Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS62240.roa
File:                     AS62240.roa (raw, json)
Hash identifier:          Fnlc4Y8Lvdo5PoQZpFlC3PYpUxlwK+gXShuBA06j5Ag=
Subject key identifier:   8D:B9:49:F0:A5:71:E1:07:59:D2:A6:8C:B0:00:DF:C5:FF:E8:18:2F
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       25D785A817B7E08E03675D4DAD6AB9B61F9CB96A
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS62240.roa
Signing time:             Mon 24 Feb 2025 00:28:26 +0000
ROA not before:           Mon 24 Feb 2025 00:23:26 +0000
ROA not after:            Mon 23 Feb 2026 00:28:26 +0000
asID:                     62240
IP address blocks:        157.254.140.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:d7:85:a8:17:b7:e0:8e:03:67:5d:4d:ad:6a:b9:b6:1f:9c:b9:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Feb 24 00:23:26 2025 GMT
            Not After : Feb 23 00:28:26 2026 GMT
        Subject: CN=8DB949F0A571E10759D2A68CB000DFC5FFE8182F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5b:56:da:52:45:5a:c6:27:fb:97:03:75:83:
                    02:2b:ee:97:0d:76:ea:4f:6b:b8:e7:fd:69:6a:02:
                    d9:ad:ba:ac:0d:0d:45:ac:98:6e:11:81:88:02:fe:
                    79:b3:29:80:b3:5e:6d:60:82:44:d6:90:f1:ea:b5:
                    ea:f0:52:3d:7e:ac:ff:1a:29:82:9a:d3:fd:ce:93:
                    98:8f:ac:ee:eb:71:53:81:21:74:7a:69:81:49:f0:
                    c6:45:fe:cf:85:cc:b4:43:77:a9:8f:30:98:e1:41:
                    4a:93:43:a9:1d:07:dc:63:95:44:4f:78:85:39:a0:
                    57:53:17:e1:8b:42:31:91:69:46:ac:64:bd:0f:8f:
                    35:75:38:fd:76:1a:96:c9:21:12:f3:be:c4:c7:f1:
                    bc:2e:05:0b:4b:4c:4a:cd:36:f2:4e:c4:f0:6b:b1:
                    c9:23:a3:4c:be:cb:46:48:1f:b7:b9:c1:1e:09:b2:
                    58:07:b4:1d:28:62:c4:cc:80:92:a0:6b:a8:7a:3a:
                    06:63:60:df:f4:68:88:6c:49:7b:c9:61:17:55:6f:
                    e7:ed:0f:df:ea:65:b6:7b:f8:b8:e7:0e:79:da:1f:
                    0b:b0:99:0e:19:92:af:09:c2:46:20:1a:70:11:74:
                    ac:3b:4e:e8:04:48:15:c4:77:f0:f0:2c:e4:0f:c9:
                    dc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:B9:49:F0:A5:71:E1:07:59:D2:A6:8C:B0:00:DF:C5:FF:E8:18:2F
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS62240.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         63:29:d3:35:29:80:c0:62:d0:62:c4:b6:a1:ef:75:4f:4b:f1:
         9e:3b:09:fd:2d:69:51:a7:ae:44:e8:91:cf:eb:3f:d6:4b:b5:
         95:cf:69:05:7e:3a:16:be:2e:14:f3:91:bd:ea:79:f9:e5:ee:
         b3:58:95:73:79:31:6d:9d:e7:f7:57:97:6b:16:af:cf:7c:33:
         dd:33:10:53:7e:b5:cd:ca:ab:cc:70:0c:b2:15:fa:1e:3e:cf:
         05:46:30:0c:ff:b8:32:6e:96:27:28:52:c3:ae:5f:3a:4c:d7:
         95:0d:67:ae:62:90:56:cd:48:ed:a1:fa:1e:8e:cc:8c:ad:88:
         1a:b2:d9:2e:97:7f:df:40:48:c5:0b:dc:23:be:1c:f5:3e:74:
         94:e9:94:cb:49:6d:7d:3e:10:d1:e6:19:cb:23:a5:17:97:c6:
         95:37:01:67:d0:88:b4:89:92:a1:36:27:18:e7:2b:2e:e2:da:
         2b:a7:92:d0:a8:90:63:32:d7:c5:3b:ea:6b:36:74:99:c6:ce:
         c2:d7:36:38:b0:92:ea:86:0e:83:70:39:df:4f:d8:7c:fd:48:
         c5:58:1e:5c:65:ef:cb:40:85:7d:18:08:a9:a9:c3:3b:22:a1:
         f6:0c:07:b9:a0:09:90:40:87:71:d6:84:91:7b:2e:28:18:45:
         83:e8:c6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:10:54 2025 by rpki-client