Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS205398.roa
File:                     AS205398.roa (raw, json)
Hash identifier:          +RLlWg1s637yKAK0sUXthFaTPtd1+D06OJs+z7AyyuM=
Subject key identifier:   A2:C3:3F:15:2B:01:5D:B8:B4:74:42:7F:78:A9:0C:67:7B:65:30:74
Certificate issuer:       /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial:       480C71DF1FE11BDAF6F3C3B7A9C6763A9DB15F6D
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS205398.roa
Signing time:             Wed 02 Jul 2025 19:33:07 +0000
ROA not before:           Wed 02 Jul 2025 19:28:07 +0000
ROA not after:            Wed 01 Jul 2026 19:33:07 +0000
asID:                     205398
IP address blocks:        2a0a:6044:ad00::/40 maxlen: 48
                          2a0a:6044:ae00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:0c:71:df:1f:e1:1b:da:f6:f3:c3:b7:a9:c6:76:3a:9d:b1:5f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
        Validity
            Not Before: Jul  2 19:28:07 2025 GMT
            Not After : Jul  1 19:33:07 2026 GMT
        Subject: CN=A2C33F152B015DB8B474427F78A90C677B653074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f5:3a:0d:96:99:01:78:e0:f9:51:32:f7:a5:
                    3a:6d:75:9a:d2:06:36:2d:4a:c3:a6:dd:76:c6:0d:
                    df:de:8c:cb:c9:55:7d:fe:b5:a8:16:71:25:f4:f1:
                    c2:40:59:7d:99:aa:e3:66:50:ea:4c:4f:2f:da:2b:
                    22:a3:ff:c7:ce:13:e5:4a:f3:ef:44:c3:66:fb:93:
                    28:f8:50:4c:63:55:6a:32:e6:25:4f:6d:b2:c5:08:
                    28:e8:73:b3:c7:91:ae:46:6f:7e:41:0f:71:ce:8e:
                    e0:0d:0a:17:ea:4d:e7:95:f3:37:23:5a:a5:96:fe:
                    3a:ba:4d:55:8d:b2:ec:94:28:9b:60:a5:86:16:b8:
                    ab:9d:42:3e:9d:ac:54:17:39:e3:85:d4:2e:34:b5:
                    58:27:05:cf:25:bb:c4:bc:c1:f9:fd:f6:ce:0a:e4:
                    72:72:45:e1:5e:e9:67:45:56:0b:8e:7e:ca:f3:63:
                    36:c9:df:dd:be:2a:6f:82:38:ad:f7:87:eb:04:b7:
                    b1:7c:9f:6b:d2:5e:c0:a9:b0:21:95:09:15:0c:72:
                    8e:b7:bb:e0:36:a4:54:4b:42:74:8d:97:75:3e:a4:
                    c4:cf:3d:a8:c6:a2:7b:ac:0f:60:0a:96:89:36:45:
                    4c:a0:c4:c3:e5:b1:7c:8c:1c:e7:ad:23:bd:f0:e1:
                    0d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C3:3F:15:2B:01:5D:B8:B4:74:42:7F:78:A9:0C:67:7B:65:30:74
            X509v3 Authority Key Identifier:
                keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS205398.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ad00::-2a0a:6044:aeff:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         83:1e:66:ee:3f:9a:8e:50:6b:64:c4:6d:2b:21:94:de:19:d8:
         a6:7b:cc:58:e7:2c:f0:65:58:45:fd:85:45:4c:d0:f7:13:4b:
         a0:e7:56:f3:d6:18:06:31:20:d8:e8:bf:36:2b:c4:b5:a5:e8:
         1e:b4:70:f4:ce:0e:08:77:db:44:a4:3d:8a:57:25:23:fe:15:
         e2:d1:f4:54:76:b8:22:16:f9:67:69:6f:26:34:d0:3c:25:ac:
         9a:55:9a:29:ed:bb:36:da:73:f4:c8:94:3b:05:8a:e4:9f:94:
         32:b3:fb:ec:73:ca:2b:89:56:74:56:9a:c8:2e:43:35:b9:ea:
         66:6e:52:55:8a:b4:98:fb:d8:23:6c:97:db:f7:48:92:0d:25:
         eb:33:c0:4e:13:75:05:7c:4a:44:ae:fd:0f:5a:a7:53:de:dc:
         48:7e:2a:74:d8:26:81:58:4c:8d:b8:03:48:db:33:13:3c:fe:
         3d:92:5f:fb:ef:06:ed:77:06:e1:cb:3e:9e:c1:f7:ec:29:e4:
         d8:f9:aa:c2:4f:18:75:6a:4d:f5:d0:75:7a:35:e0:12:dc:1e:
         c0:4d:07:6a:85:a7:1e:d5:c9:64:1c:53:6f:fe:16:e4:80:a0:
         ee:c2:15:c7:62:6d:bf:24:dc:e3:12:a8:95:ff:a4:ea:a5:c6:
         e4:4c:e3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:10:11 2025 by rpki-client