Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS996.roa
File:                     AS996.roa (raw, json)
Hash identifier:          jLVirztIuHLk/6mZWp7PsOo9dCxCA//eJXXeq8S1Ng8=
Subject key identifier:   46:AD:74:7D:CE:1E:8C:25:82:C2:89:8D:A4:B0:37:82:FD:38:55:AF
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       5FC5A1F5E1F2B61744DB3E2F96BAE499AFE57E54
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS996.roa
Signing time:             Wed 19 Mar 2025 13:49:05 +0000
ROA not before:           Wed 19 Mar 2025 13:44:05 +0000
ROA not after:            Wed 18 Mar 2026 13:49:05 +0000
asID:                     996
IP address blocks:        157.254.180.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:c5:a1:f5:e1:f2:b6:17:44:db:3e:2f:96:ba:e4:99:af:e5:7e:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Mar 19 13:44:05 2025 GMT
            Not After : Mar 18 13:49:05 2026 GMT
        Subject: CN=46AD747DCE1E8C2582C2898DA4B03782FD3855AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5d:14:ca:fa:7e:1c:14:98:42:79:67:41:02:
                    c2:8e:91:c0:2c:8c:f1:4b:8c:9c:ec:70:10:c6:65:
                    31:5c:d7:ee:5a:f6:c2:47:fa:b1:8c:a6:0e:70:b9:
                    4a:8b:f0:82:6f:86:c3:46:dc:f5:c3:ed:35:1d:c1:
                    21:2b:89:d7:7d:b3:86:e3:fa:9f:42:7a:05:41:79:
                    68:5c:52:a1:d4:f2:28:54:f5:7e:f1:52:e7:12:b4:
                    89:5d:0d:67:44:0c:c7:f0:5f:68:36:ee:40:d9:9e:
                    be:7c:8c:89:32:54:37:4f:6d:cd:f9:d7:c5:80:3d:
                    e9:58:30:68:dd:b4:9b:d3:54:2d:12:1e:81:81:0d:
                    7f:04:c7:fd:03:bb:63:3c:9e:ac:dc:af:f8:7c:be:
                    55:2f:44:36:99:15:db:d7:96:41:43:f7:7a:2a:a0:
                    6a:2f:ad:7b:08:1c:49:35:0f:e4:df:a4:c6:57:a3:
                    37:99:71:f9:ca:37:a4:51:2a:76:d7:e3:59:0a:1b:
                    79:ef:ed:5a:4d:c0:62:8e:70:d2:74:f8:2d:f7:b0:
                    2a:77:2d:37:70:d7:99:81:94:94:b8:bc:0c:ff:ef:
                    b3:51:99:25:37:cf:6b:37:e9:d7:00:db:9e:8b:95:
                    64:c6:5d:08:2c:fd:e5:c0:42:b4:4d:a3:f0:1c:45:
                    f3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:AD:74:7D:CE:1E:8C:25:82:C2:89:8D:A4:B0:37:82:FD:38:55:AF
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS996.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.254.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:82:9a:8d:56:1c:43:05:80:97:73:f4:da:cd:23:2d:2f:5d:
         ec:3c:a6:59:b6:9a:53:8e:29:19:c6:75:ad:f4:a7:c6:00:15:
         9e:f2:09:51:4c:6a:36:48:70:db:a4:eb:d6:77:c3:61:de:ec:
         a0:16:44:bf:9e:8f:21:de:a1:4f:bf:aa:b5:3c:88:c2:64:fb:
         84:64:ad:2c:63:6c:98:a1:33:89:c0:1a:18:84:37:7d:c4:1c:
         f7:49:17:98:35:65:db:8a:70:cb:92:26:4b:04:e0:4b:58:3d:
         b1:f4:63:15:fc:16:bf:62:d5:de:0f:e0:27:e3:e4:01:93:3b:
         d4:3b:49:3c:c0:23:9d:0e:24:bb:a4:7d:da:d0:ad:51:ff:dc:
         7f:a4:2d:72:03:d9:de:f2:e7:62:52:be:c7:ba:38:90:19:0c:
         6e:6c:c9:b2:9e:58:45:62:f9:8b:65:00:5b:56:51:80:3a:64:
         c9:b3:ee:29:a9:30:69:a3:43:46:99:b8:9e:7c:67:a2:2e:66:
         44:bc:f6:1c:9f:87:4a:32:e9:66:06:76:db:97:f4:93:0f:5d:
         eb:50:c1:74:8c:8e:66:45:fc:06:17:c9:80:f3:c3:c7:48:fa:
         e5:d3:a7:41:6f:17:10:7c:1b:5b:6d:c2:ad:ed:e6:2a:e7:c9:
         11:d3:9f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:11:29 2025 by rpki-client