Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS64267.roa
File:                     AS64267.roa (raw, json)
Hash identifier:          EHlqQUIgQpTuEC0GyZcCELWXqxgyncn/VMASKyISitI=
Subject key identifier:   77:20:79:7E:53:C6:41:18:84:E3:68:14:A7:7B:30:1D:DC:6C:6D:A3
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       5FCDFA8358FE6A75B989D6A99FD81CC1C59403FD
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS64267.roa
Signing time:             Wed 12 Mar 2025 14:37:26 +0000
ROA not before:           Wed 12 Mar 2025 14:32:26 +0000
ROA not after:            Wed 11 Mar 2026 14:37:26 +0000
asID:                     64267
IP address blocks:        23.94.90.0/24 maxlen: 24
                          23.94.106.0/24 maxlen: 24
                          23.94.109.0/24 maxlen: 24
                          23.94.135.0/24 maxlen: 24
                          198.23.222.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:cd:fa:83:58:fe:6a:75:b9:89:d6:a9:9f:d8:1c:c1:c5:94:03:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 12 14:32:26 2025 GMT
            Not After : Mar 11 14:37:26 2026 GMT
        Subject: CN=7720797E53C6411884E36814A77B301DDC6C6DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e1:b4:31:4e:db:22:82:aa:86:b3:00:bb:1c:
                    1f:fe:7b:07:8b:ea:60:20:20:a6:0b:43:27:b2:29:
                    99:d1:4f:ff:82:93:7a:ca:74:1e:45:07:3a:ec:49:
                    1c:7a:19:bc:36:e9:e0:ef:7b:ab:70:66:5e:d3:29:
                    50:a9:43:d3:b4:fe:3a:56:7d:70:5a:4f:47:28:18:
                    a7:16:fb:6c:f3:00:02:40:21:53:94:3e:f9:15:68:
                    bd:1c:1b:65:e6:2c:93:34:a7:58:4e:79:e6:fc:fe:
                    c0:94:b0:62:8a:73:90:e8:22:8a:c0:3f:62:40:8c:
                    2b:16:d2:03:9b:6a:bb:ee:aa:e2:37:39:23:f9:71:
                    db:e2:0f:3f:29:30:06:f8:d4:86:5d:36:29:bf:a4:
                    e8:06:d3:76:83:90:da:3b:81:31:d6:45:a3:12:a6:
                    2a:a1:27:5e:00:f1:ad:76:6d:70:3d:c9:e0:03:04:
                    1e:a4:6d:53:c6:27:ae:d9:f6:65:45:51:61:2d:7c:
                    1a:17:05:5d:14:5a:f2:52:1e:7a:cf:03:1f:29:da:
                    bd:bf:b5:75:d6:5a:05:7a:fd:03:6f:ce:f9:35:a0:
                    a3:af:ff:dd:38:2e:9d:0e:c0:0a:3a:dd:6a:01:70:
                    63:3c:1c:be:8f:ed:e8:fc:bb:62:37:99:26:40:8f:
                    36:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:20:79:7E:53:C6:41:18:84:E3:68:14:A7:7B:30:1D:DC:6C:6D:A3
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS64267.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.94.90.0/24
                  23.94.106.0/24
                  23.94.109.0/24
                  23.94.135.0/24
                  198.23.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:ca:ba:3b:8d:55:ba:44:39:fe:3f:ef:5c:c9:1a:69:ae:b5:
         e5:65:a7:2a:a4:cc:c0:f7:76:99:5f:b5:7f:cd:45:bf:5d:7b:
         9b:3b:68:45:87:08:fa:d1:25:a9:34:94:f2:ce:02:ed:1b:e2:
         07:15:b0:ed:a7:6c:95:71:e5:47:e0:b3:6b:3a:1b:a4:3c:e3:
         9b:a6:7b:ac:8f:07:05:24:fb:1a:85:4d:7d:bc:40:f0:08:f2:
         5f:a8:31:a9:ce:a3:43:1a:08:9c:b7:96:29:5a:6f:05:c7:e8:
         9e:0a:93:a4:8f:5c:aa:6f:54:5f:79:bf:d5:27:31:f0:8c:79:
         f1:e2:64:97:81:8e:67:95:f1:e8:0b:31:2e:e4:2c:bb:78:03:
         46:62:3f:ae:f6:24:f1:4b:f6:71:b2:16:e0:9d:b3:e9:11:7d:
         9e:fc:e6:18:12:03:31:21:17:35:54:41:ad:11:d2:e0:1a:09:
         04:b0:e5:3b:18:c8:97:c8:97:6b:4e:d8:bb:2c:3e:6b:fa:d1:
         ad:68:c1:73:b6:b5:5e:2f:69:31:c6:08:02:b1:51:14:ec:fe:
         78:94:8b:20:4e:97:25:b6:57:e8:e8:ef:30:b5:05:f1:fc:38:
         ee:22:9f:1c:be:10:8c:42:79:8c:74:23:fb:dd:a7:d2:92:11:
         14:6c:11:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:31:14 2025 by rpki-client