Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62164.roa
File:                     AS62164.roa (raw, json)
Hash identifier:          N4XfuCI11oEZ61Lo30F1TBOgPJ/B+zOq+tS9g2kaQt4=
Subject key identifier:   20:53:E6:8A:2B:6B:A3:B1:65:D6:74:34:85:A4:78:43:56:DD:69:E1
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       3264B66FD5A9EB57CBDBC40E00AA452FBB3F362E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62164.roa
Signing time:             Thu 13 Mar 2025 09:50:39 +0000
ROA not before:           Thu 13 Mar 2025 09:45:39 +0000
ROA not after:            Thu 12 Mar 2026 09:50:39 +0000
asID:                     62164
IP address blocks:        107.172.33.0/24 maxlen: 24
                          198.12.100.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:64:b6:6f:d5:a9:eb:57:cb:db:c4:0e:00:aa:45:2f:bb:3f:36:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 13 09:45:39 2025 GMT
            Not After : Mar 12 09:50:39 2026 GMT
        Subject: CN=2053E68A2B6BA3B165D6743485A4784356DD69E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0c:1c:2c:db:bd:ba:ae:d1:ba:4d:7a:de:16:
                    64:20:81:22:27:6f:6f:92:b0:26:4e:4a:dd:9f:ae:
                    7d:d2:ac:27:72:5d:d1:ed:20:39:a9:f9:bf:6b:2a:
                    a6:e4:58:27:d8:bb:26:52:d0:44:2c:01:92:14:4e:
                    80:8e:36:7e:6f:e7:51:41:7a:7b:09:6a:39:ac:3d:
                    fd:99:ba:d5:59:61:d8:d8:d1:71:32:b3:53:fd:2f:
                    eb:2b:20:a2:f5:3a:0f:68:18:a3:f8:cc:90:90:bd:
                    0c:30:2c:87:a1:79:38:f1:d0:04:52:a5:ee:81:83:
                    aa:9a:40:53:4a:63:2f:ad:f2:a0:d9:eb:09:30:dc:
                    6a:7c:01:12:63:0e:87:c3:18:65:9e:91:07:88:64:
                    4d:2a:ca:db:53:ba:4f:ec:62:43:cd:4e:5d:80:0f:
                    af:33:4c:83:4f:fc:a2:15:26:b7:f8:1b:9a:e9:73:
                    cb:db:6a:8b:54:91:d9:18:38:9c:d9:48:f9:d6:e5:
                    0d:6c:33:6c:14:7e:d9:08:37:52:4d:f9:0d:08:62:
                    a6:93:51:d2:05:ef:4d:aa:3b:51:8c:c4:8f:e3:8f:
                    53:72:de:6c:e8:38:88:68:e0:25:d6:7a:97:5a:3c:
                    ca:96:b2:0a:57:9c:61:2c:80:48:da:c2:06:5c:22:
                    ae:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:53:E6:8A:2B:6B:A3:B1:65:D6:74:34:85:A4:78:43:56:DD:69:E1
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62164.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.172.33.0/24
                  198.12.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:81:6d:41:bf:2b:45:34:1a:fe:05:99:5c:98:59:e9:4d:4f:
         e6:c5:b0:b5:f5:4e:31:5c:d9:d0:c6:25:e0:8a:d1:e8:a6:5e:
         9d:5f:7f:99:af:63:6d:80:e7:f4:d5:ba:c1:16:6b:3e:ee:bb:
         06:63:54:ce:e5:57:59:f1:28:c9:24:54:b8:bb:e6:2b:84:58:
         ab:d5:65:ca:8a:5b:5d:d0:e1:a7:87:63:8a:19:17:5d:d2:6e:
         42:ca:ae:dc:21:cf:71:f0:4a:6b:cd:30:c3:22:e9:f2:88:66:
         f6:a0:19:8e:a4:8c:31:0c:5c:b1:22:06:73:29:a1:cf:84:c7:
         3c:17:a4:dd:6b:c9:a8:50:e0:6e:59:d5:c1:64:d2:b7:fc:9c:
         68:1d:7f:da:a7:35:8c:fe:45:03:59:a0:a3:0e:29:23:3d:ff:
         61:a9:95:c1:99:36:e6:79:ed:38:27:48:5c:3e:b3:9d:46:ce:
         de:1f:2e:c9:f9:f1:73:8b:c7:60:ea:47:70:10:83:b5:fb:72:
         6e:be:e3:ad:eb:bc:0f:b3:81:a1:1d:44:75:c9:77:f2:73:8a:
         50:41:58:dc:04:ea:05:bd:ac:a1:e4:a6:df:6d:61:18:e1:6d:
         37:ed:9c:e2:e8:d9:bb:bd:cc:7e:d1:79:b5:df:7e:38:2c:51:
         e9:fb:24:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:30:14 2025 by rpki-client