Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215312.roa
File:                     AS215312.roa (raw, json)
Hash identifier:          u3hwn5HhNObUMqLpg7kClR0Vc+x20AxWMx0rdenkrF4=
Subject key identifier:   AA:A6:C0:63:63:77:BD:6A:4C:48:16:2B:92:FC:8D:48:CF:D2:44:A6
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       5C60CA12D2085D85A1FE869BF291C60919537C5E
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215312.roa
Signing time:             Thu 23 Jan 2025 14:19:58 +0000
ROA not before:           Thu 23 Jan 2025 14:14:58 +0000
ROA not after:            Thu 22 Jan 2026 14:19:58 +0000
asID:                     215312
IP address blocks:        202.50.54.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:60:ca:12:d2:08:5d:85:a1:fe:86:9b:f2:91:c6:09:19:53:7c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan 23 14:14:58 2025 GMT
            Not After : Jan 22 14:19:58 2026 GMT
        Subject: CN=AAA6C0636377BD6A4C48162B92FC8D48CFD244A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bd:7c:7b:28:0b:0f:96:b7:54:bb:71:5b:ef:
                    aa:ab:44:9f:02:21:d4:2d:05:ac:11:57:85:cc:f4:
                    c6:f7:df:21:3c:e2:2f:41:7a:95:d7:a3:4b:94:a1:
                    52:c9:a8:8c:1b:e9:0b:99:3d:ca:5d:7c:e2:3e:a2:
                    62:5c:03:c3:e9:01:c4:7d:cb:ab:c9:51:37:ed:2f:
                    29:9e:db:e6:f2:30:e4:ec:6a:30:66:a5:84:81:40:
                    d3:4d:26:db:b4:f2:fc:59:2a:2d:b6:09:ac:2c:9b:
                    c7:bf:39:dc:b6:f3:68:60:57:0b:03:88:e8:59:ed:
                    79:0b:ea:72:d0:d3:5a:0e:06:39:7a:c3:26:fd:6d:
                    af:cc:2d:f1:5a:68:b5:5f:c8:6c:da:18:91:e9:99:
                    a1:1b:02:00:36:26:69:9d:b2:10:77:82:4d:47:f1:
                    f9:f9:38:22:30:7f:c8:06:46:97:7f:fd:eb:8a:a9:
                    a8:f0:3c:b6:ca:32:aa:a7:2c:e1:d0:c8:85:1e:4d:
                    f0:20:db:27:8b:82:f3:6a:59:82:5f:63:4e:02:52:
                    86:7c:53:05:a7:e9:b6:e6:cd:a0:09:c8:6b:89:8a:
                    ae:99:73:6f:2c:f5:87:c2:08:15:90:f1:57:54:65:
                    11:71:74:a3:1d:ef:4d:f4:fb:95:c6:1d:93:db:1e:
                    40:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:A6:C0:63:63:77:BD:6A:4C:48:16:2B:92:FC:8D:48:CF:D2:44:A6
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS215312.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.50.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:d5:23:63:ea:e2:a1:71:e5:91:33:38:74:a0:98:f0:3d:d4:
         4d:ab:99:c4:10:f9:1c:af:05:fa:5e:4e:e2:8a:61:42:36:dd:
         79:f8:e8:1f:83:1c:3d:fe:48:62:ae:30:ce:42:b0:e2:86:2f:
         da:17:9f:fc:2b:10:9d:a9:99:db:40:2b:48:3f:ef:77:0c:d1:
         d6:0a:b7:de:cd:74:35:8e:5f:d4:3a:ad:ff:66:05:74:8b:c3:
         18:99:91:6f:3b:c4:4e:f8:7b:68:0f:af:72:db:63:7f:eb:87:
         4b:cd:cc:7b:50:fd:c8:46:5e:9c:eb:f0:59:c4:73:be:75:28:
         20:32:12:fa:b2:95:ac:f4:e6:eb:ae:16:f4:2d:e7:e1:82:4d:
         71:f5:fb:56:53:40:91:e0:59:0c:6c:64:81:46:2a:b6:ad:cd:
         fb:66:e0:e1:14:0f:be:ce:5c:8e:f3:50:56:37:07:48:67:52:
         44:83:73:77:db:e6:2f:eb:eb:c1:2e:42:9e:a6:2b:db:03:69:
         c8:8f:cd:7f:f5:d0:74:b8:78:6e:c6:89:70:64:04:80:d7:72:
         9f:d4:c1:15:74:57:b5:23:bf:38:7c:16:77:e1:bb:c2:72:18:
         aa:06:58:bb:e2:a1:a8:4c:30:07:34:1d:42:6a:a8:c2:8d:55:
         02:a3:5f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:39:19 2025 by rpki-client