Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214174.roa
File:                     AS214174.roa (raw, json)
Hash identifier:          lDank6GkfxktR7p4jpgSqQfOUJqistZcR0FX2XeYsyQ=
Subject key identifier:   FD:FD:E6:F4:C1:50:21:8C:B3:B3:B6:79:EB:3D:02:6A:7F:29:38:CF
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       080B488B85809DB048867A2135B2DF2B0A9DE859
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214174.roa
Signing time:             Fri 06 Dec 2024 18:53:33 +0000
ROA not before:           Fri 06 Dec 2024 18:48:33 +0000
ROA not after:            Fri 05 Dec 2025 18:53:33 +0000
asID:                     214174
IP address blocks:        103.204.194.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0b:48:8b:85:80:9d:b0:48:86:7a:21:35:b2:df:2b:0a:9d:e8:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec  6 18:48:33 2024 GMT
            Not After : Dec  5 18:53:33 2025 GMT
        Subject: CN=FDFDE6F4C150218CB3B3B679EB3D026A7F2938CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:af:c2:c4:f9:8c:a2:bd:cb:0b:1f:a1:dd:91:
                    2b:fe:ea:14:6d:6b:cb:45:c7:fa:e8:66:c7:aa:2c:
                    52:d2:26:dd:32:e7:63:0d:3a:04:91:d1:32:3a:03:
                    02:26:0c:54:20:e3:9d:97:9d:3b:f0:5a:90:56:ec:
                    b1:36:65:37:da:2c:1c:a5:10:3e:43:c8:4d:af:69:
                    6f:d3:1c:06:0a:7d:75:8f:83:ed:d0:b5:d4:e4:b7:
                    fe:2b:67:e6:ae:2c:ad:99:b5:45:0d:10:c8:e6:c4:
                    6b:35:8f:a9:6a:98:4a:75:fb:c7:28:66:40:3f:21:
                    7d:8a:76:ab:42:d7:ea:8e:0b:90:96:95:82:76:32:
                    38:cc:5a:c4:f7:69:ac:f1:d0:b2:e2:91:36:30:08:
                    d9:b3:87:70:b0:b0:84:d6:32:93:d7:7e:9f:43:a5:
                    67:1b:62:ad:5e:83:fb:50:4d:64:95:f1:d1:08:fc:
                    ed:3d:16:62:2a:08:0a:23:66:26:ed:9f:a5:57:83:
                    3f:ad:9a:da:3d:eb:aa:da:cb:d2:4a:a1:ab:68:d4:
                    ff:14:24:91:fb:44:a6:61:24:d2:67:62:ca:82:f9:
                    ae:32:a2:8c:0b:5f:88:85:02:43:12:90:db:36:6b:
                    64:85:86:aa:fa:96:28:5e:8c:47:d5:e5:59:e6:83:
                    c2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FD:E6:F4:C1:50:21:8C:B3:B3:B6:79:EB:3D:02:6A:7F:29:38:CF
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS214174.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.204.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:3e:ec:a6:86:cb:cc:93:29:80:40:da:6a:73:bc:a6:d9:0a:
         a4:9b:d1:d6:02:e8:ad:05:2f:0d:98:24:33:0c:0b:da:b0:c4:
         d1:3b:6a:f4:8c:4e:2e:21:ef:67:cf:b3:9f:53:7d:91:bf:e1:
         0f:7d:9f:5b:e2:ed:6d:70:11:fa:a2:f9:1b:92:49:0c:07:6c:
         33:ce:fd:e3:e4:b5:b1:91:ec:a2:5c:ce:3c:6c:85:2f:84:8c:
         f2:d3:56:75:57:94:0a:f9:2f:34:95:a8:86:19:41:f0:01:7d:
         e0:89:c9:3c:68:b2:a6:7e:89:d1:d2:2c:db:6b:38:da:2f:bc:
         86:9a:c0:0b:83:cc:64:2f:f7:42:d7:c0:30:eb:5e:d3:2f:33:
         d5:21:99:5b:83:89:18:7d:4a:f1:41:e3:81:bc:95:b8:ab:7d:
         ee:ba:29:19:e6:f6:ff:e0:33:a8:d9:f1:36:e3:ae:53:e0:5c:
         56:0b:fd:60:ae:35:74:05:d3:2e:88:40:28:1b:27:09:96:74:
         ca:44:27:2e:36:e1:b7:b4:33:8d:38:92:09:f5:ac:44:71:a6:
         84:8f:d2:21:bb:2f:0f:9c:e2:a1:83:d3:db:4a:d1:c1:45:34:
         2e:ef:c4:17:7f:29:57:55:e0:9b:9c:96:f7:69:cd:de:03:eb:
         b3:cf:3e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:17:42 2025 by rpki-client