Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa
File:                     AS834.roa (raw, json)
Hash identifier:          Uts6uL/z1BrBUhm4JeoT5lLl+egqB/dKMUdj2Dr/w2A=
Subject key identifier:   30:4B:EC:97:64:B9:AB:45:CE:F6:47:20:56:9E:CC:B7:48:3D:58:08
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       49E19AF2CEF04E19679225590258D99BE61B72B4
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa
Signing time:             Tue 28 Jan 2025 04:42:29 +0000
ROA not before:           Tue 28 Jan 2025 04:37:29 +0000
ROA not after:            Tue 27 Jan 2026 04:42:29 +0000
asID:                     834
IP address blocks:        75.102.48.0/23 maxlen: 24
                          75.102.50.0/24 maxlen: 24
                          205.234.200.0/23 maxlen: 24
                          205.234.222.0/23 maxlen: 24
                          216.246.90.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:e1:9a:f2:ce:f0:4e:19:67:92:25:59:02:58:d9:9b:e6:1b:72:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Jan 28 04:37:29 2025 GMT
            Not After : Jan 27 04:42:29 2026 GMT
        Subject: CN=304BEC9764B9AB45CEF64720569ECCB7483D5808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:20:83:ae:44:00:fe:41:58:e5:2c:3a:48:ba:
                    ed:5f:90:6f:9e:f6:db:26:33:4e:90:af:7f:a8:12:
                    c5:07:29:b6:85:f4:07:12:74:bb:a7:94:05:33:95:
                    99:7d:8b:82:4c:cd:d9:7a:6b:1e:44:f1:9d:23:e4:
                    ed:44:6e:20:34:be:f5:5b:6c:e1:e1:c8:4b:f4:fa:
                    cf:54:e5:43:97:aa:4d:04:9c:0d:32:b0:56:8f:38:
                    3f:f4:28:41:0a:ce:74:bf:4b:86:23:19:65:d5:97:
                    b7:e3:e1:8a:06:70:84:e9:e5:90:ce:03:b1:c3:2f:
                    14:4b:67:32:1c:89:ca:08:c6:04:86:11:61:94:cf:
                    12:26:be:5e:58:c1:09:87:38:2f:cd:c0:c5:8c:81:
                    10:ef:7c:a2:07:8d:19:1e:bf:5d:12:08:23:87:3a:
                    08:e9:93:65:22:d0:4e:7d:17:76:c1:19:29:4d:64:
                    3c:6e:16:93:bb:a9:b5:86:99:28:45:48:9d:db:21:
                    b8:7d:57:3b:5f:18:6e:c2:db:a2:6e:52:35:90:b1:
                    6f:fc:78:00:3d:c0:9e:d2:19:3e:77:e7:9e:7e:57:
                    c8:e0:af:71:fe:5e:73:b7:f1:67:77:65:ca:2c:1f:
                    ae:44:a1:13:ac:d8:1b:f5:90:b1:3c:50:51:f6:00:
                    f1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4B:EC:97:64:B9:AB:45:CE:F6:47:20:56:9E:CC:B7:48:3D:58:08
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.102.48.0-75.102.50.255
                  205.234.200.0/23
                  205.234.222.0/23
                  216.246.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:6c:06:9f:2b:7b:f0:6d:b6:a9:a6:1b:0f:4e:c4:c3:ef:1f:
         fe:9e:9b:df:89:74:12:80:a1:3a:ac:84:f5:47:9a:34:1d:73:
         85:76:78:49:46:54:30:e2:89:49:da:9d:ed:88:48:88:ea:f6:
         e3:d8:76:d5:9e:3b:47:3f:81:c1:cf:7f:48:c8:7d:ad:80:75:
         8f:e2:89:2f:31:4a:d2:cd:d6:8e:17:83:27:56:0e:c1:af:a6:
         5a:15:74:e1:43:3a:38:7b:99:11:bb:21:b6:2e:70:bf:2f:c8:
         af:af:b1:fb:6d:96:9f:ba:ae:78:02:ab:3c:5f:fa:7c:55:a9:
         c8:e1:98:7f:d7:9c:eb:ee:83:4d:2a:53:96:26:fd:35:30:20:
         6c:b5:93:e6:6b:f9:4a:ec:90:f1:83:ad:fe:70:7c:c9:a2:e8:
         03:4d:e5:fc:f6:a8:b3:84:3c:21:97:03:be:c2:7f:62:99:3b:
         c2:49:66:cf:c4:4b:23:2f:f8:cd:82:c4:42:b8:05:be:59:ee:
         92:dd:7c:a8:90:c4:ea:6b:c5:27:60:88:ab:85:74:08:b0:69:
         91:dd:6b:cb:ee:a0:84:f7:a3:4e:6d:a7:97:0a:ee:27:9d:2a:
         b5:18:d0:95:97:8f:68:74:da:f7:42:38:eb:27:d7:18:ec:67:
         8f:80:56:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:21:24 2025 by rpki-client