Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215046.roa
File:                     AS215046.roa (raw, json)
Hash identifier:          nWZtzcbSwDQXwwJISBxFw34DaidpvWzIE+zo0MxDa+s=
Subject key identifier:   CA:1C:89:56:17:D9:73:2B:CD:63:C1:31:88:29:8F:A7:CD:A3:E5:58
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       3E6509F615ADFD581C3B073F5775D63487860D77
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215046.roa
Signing time:             Fri 31 Jan 2025 20:26:38 +0000
ROA not before:           Fri 31 Jan 2025 20:21:38 +0000
ROA not after:            Fri 30 Jan 2026 20:26:38 +0000
asID:                     215046
IP address blocks:        144.48.83.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:65:09:f6:15:ad:fd:58:1c:3b:07:3f:57:75:d6:34:87:86:0d:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan 31 20:21:38 2025 GMT
            Not After : Jan 30 20:26:38 2026 GMT
        Subject: CN=CA1C895617D9732BCD63C13188298FA7CDA3E558
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e0:f2:35:6f:7d:d4:34:59:50:3a:2a:b4:57:
                    89:56:58:cc:67:28:84:ac:02:66:ae:01:56:e6:bd:
                    e7:06:e3:34:a2:ed:e3:c8:16:dc:97:f7:b8:90:50:
                    c2:48:e4:b9:8f:b1:04:93:bd:77:4b:61:0d:41:cf:
                    74:f5:c8:d4:55:77:2a:e1:7c:5f:ca:a4:9e:83:59:
                    81:51:1c:fe:1f:a2:42:7f:a9:f3:19:36:95:10:a8:
                    97:c6:e5:64:e0:f9:87:a1:31:b1:55:97:bb:c8:98:
                    1a:13:dc:b6:84:c9:a8:e3:40:94:e0:72:b9:73:84:
                    a9:12:cd:e6:20:0e:e3:6f:4f:0e:a1:2f:29:0c:f8:
                    cd:63:93:17:69:21:47:56:a3:41:b1:3b:31:95:ae:
                    67:6f:9f:0d:4a:26:ea:fd:85:a0:1c:2d:4a:50:ab:
                    9d:58:e3:1a:22:97:ba:56:0b:85:90:9c:f5:dd:18:
                    01:50:be:f9:f9:81:72:88:8c:d1:f5:ad:08:8c:ed:
                    74:74:fe:f5:d3:76:06:6e:93:ac:13:44:a4:38:5e:
                    d9:6d:d6:f0:66:b8:ce:e8:14:7e:6d:eb:bd:46:15:
                    7a:92:38:9c:d3:d8:16:9e:28:3f:1f:7a:fa:d6:84:
                    28:ab:3c:ed:0b:7c:d1:96:e0:33:de:e5:67:62:65:
                    80:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1C:89:56:17:D9:73:2B:CD:63:C1:31:88:29:8F:A7:CD:A3:E5:58
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215046.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:e0:b8:1d:6f:55:0f:76:cb:d3:d5:77:67:7f:32:69:c2:64:
         c4:4f:0e:82:ec:22:2a:d8:50:c2:04:f8:53:9b:55:5c:83:6b:
         c3:3c:7a:50:30:c7:b5:3c:15:18:6b:c9:18:ad:8a:ae:c4:44:
         32:c3:9d:ae:dd:47:84:8f:ff:fc:47:31:a0:7a:e2:e2:01:4c:
         2b:36:5b:e1:49:17:e8:5f:42:e0:de:f9:b8:43:ad:6b:9d:e1:
         fc:04:3d:dd:d0:55:5d:df:5b:70:11:f5:76:ca:20:d0:c4:b9:
         af:07:3f:ae:d4:fe:10:23:59:77:5c:e4:b8:4f:34:64:93:a7:
         2a:9b:87:f5:8d:30:da:19:06:16:6b:71:d8:63:36:e4:78:7b:
         a6:5b:af:60:d1:60:ee:ed:92:b8:ed:fc:0d:9f:8f:8e:fc:82:
         55:aa:46:5d:37:7d:21:b8:86:30:ab:c4:10:de:16:8b:1e:ec:
         2d:12:ea:85:2c:5b:09:f9:34:e4:e1:25:7c:dc:6e:6d:03:35:
         80:70:98:2b:f2:a1:04:4b:0d:a0:74:30:bc:e9:a4:15:aa:55:
         8e:6e:1e:6f:c1:70:cc:67:fc:3e:d7:ba:56:e6:24:08:11:20:
         2e:b9:b9:f6:ce:a8:a8:d3:60:0f:ab:30:9b:6b:a4:24:91:c5:
         63:18:e7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:40:18 2025 by rpki-client