1a:2d:e7:c2:6e:c1:9b:4c:
         db:67:74:ac:1e:2b:f9:94:2f:f7:e2:dd:ca:f2:bc:7a:00:75:
         e9:72:5e:36:7b:14:18:db:5a:3d:49:02:ed:f4:07:0b:c7:ff:
         c3:dc:de:07:c1:2c:7c:42:8b:d7:9e:0e:54:82:37:1a:6f:42:
         05:85:9e:91:05:39:40:36:c9:0b:bc:c6:20:05:7f:c9:07:15:
         08:bf:40:e5:0f:77:82:a6:f7:0b:98:7d:7e:8b:df:f9:56:ea:
         0d:ca:49:85:4d:fc:0f:9a:4c:49:c3:ea:89:bb:f4:21:74:d8:
         d4:28:f4:15:a3:e0:c5:da:ba:81:78:96:db:bb:13:31:04:17:
         1f:39:57:52:8b:1a:56:f7:d6:7e:93:2e:ee:be:aa:db:94:dc:
         1e:40:cc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:23:38 2025 by rpki-client