Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS4515.roa
File:                     AS4515.roa (raw, json)
Hash identifier:          wSXxeY4b+IRL18O9/fXXHoOz8gjbgxb2K9UEuJgG2cI=
Subject key identifier:   38:67:8A:06:C6:73:40:B1:53:FD:33:8D:E2:13:EB:F5:50:32:BA:60
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       419CD8539DC2FCE4689A9CB80B713E010ED18B7E
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS4515.roa
Signing time:             Fri 24 Jan 2025 13:46:42 +0000
ROA not before:           Fri 24 Jan 2025 13:41:42 +0000
ROA not after:            Fri 23 Jan 2026 13:46:42 +0000
asID:                     4515
IP address blocks:        23.95.159.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9c:d8:53:9d:c2:fc:e4:68:9a:9c:b8:0b:71:3e:01:0e:d1:8b:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Jan 24 13:41:42 2025 GMT
            Not After : Jan 23 13:46:42 2026 GMT
        Subject: CN=38678A06C67340B153FD338DE213EBF55032BA60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ab:2b:29:09:03:35:7f:86:78:c2:b2:46:6e:
                    e2:81:3c:0a:fc:72:2b:02:40:6a:de:c4:39:b1:c2:
                    8c:46:a7:b7:f4:56:9b:c3:17:a0:bd:bd:96:ec:9a:
                    19:8d:8f:2b:c6:1d:e1:e1:08:fd:c1:92:5c:74:a3:
                    ba:a0:95:35:2f:93:96:8a:d3:dd:40:d2:7e:14:2e:
                    97:d1:2f:b8:a7:5e:c7:68:82:ba:7c:db:96:09:14:
                    f2:e3:59:19:ac:dc:c8:8e:a0:cb:c7:91:b3:42:0b:
                    e7:c8:67:6b:7a:d9:58:1b:1b:b2:29:1f:f9:9d:f6:
                    c0:80:9b:15:c6:29:a4:f8:01:39:cd:80:74:8d:31:
                    1b:d9:2a:ca:bd:4f:06:43:dd:f1:86:00:5f:13:a0:
                    5a:fd:03:5e:7f:48:ca:b3:db:13:68:88:b6:69:a7:
                    d4:d0:58:c6:8b:40:86:17:6a:6c:40:b0:ef:1a:fa:
                    82:62:4b:6b:96:16:fc:6a:d8:2f:31:14:0d:91:36:
                    79:8c:1c:98:e2:4b:e9:c9:a5:60:5b:08:9e:9c:60:
                    57:15:2e:fb:ed:aa:71:3f:ac:a5:a9:2d:79:e4:be:
                    83:c9:12:de:39:f6:91:c8:14:18:6e:e8:82:19:16:
                    82:66:9a:c4:9f:68:a3:f4:f0:a2:b6:5f:ab:20:da:
                    c9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:67:8A:06:C6:73:40:B1:53:FD:33:8D:E2:13:EB:F5:50:32:BA:60
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS4515.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.95.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:79:11:c0:ac:fd:a7:b4:5b:b2:a8:92:21:78:f5:a2:13:85:
         9e:c1:76:b4:d4:e4:00:9d:4f:88:c0:86:07:ca:76:4a:37:8c:
         b3:f7:15:e6:7a:ab:20:52:b6:ea:ae:62:75:58:65:54:6a:0d:
         e4:f7:48:42:1c:f2:4a:b0:c8:d5:e2:90:00:35:45:9f:2b:b2:
         f3:8e:e3:1d:98:07:bd:43:ac:d7:9d:a3:f4:00:e3:bd:5d:9c:
         38:d1:01:00:a5:f1:1c:64:d3:23:b2:e9:17:26:0d:be:9c:f7:
         bd:46:61:e3:eb:c5:a3:09:63:9c:97:31:88:54:ee:a3:07:7a:
         e8:93:19:69:ba:38:b6:ba:5b:04:9c:e5:1a:23:78:2e:12:94:
         92:f0:bd:c4:2d:61:b4:6d:9c:8b:8c:51:c2:1e:d3:40:99:4a:
         59:b1:9a:a2:19:d0:5d:6b:36:a6:cf:f2:c5:dd:0e:81:35:94:
         ff:26:e0:35:33:9b:1e:15:9a:c3:93:1f:75:9c:a8:5c:e1:61:
         fb:f5:94:a7:1f:ea:ab:b9:ea:72:c0:73:b6:c1:e0:55:2b:00:
         87:dd:b3:6e:c9:d7:54:c6:9c:44:e7:4d:46:05:36:a8:6e:e3:
         9e:f0:5e:db:a0:bb:cc:5c:70:e5:c6:7a:d9:c2:4d:cf:2f:0e:
         82:be:9a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:43:49 2025 by rpki-client