Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209022.roa
File:                     AS209022.roa (raw, json)
Hash identifier:          jvo7fUtnXNH9CTlyGmEh9EfQ8QpZJZlRDMDmICPHq/0=
Subject key identifier:   3B:60:E1:07:0B:9A:63:10:64:29:77:C8:CD:04:8B:F0:5A:75:7E:4A
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       7E4576DA0F709BF07B1B53F7C7079E0FF517CE14
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209022.roa
Signing time:             Tue 11 Feb 2025 20:47:29 +0000
ROA not before:           Tue 11 Feb 2025 20:42:29 +0000
ROA not after:            Tue 10 Feb 2026 20:47:29 +0000
asID:                     209022
IP address blocks:        185.121.169.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:45:76:da:0f:70:9b:f0:7b:1b:53:f7:c7:07:9e:0f:f5:17:ce:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Feb 11 20:42:29 2025 GMT
            Not After : Feb 10 20:47:29 2026 GMT
        Subject: CN=3B60E1070B9A6310642977C8CD048BF05A757E4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:db:57:a9:ab:4a:47:dc:de:14:35:26:62:dc:
                    9b:5e:80:2f:29:5b:8f:95:f2:f0:75:a1:36:fd:b7:
                    f9:ad:5f:bc:0e:c2:69:20:f7:64:c6:01:b8:27:9c:
                    86:65:b9:b9:1c:16:0e:10:1a:c0:55:ea:b6:de:b3:
                    d4:c4:da:a6:ff:c8:f2:3f:e4:ae:36:98:07:7c:23:
                    c2:83:e3:0b:58:45:25:e7:49:d0:2a:9d:51:12:e5:
                    06:77:70:4f:45:1b:8e:88:ae:ec:66:1b:88:2d:ec:
                    9e:94:53:f2:84:f5:c9:0b:85:c5:b7:15:07:9b:d3:
                    dc:8f:62:e9:d5:52:aa:ed:8a:cc:37:71:51:eb:be:
                    27:dc:63:cf:e5:7d:22:50:e1:79:03:53:84:5c:b1:
                    fc:d1:9e:0f:75:7a:7b:99:b3:0d:45:7d:ae:80:92:
                    8c:5d:5f:48:d9:77:f6:52:02:04:f9:d8:eb:d6:bb:
                    ec:61:71:4c:54:06:e0:1c:58:b4:b6:a4:5c:d3:93:
                    1b:70:91:f6:46:d0:0e:f7:b3:aa:ba:bd:51:4d:42:
                    62:f0:5a:44:84:c0:b6:55:0e:71:b3:2a:5e:2a:a1:
                    f0:fb:59:6a:dd:ce:d3:b1:4f:37:ab:1b:03:34:92:
                    bc:49:31:b1:fa:46:e7:91:36:ec:eb:ad:2e:fc:e7:
                    0c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:60:E1:07:0B:9A:63:10:64:29:77:C8:CD:04:8B:F0:5A:75:7E:4A
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS209022.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.121.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:6b:07:36:95:75:dc:de:19:01:48:96:14:e1:e0:1b:6f:a4:
         8b:33:f6:d0:17:17:ee:dd:91:38:8e:62:cb:3c:20:7c:78:20:
         fb:c8:ea:88:72:25:50:08:4c:46:63:d5:d7:f9:9a:4e:f0:df:
         aa:92:b8:c6:a4:12:e2:1a:05:e6:82:bc:8d:fd:75:18:a0:3d:
         a8:fc:b5:94:bf:53:c8:23:bd:c2:55:fb:46:a2:17:75:69:8e:
         94:2c:cc:14:03:92:35:c6:bf:21:aa:0d:3e:8c:04:87:8d:ba:
         4a:1d:67:f8:bf:79:3f:87:8b:14:ca:79:62:2c:b5:1d:af:48:
         c4:f7:85:9b:22:a1:b7:3d:32:31:20:20:f3:af:f4:d4:dd:dd:
         e4:38:84:66:18:d7:33:c5:95:d3:57:16:21:e3:14:be:4f:41:
         6b:3d:ee:65:e3:51:f8:de:6d:4a:ae:de:b4:cc:be:a2:b3:8d:
         02:89:f8:a8:68:ac:56:8a:68:76:aa:21:0a:d9:90:f2:df:91:
         e5:ec:a5:b7:74:9e:0f:ec:51:a7:73:b8:13:3e:46:46:d3:b5:
         24:d3:75:9e:26:88:85:23:69:23:19:96:43:92:66:0e:f3:56:
         78:f8:4a:6a:98:fd:77:b3:cb:a5:10:22:9e:c3:53:88:84:e3:
         77:22:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:55:41 2025 by rpki-client