Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214150.roa
File:                     AS214150.roa (raw, json)
Hash identifier:          D4ZK1My6sJ76cb/YErU69OoR0qHj0/slSmJRzPs5pfI=
Subject key identifier:   F9:7A:3B:4A:DE:07:49:2A:1C:E8:DD:91:A8:BA:84:72:B6:BB:99:A3
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       352E075239FF0829D37FB4F5AF918A39A4352B30
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214150.roa
Signing time:             Fri 07 Mar 2025 16:44:02 +0000
ROA not before:           Fri 07 Mar 2025 16:39:02 +0000
ROA not after:            Fri 06 Mar 2026 16:44:02 +0000
asID:                     214150
IP address blocks:        103.204.194.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2e:07:52:39:ff:08:29:d3:7f:b4:f5:af:91:8a:39:a4:35:2b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Mar  7 16:39:02 2025 GMT
            Not After : Mar  6 16:44:02 2026 GMT
        Subject: CN=F97A3B4ADE07492A1CE8DD91A8BA8472B6BB99A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:78:c1:4a:b4:bd:f5:fa:36:09:ef:2f:1e:ac:
                    db:39:a5:26:3c:91:a2:49:1c:c0:15:92:d6:d0:d9:
                    32:2a:80:a1:ca:cb:55:4d:a8:47:e2:47:22:57:48:
                    0c:6d:65:45:cf:44:7b:48:c8:38:28:d0:3c:58:a4:
                    a1:28:c2:73:98:e5:1f:d1:5c:35:d8:55:df:c5:19:
                    09:21:b7:4f:d5:3a:cb:5a:73:91:34:ac:28:d4:26:
                    af:82:29:7b:0e:ea:64:a1:70:f2:f2:e9:90:ab:de:
                    6b:42:33:ef:85:b1:06:90:33:f4:f7:0f:1b:fe:f4:
                    83:1b:30:48:a4:5f:18:fc:a8:7c:3f:09:16:2a:92:
                    fa:f4:ae:ec:42:1d:e0:ad:36:f3:00:5a:ff:18:cb:
                    cb:93:c0:5f:65:ea:8f:37:83:0a:48:61:0f:b7:b9:
                    76:7e:37:1e:9d:66:2e:a7:f8:e0:21:08:78:3c:cf:
                    26:a6:50:66:b3:a7:f3:9c:cd:bf:54:df:0e:d3:a4:
                    ce:d3:d5:0a:ba:56:28:b7:a1:bd:56:27:d4:e8:dd:
                    09:3b:75:fd:78:59:94:40:74:d2:f0:38:00:75:67:
                    77:6e:f7:6d:0f:f7:4b:13:e2:10:d2:68:4c:2c:6b:
                    6d:df:32:42:7f:d7:a0:90:56:07:1a:17:d1:3f:20:
                    bd:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:7A:3B:4A:DE:07:49:2A:1C:E8:DD:91:A8:BA:84:72:B6:BB:99:A3
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214150.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:55:98:89:52:10:d0:ca:df:bd:2f:5c:33:df:b9:0e:4f:a8:
         d6:ca:10:12:c2:b0:38:dc:6f:eb:23:85:84:21:4f:26:24:8e:
         18:52:94:1b:ae:ad:76:a4:29:ec:f9:da:b3:62:47:8d:d5:c1:
         74:1f:8b:9e:ae:dc:b0:12:6d:cd:7f:d3:0c:10:46:e6:c9:6f:
         36:fa:31:e0:f4:4d:46:bc:a5:16:cd:26:2f:3f:06:77:ec:a7:
         f3:14:4d:d0:7c:6b:5c:4b:5a:a3:ed:2e:37:d3:2c:79:74:f6:
         c8:38:b8:9a:f3:cb:b9:06:82:4b:f1:4b:34:cf:e0:de:da:b4:
         60:20:ba:4b:5f:ea:7b:06:c7:c1:de:db:27:21:f2:e6:16:10:
         18:fe:2a:f4:2b:28:ec:ec:35:36:1d:48:2a:27:ca:d5:02:db:
         63:14:49:0f:0f:17:42:24:26:29:2f:cd:79:c9:8d:bb:cb:e0:
         77:08:fd:a9:9f:a3:09:6f:a3:4d:8c:05:74:bb:71:97:c2:73:
         01:7b:b4:16:45:9a:cc:7a:a8:9d:3a:17:53:56:1b:b0:c7:f5:
         5b:95:17:6d:42:65:8c:f5:5c:4d:37:ec:6f:0b:8c:ac:b6:fd:
         4a:48:f4:91:8c:41:e8:11:55:d1:51:99:01:b1:b9:ac:2c:28:
         cb:99:4f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:40:23 2025 by rpki-client