Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/16/32332e3135302e382e302f32332d3233203d3e20393435.roa
File:                     32332e3135302e382e302f32332d3233203d3e20393435.roa (raw, json)
Hash identifier:          xYtfWln0IeUKZfYXT+1WWxcnreqe4c+OW5haD9mKJ+s=
Subject key identifier:   9E:4B:E1:F9:E8:B2:75:D5:17:41:4F:51:08:89:B9:8C:47:E6:17:0D
Certificate issuer:       /CN=a6201efd4cbc7cfdcb17a21b57bbffeeb6fcfd9a8a69896263
Certificate serial:       1D7C069087A5D2D6E2C3F0D1BB3739F9FC7D1321
Authority key identifier: 7F:A4:70:DC:7D:C3:A7:2F:3D:77:17:AA:35:B2:EE:0E:67:C9:D2:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4cbc7cfdcb17a21b57bbffeeb6fcfd9a8a69896263.cer
Subject info access:      rsync://rpki.co/repo/HYSP/16/32332e3135302e382e302f32332d3233203d3e20393435.roa
Signing time:             Sat 08 Apr 2023 03:25:49 +0000
ROA not before:           Sat 08 Apr 2023 03:20:49 +0000
ROA not after:            Sat 06 Apr 2024 03:25:49 +0000
asID:                     945
IP address blocks:        23.150.8.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:7c:06:90:87:a5:d2:d6:e2:c3:f0:d1:bb:37:39:f9:fc:7d:13:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6201efd4cbc7cfdcb17a21b57bbffeeb6fcfd9a8a69896263
        Validity
            Not Before: Apr  8 03:20:49 2023 GMT
            Not After : Apr  6 03:25:49 2024 GMT
        Subject: CN=9E4BE1F9E8B275D517414F510889B98C47E6170D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ba:f0:14:e9:1b:49:12:f8:a1:9f:0c:65:14:
                    2f:ce:ca:1d:a3:30:dc:5e:f8:95:f0:5d:a4:87:ce:
                    0a:50:4e:d3:bd:0d:9d:d8:8c:c0:7e:ee:1b:6d:17:
                    0a:7b:f1:83:99:e9:28:7b:f4:aa:a6:13:b9:f1:07:
                    8f:67:5d:d3:a0:79:39:ac:6d:c9:82:7b:78:d1:56:
                    4d:76:90:6c:cd:34:8d:b6:96:41:25:2b:6d:52:4d:
                    e9:ef:86:60:58:a4:ad:f1:61:42:90:e8:33:e6:00:
                    42:94:3a:10:de:be:30:2f:59:86:cd:e0:32:30:85:
                    a4:3c:22:b2:a8:ea:61:b3:cc:99:67:54:66:e0:11:
                    11:d2:63:b6:c4:45:2b:d9:52:ba:71:9d:7c:27:ea:
                    04:9f:40:66:b2:8e:da:19:6e:99:ac:ab:db:92:bd:
                    d0:bf:f9:8f:d7:aa:9d:de:b6:31:fb:35:b6:8f:80:
                    13:f1:63:51:1e:1d:84:76:a0:cf:11:9c:29:ea:2d:
                    64:b9:bf:0d:ab:07:a3:22:a7:73:fd:34:19:68:36:
                    2d:8d:f7:11:ce:1b:b4:ba:62:bb:0a:31:38:c9:71:
                    32:c3:e6:6c:4f:7d:80:f7:6d:7d:a0:36:0b:51:09:
                    75:1d:0c:71:ce:59:fc:76:d0:b2:a8:92:48:24:66:
                    0e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4B:E1:F9:E8:B2:75:D5:17:41:4F:51:08:89:B9:8C:47:E6:17:0D
            X509v3 Authority Key Identifier:
                keyid:7F:A4:70:DC:7D:C3:A7:2F:3D:77:17:AA:35:B2:EE:0E:67:C9:D2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/16/7FA470DC7DC3A72F3D7717AA35B2EE0E67C9D224.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4cbc7cfdcb17a21b57bbffeeb6fcfd9a8a69896263.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/16/32332e3135302e382e302f32332d3233203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.150.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4c:e2:92:51:50:34:5d:d9:4f:cb:75:8c:09:b6:4a:3f:4b:b7:
