Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS812.roa
File:                     AS812.roa (raw, json)
Hash identifier:          5zn9dEt9wyQ0/mxOxXeAlSoKDDRFKdHlUWrr5hnQ2Hc=
Subject key identifier:   4B:5C:DF:E9:2C:BB:FD:B7:88:FD:B6:EE:F9:9C:B4:D8:E1:A6:ED:38
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       2604F0F6B5158FB0A5F8F1D68F776A18D954F43E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS812.roa
Signing time:             Mon 17 Mar 2025 15:31:13 +0000
ROA not before:           Mon 17 Mar 2025 15:26:13 +0000
ROA not after:            Mon 16 Mar 2026 15:31:13 +0000
asID:                     812
IP address blocks:        67.210.104.0/23 maxlen: 24
                          67.210.108.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:04:f0:f6:b5:15:8f:b0:a5:f8:f1:d6:8f:77:6a:18:d9:54:f4:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Mar 17 15:26:13 2025 GMT
            Not After : Mar 16 15:31:13 2026 GMT
        Subject: CN=4B5CDFE92CBBFDB788FDB6EEF99CB4D8E1A6ED38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f0:bb:7c:bd:6a:98:b4:ed:56:bd:cd:9f:16:
                    ad:6a:2b:48:78:23:6b:18:fa:32:3f:e7:24:49:c2:
                    e9:84:e1:1e:47:29:0a:67:23:af:6f:5f:f4:93:cc:
                    c5:e7:bc:0b:7f:f6:e0:13:be:43:d3:20:33:e2:ee:
                    43:0c:c1:bf:2f:c9:1c:e8:3f:2d:be:08:ee:f3:c8:
                    09:74:6d:ce:61:db:df:89:cd:6e:e7:66:2c:91:dc:
                    87:f6:20:32:4a:6d:0e:77:79:92:74:82:3b:8f:89:
                    f1:c2:0c:a5:2a:da:9d:ed:aa:8a:4a:fc:37:57:85:
                    cc:48:40:fe:a3:ab:df:d8:3d:af:7f:f7:50:5f:98:
                    e9:69:7a:80:76:6f:8b:3a:7c:27:c2:fa:10:81:8e:
                    a7:5c:a4:8d:71:54:4b:a6:38:30:2f:74:0c:e3:83:
                    a4:9e:8d:fb:ba:cc:1b:14:23:2d:d8:43:b9:c9:d5:
                    01:51:42:07:f6:d1:8e:29:61:5c:fb:e9:8a:69:11:
                    f6:be:61:42:a7:03:45:f3:5a:80:46:7f:e7:62:a9:
                    ca:3c:06:8b:f3:af:9d:fd:4e:54:6d:aa:6a:06:68:
                    36:af:26:ce:bb:b9:ab:27:c9:59:39:71:fb:93:fb:
                    0c:f6:5f:1a:af:19:72:fb:01:a3:e0:54:6d:60:e2:
                    06:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5C:DF:E9:2C:BB:FD:B7:88:FD:B6:EE:F9:9C:B4:D8:E1:A6:ED:38
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS812.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.210.104.0/23
                  67.210.108.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c0:b6:7b:bd:ba:57:52:3a:8b:36:c9:cc:65:25:3f:29:fd:67:
         e9:08:28:dc:d6:53:21:53:8b:e2:5a:db:ff:36:8e:96:c7:57:
         22:65:0f:b5:3d:03:f8:3d:a8:80:d0:c8:3a:ab:c3:eb:af:5a:
         0a:c0:00:2b:d9:e2:7d:fa:81:22:fa:73:0a:b3:bf:73:e9:9f:
         61:86:3b:d6:ea:a9:5c:a2:f8:da:4e:df:f3:8b:56:e1:2a:ca:
         41:71:19:47:76:8d:f9:15:0b:ba:8e:b9:07:da:8a:31:6f:a1:
         32:fe:57:60:62:0e:4b:32:67:5f:ab:93:06:4b:6f:fa:84:ac:
         97:ea:36:fe:4d:ff:9a:b1:39:e6:8e:58:d8:ee:93:17:a2:75:
         c8:3d:ba:2e:76:00:fe:fa:fb:aa:cf:b3:40:a4:78:56:d3:8b:
         7c:7f:6e:da:01:f6:3a:0a:2d:0c:c2:8c:69:b2:c4:f2:f6:f1:
         56:70:f0:66:a7:e2:b7:3f:71:22:be:b1:8a:d0:c0:1f:0f:45:
         e4:ef:4b:02:5c:f7:50:82:6a:f0:00:23:1e:a9:fe:a5:de:02:
         08:1d:c6:13:60:86:09:7f:7e:a6:ee:9e:bc:76:2c:fd:4e:00:
         40:b0:8f:45:da:88:db:d9:d6:8d:cd:54:74:fc:dd:02:ea:4c:
         61:c3:0f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:07:28 2025 by rpki-client