Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215081.roa
File:                     AS215081.roa (raw, json)
Hash identifier:          Iz5SZrzI1kNrEk++DH+gcYzxrO+mg/N+XDUnK5ZxgnQ=
Subject key identifier:   55:63:44:2E:93:94:BE:F1:9F:7F:44:E1:50:F3:09:A6:5A:68:D3:90
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       4A1B459EFB63C6EEDB12BF3BC8E58E56538982CC
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215081.roa
Signing time:             Wed 26 Mar 2025 20:40:18 +0000
ROA not before:           Wed 26 Mar 2025 20:35:18 +0000
ROA not after:            Wed 25 Mar 2026 20:40:18 +0000
asID:                     215081
IP address blocks:        5.253.87.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:1b:45:9e:fb:63:c6:ee:db:12:bf:3b:c8:e5:8e:56:53:89:82:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Mar 26 20:35:18 2025 GMT
            Not After : Mar 25 20:40:18 2026 GMT
        Subject: CN=5563442E9394BEF19F7F44E150F309A65A68D390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c8:47:6c:6b:73:a4:1e:1c:f0:08:1e:e9:68:
                    73:69:a8:18:5d:35:05:47:21:bb:dc:46:be:44:52:
                    94:ef:f8:68:aa:98:8d:59:0e:a5:96:ce:5f:99:7e:
                    72:3c:c6:b4:aa:76:6a:09:89:1f:fd:ad:97:4a:ed:
                    2b:59:0e:24:96:99:3e:e1:e4:9a:be:e5:13:be:ca:
                    8b:4f:33:5e:19:39:b5:f1:53:b8:c2:10:b1:c0:00:
                    88:84:ae:53:ea:64:08:26:b4:76:26:42:72:27:f0:
                    32:38:f3:3b:4e:26:fd:e3:0a:f4:a3:f9:6f:63:5b:
                    9c:3a:03:de:84:38:f6:96:73:4f:ab:f5:bf:2f:88:
                    1b:66:88:7a:31:87:0e:10:fe:a5:63:e7:26:50:22:
                    dd:89:ff:8d:30:cf:75:e5:5b:3b:c3:e8:25:1d:b9:
                    ea:b5:44:8b:20:39:4a:e5:e3:97:d6:11:4a:28:03:
                    e5:52:cf:37:ba:5a:dc:d3:48:01:a3:07:ad:b5:4b:
                    ed:fd:f3:86:13:9d:a4:dd:11:05:59:32:35:33:d6:
                    e3:11:5c:71:1b:9e:0b:da:f5:63:0e:77:30:9b:d6:
                    b3:ee:48:7e:8d:05:95:23:a9:8b:e4:e5:86:a0:79:
                    a3:f1:f3:70:d5:ad:01:07:3c:e3:a7:e7:5c:0c:08:
                    d8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:63:44:2E:93:94:BE:F1:9F:7F:44:E1:50:F3:09:A6:5A:68:D3:90
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215081.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  5.253.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:1b:d3:86:88:b9:03:a0:2e:09:18:20:7a:d1:f1:bf:03:da:
         4b:da:e2:cc:09:2a:24:4b:c1:42:02:1b:22:e6:52:30:bf:a2:
         22:a9:f0:43:82:5b:ea:2d:6b:25:b4:14:e0:16:90:d9:4e:53:
         66:21:a5:b3:19:43:e6:05:a8:9c:9c:ec:c7:2d:d9:d9:41:f8:
         6d:97:15:72:06:05:65:77:20:16:5c:9c:c2:03:0f:e3:e0:86:
         bc:d2:2e:6d:16:91:bb:d9:72:8b:ba:09:ae:7f:f2:0d:00:7a:
         3e:b1:6b:1b:b4:cb:2b:06:d0:44:fb:a7:58:17:2e:10:43:34:
         98:13:a4:13:24:54:fc:f7:d1:f4:9b:0c:cb:c6:c2:b7:3b:9f:
         fb:98:21:74:f3:a0:8e:d5:e8:11:31:aa:a2:54:63:ab:58:17:
         2a:e9:ce:59:97:cc:bc:01:27:76:48:a1:9c:c2:33:f4:83:2c:
         00:21:c8:90:19:60:1a:e8:75:b6:66:07:4f:53:7f:6e:97:80:
         b8:10:dc:ee:41:06:b5:3e:88:67:08:0c:e3:fa:fd:09:88:b8:
         ce:33:53:e1:5d:e5:a2:b6:30:bc:6b:53:57:94:1b:0b:f2:4a:
         79:cc:4f:fc:ae:95:d3:87:42:73:22:df:3f:72:1c:f4:7c:ed:
         15:ca:22:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:42:26 2025 by rpki-client