         44:ab:b4:79:2e:9f:43:2c:a4:09:2f:3f:eb:d9:25:aa:2d:84:
         ae:3b:db:6b:db:a8:4b:a8:57:cf:15:76:4b:50:54:b0:6b:82:
         1f:03:2e:21:12:bf:13:ef:5e:73:6e:1e:41:1e:b6:45:8c:7a:
         37:75:90:da:23:af:03:59:40:c9:5f:ff:22:b1:ce:ba:e7:2b:
         79:32:c9:87:6c:b4:14:5a:3c:b2:f6:50:da:c4:a5:be:a6:de:
         72:4d:1e:ef:86:d8:af:e5:e7:0b:94:93:82:0e:cc:1c:02:6c:
         cb:ac:5c:fe:01:c0:1a:ba:fe:6b:c8:d2:42:17:23:a6:63:82:
         35:59:6d:f3:01:82:49:76:99:c7:74:bc:61:80:19:19:82:d1:
         d9:39:a3:d5:0d:21:84:55:50:2f:54:fb:6d:5c:ac:fc:4d:fe:
         5d:5d:c4:4a:d4:8b:cf:b6:d1:74:85:de:92:d3:12:2b:e0:ce:
         64:cc:48:a9:33:3c:cd:72:39:9e:49:05:71:5a:4d:d7:e7:68:
         66:7d:ab:9a:cd:f2:ba:c5:ef:98:36:9d:58:a0:72:da:88:54:
         f9:0c:2b:82:ae:21:13:0e:18:65:5a:39:22:4a:be:92:e2:34:
         be:fa:1f:46
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIUHXwGkIel0tbiw/DRuzc5+fx9EyEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTYyMDFlZmQ0Y2JjN2NmZGNiMTdhMjFiNTdiYmZmZWVi
NmZjZmQ5YThhNjk4OTYyNjMwHhcNMjMwNDA4MDMyMDQ5WhcNMjQwNDA2MDMyNTQ5
WjAzMTEwLwYDVQQDEyg5RTRCRTFGOUU4QjI3NUQ1MTc0MTRGNTEwODg5Qjk4QzQ3
RTYxNzBEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLrwFOkbSRL4
oZ8MZRQvzsodozDcXviV8F2kh84KUE7TvQ2d2IzAfu4bbRcKe/GDmekoe/SqphO5
8QePZ13ToHk5rG3Jgnt40VZNdpBszTSNtpZBJSttUk3p74ZgWKSt8WFCkOgz5gBC
lDoQ3r4wL1mGzeAyMIWkPCKyqOphs8yZZ1Rm4BER0mO2xEUr2VK6cZ18J+oEn0Bm
so7aGW6ZrKvbkr3Qv/mP16qd3rYx+zW2j4AT8WNRHh2EdqDPEZwp6i1kub8Nqwej
Iqdz/TQZaDYtjfcRzhu0umK7CjE4yXEyw+ZsT32A9219oDYLUQl1HQxxzln8dtCy
qJJIJGYOgwIDAQABo4ICTjCCAkowHQYDVR0OBBYEFJ5L4fnosnXVF0FPUQiJuYxH
5hcNMB8GA1UdIwQYMBaAFH+kcNx9w6cvPXcXqjWy7g5nydIkMA4GA1UdDwEB/wQE
AwIHgDBaBgNVHR8EUzBRME+gTaBLhklyc3luYzovL3Jwa2kuY28vcmVwby9IWVNQ
LzE2LzdGQTQ3MERDN0RDM0E3MkYzRDc3MTdBQTM1QjJFRTBFNjdDOUQyMjQuY3Js
MIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2ku
YXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00
MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFi
ZTIwNDkzM2FlNS80NmMwN2U3Ni02NmQ4LTQ4ZDctODI2YS04NWRlMjljNjZhMjIv
YTYyMDFlZmQ0Y2JjN2NmZGNiMTdhMjFiNTdiYmZmZWViNmZjZmQ5YThhNjk4OTYy
NjMuY2VyMGsGCCsGAQUFBwELBF8wXTBbBggrBgEFBQcwC4ZPcnN5bmM6Ly9ycGtp
LmNvL3JlcG8vSFlTUC8xNi8zMjMzMmUzMTM1MzAyZTM4MmUzMDJmMzIzMzJkMzIz
MzIwM2QzZTIwMzkzNDM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF5YIMA0GCSqGSIb3DQEBCwUAA4IB
AQBM4pJRUDRd2U/LdYwJtko/S7dEq7R5Lp9DLKQJLz/r2SWqLYSuO9tr26hLqFfP
FXZLUFSwa4IfAy4hEr8T715zbh5BHrZFjHo3dZDaI68DWUDJX/8isc665yt5MsmH
bLQUWjyy9lDaxKW+pt5yTR7vhtiv5ecLlJOCDswcAmzLrFz+AcAauv5ryNJCFyOm
Y4I1WW3zAYJJdpnHdLxhgBkZgtHZOaPVDSGEVVAvVPttXKz8Tf5dXcRK1IvPttF0
hd6S0xIr4M5kzEipMzzNcjmeSQVxWk3X52hmfauazfK6xe+YNp1YoHLaiFT5DCuC
riETDhhlWjkiSr6S4jS++h9G
-----END CERTIFICATE-----
Generated at Thu Apr 17 08:44:42 2025 by rpki-client