Route Origin Authorization

$ rpki-client -vvvf rpki.avsisp.com/repo/AVSISP/2/32332e3133332e3230352e302f32342d3234203d3e203233353036.roa
File:                     32332e3133332e3230352e302f32342d3234203d3e203233353036.roa (raw, json)
Hash identifier:          tfUYp1vPlbyDM1niALSVQwZiw+7sA94Km+BrPCjbnEw=
Subject key identifier:   AD:85:4B:64:E5:32:7F:D4:66:F2:89:AC:00:00:F0:5B:70:F9:DB:35
Certificate issuer:       /CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770
Certificate serial:       7417528AFDA61E5A57565BFAC20DEE20F6136CD0
Authority key identifier: 3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer
Subject info access:      rsync://rpki.avsisp.com/repo/AVSISP/2/32332e3133332e3230352e302f32342d3234203d3e203233353036.roa
Signing time:             Wed 31 Dec 2025 12:30:15 +0000
ROA not before:           Wed 31 Dec 2025 12:25:15 +0000
ROA not after:            Wed 30 Dec 2026 12:30:15 +0000
asID:                     23506
IP address blocks:        23.133.205.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:17:52:8a:fd:a6:1e:5a:57:56:5b:fa:c2:0d:ee:20:f6:13:6c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b1391a00a7b2f07d73520aff6a13602554c4721afc447770
        Validity
            Not Before: Dec 31 12:25:15 2025 GMT
            Not After : Dec 30 12:30:15 2026 GMT
        Subject: CN=AD854B64E5327FD466F289AC0000F05B70F9DB35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5f:3f:8f:02:c1:b5:bc:f1:65:e8:ad:03:f5:
                    8a:c3:cf:c8:4c:0b:f9:36:6f:7c:ae:aa:86:0b:2d:
                    78:c7:29:5b:00:da:ec:96:d5:3a:f4:27:71:68:cb:
                    60:c2:37:65:a7:17:78:6b:a1:f4:f4:da:48:ba:b4:
                    91:fa:c9:c2:dd:a6:52:df:67:f2:e7:05:fc:07:5d:
                    ac:27:27:a6:37:fa:c9:bc:41:96:f5:dd:78:19:2c:
                    a5:c1:5e:2f:ba:4f:70:44:7b:f9:dc:4d:e5:79:62:
                    d2:c8:b2:f5:14:7f:9f:e0:e4:c3:82:fa:d4:54:3c:
                    58:ca:e2:0e:64:31:60:e4:f1:9e:dd:32:4a:40:c6:
                    15:cb:6f:a4:08:a5:14:f6:a0:01:4d:99:3b:97:e9:
                    bc:82:85:95:bd:41:b8:e5:73:de:e6:3e:e3:e2:f1:
                    ca:30:b9:d3:eb:4d:67:f4:ae:b0:c6:ec:48:0a:a6:
                    5f:e7:e9:79:38:c2:9f:b7:83:c9:9d:c9:3b:a1:d2:
                    0f:66:0a:c2:5c:e7:43:57:55:83:d6:37:2b:dc:e5:
                    49:3a:5c:6a:72:d1:42:24:20:7f:28:c4:94:2f:3a:
                    34:03:eb:08:1a:8e:8e:ec:dd:eb:22:71:6d:fb:d1:
                    26:e1:b7:77:d0:09:35:1e:b0:04:88:54:66:3e:2a:
                    de:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:85:4B:64:E5:32:7F:D4:66:F2:89:AC:00:00:F0:5B:70:F9:DB:35
            X509v3 Authority Key Identifier:
                keyid:3B:B6:46:86:47:3E:D3:74:C6:1F:FF:C6:8E:8A:CD:A8:74:1A:BB:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.avsisp.com/repo/AVSISP/2/3BB64686473ED374C61FFFC68E8ACDA8741ABBCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/74c5eaa7-78bb-4cca-835a-0df812ff7d87/22b1391a00a7b2f07d73520aff6a13602554c4721afc447770.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.avsisp.com/repo/AVSISP/2/32332e3133332e3230352e302f32342d3234203d3e203233353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.133.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:7f:e2:68:97:48:1a:35:0d:61:5f:f7:b0:78:f9:56:66:4f:
         cf:f8:4d:74:71:06:d4:4a:12:9a:9e:ae:f4:f7:59:97:07:2a:
         84:cf:c3:16:b1:52:bf:43:b3:7d:12:24:bf:15:e5:c3:e5:bd:
         42:78:79:7b:20:f5:d3:50:97:78:05:99:c7:62:d7:73:d8:82:
         9c:9e:9a:f3:cc:4c:1e:cb:5e:4f:fa:d0:d6:ef:96:6a:34:53:
         70:91:a7:d8:8c:49:1e:0e:36:b2:5e:58:35:c0:8b:c7:42:a3:
         94:3c:85:d1:23:35:55:41:30:f6:ff:11:58:68:c0:0f:b3:ce:
         b3:6b:79:f6:c6:56:2c:aa:e0:1b:a1:c5:5f:bf:ff:13:fb:ec:
         a7:d7:37:5e:af:b9:06:11:1a:72:aa:62:a0:8c:a7:9a:52:52:
         51:f2:cc:9b:7e:8c:33:4c:f8:90:d1:f7:bd:ff:ee:df:b0:c3:
         ad:01:03:0c:08:3d:54:57:cd:1e:63:9f:dd:86:25:6c:98:27:
         b2:c8:a2:32:6c:e0:1f:9e:a3:f4:b6:4c:46:a8:ec:6a:62:26:
         34:5b:d7:c8:69:98:a2:c9:28:c4:f0:9a:f6:14:20:0e:16:5f:
         6d:79:d0:c7:03:bd:16:a9:85:3d:3c:29:12:e4:d6:51:0f:f8:
         69:44:11:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----