Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/10/32332e3133392e34302e302f32342d3234203d3e203630333236.roa
File:                     32332e3133392e34302e302f32342d3234203d3e203630333236.roa (raw, json)
Hash identifier:          piLgOSxgj1TmlAPuYUmeBjnxuRKZhgiU4DR+eHqkPqw=
Subject key identifier:   61:95:CE:3C:BA:07:F8:AB:19:8D:BE:BD:79:AC:C2:82:DC:0B:EE:1B
Certificate issuer:       /CN=7e6381cf358b835573195019f8321db1c81c6ebf389967614b
Certificate serial:       478BA0D47BCE99CA05A65D00C4777398850BB370
Authority key identifier: 6C:8D:AE:92:3F:63:DC:0D:CD:49:82:0D:AE:F7:20:ED:76:43:43:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf358b835573195019f8321db1c81c6ebf389967614b.cer
Subject info access:      rsync://rpki.co/repo/HYSP/10/32332e3133392e34302e302f32342d3234203d3e203630333236.roa
Signing time:             Sat 08 Apr 2023 03:25:20 +0000
ROA not before:           Sat 08 Apr 2023 03:20:20 +0000
ROA not after:            Sat 06 Apr 2024 03:25:20 +0000
asID:                     60326
IP address blocks:        23.139.40.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8b:a0:d4:7b:ce:99:ca:05:a6:5d:00:c4:77:73:98:85:0b:b3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf358b835573195019f8321db1c81c6ebf389967614b
        Validity
            Not Before: Apr  8 03:20:20 2023 GMT
            Not After : Apr  6 03:25:20 2024 GMT
        Subject: CN=6195CE3CBA07F8AB198DBEBD79ACC282DC0BEE1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e1:c9:96:28:30:32:64:e1:48:00:47:90:1c:
                    3c:6b:86:29:92:27:d4:c4:9a:31:92:07:8c:c2:0d:
                    ee:e1:3c:d4:2c:fd:78:62:1d:34:cb:77:8c:98:65:
                    34:21:89:9a:d6:33:f6:bb:cd:f7:b2:75:95:05:cc:
                    d1:33:9e:2e:a5:67:6c:03:53:5e:9d:ed:77:64:c3:
                    dc:38:c3:bb:b5:d3:18:a6:df:3e:f3:3f:ae:40:9b:
                    cf:79:85:14:f1:19:0a:5c:c1:ee:a8:5a:a7:ed:b5:
                    32:9f:1c:75:e6:32:de:c5:82:7f:58:3a:98:bd:12:
                    c3:cd:ab:6a:5b:41:da:09:2c:65:96:37:74:a0:68:
                    9f:08:d1:2c:cf:3f:c5:e6:4f:24:20:f8:7e:0c:d2:
                    12:23:78:ec:b2:31:65:44:4a:ed:2b:30:85:ab:ea:
                    c0:57:20:9e:c4:71:aa:4c:17:ff:78:1a:f0:92:29:
                    58:de:9a:7b:08:a5:ce:74:e2:3a:c2:d8:eb:9c:8d:
                    52:e2:59:d5:fa:d2:25:cb:4d:49:85:d5:13:8a:b2:
                    d3:86:23:a2:c0:9c:35:ef:ae:f7:dd:2f:45:99:fc:
                    43:08:d2:d5:cc:50:74:d4:79:65:85:34:2c:9a:cd:
                    e0:54:3d:2a:81:57:63:7e:99:97:26:59:3e:ef:67:
                    d5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:95:CE:3C:BA:07:F8:AB:19:8D:BE:BD:79:AC:C2:82:DC:0B:EE:1B
            X509v3 Authority Key Identifier:
                keyid:6C:8D:AE:92:3F:63:DC:0D:CD:49:82:0D:AE:F7:20:ED:76:43:43:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/10/6C8DAE923F63DC0DCD49820DAEF720ED7643438B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf358b835573195019f8321db1c81c6ebf389967614b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/10/32332e3133392e34302e302f32342d3234203d3e203630333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.139.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:29:25:11:18:44:85:d7:b8:b2:55:eb:1f:61:50:a8:7a:27:
         e8:9a:00:c0:eb:6e:65:e5:f3:83:86:d3:d1:84:95:fc:06:29:
         ad:b0:00:60:ef:c4:a3:ca:09:79:fb:10:fb:d7:b1:4d:6b:ed:
         df:cf:f2:6b:f8:aa:ec:cd:18:d7:50:cb:f6:ae:b6:2b:63:bf:
         11:28:5c:23:f7:9f:1b:e7:bc:4f:8c:de:a3:71:38:da:75:ce:
         a0:8b:b5:50:f3:c2:a9:a9:d9:a1:ea:7e:ef:a5:5c:c5:9e:71:
         03:a0:6c:8e:23:68:31:a1:8b:8e:ef:9b:3d:9e:26:18:45:13:
         c9:8b:61:4c:93:a9:20:4f:89:78:5b:f1:b4:9f:10:0e:13:ed:
         c6:e6:c6:f8:fd:63:9f:db:cf:a9:8f:c3:5c:7a:82:ff:b8:ef:
         61:d2:3a:2c:cc:05:76:37:63:bb:4b:b1:4a:7a:72:af:91:02:
         b3:d3:6b:b7:f4:31:10:8b:2e:b0:16:06:44:cb:0e:cf:c8:91:
         8c:ac:4c:19:11:66:44:e3:83:c6:64:73:dc:54:47:c1:e6:50:
         92:5e:b1:da:d3:ac:9d:3e:55:38:aa:82:99:75:df:b5:b6:8f:
         65:83:cd:f8:dc:79:5d:7c:69:6f:6b:7e:49:d2:c9:5a:9e:03:
         46:a0:b3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:50:54 2025 by rpki-client