Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS211780.roa
File:                     AS211780.roa (raw, json)
Hash identifier:          TNBc0LAE9GoyWl9X5tRtUWxdQ0Cuf0zYj5gxiNv3SOg=
Subject key identifier:   17:6B:B6:3B:2A:C9:59:AA:2F:6A:3B:DD:4E:01:15:66:A4:F4:B7:EC
Certificate issuer:       /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial:       41D3C80EF8DFD80032C8902EF21E8000FB607EE3
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS211780.roa
Signing time:             Wed 02 Jul 2025 19:33:13 +0000
ROA not before:           Wed 02 Jul 2025 19:28:13 +0000
ROA not after:            Wed 01 Jul 2026 19:33:13 +0000
asID:                     211780
IP address blocks:        2a05:dfc3:fd20::/44 maxlen: 52
                          2a05:dfc3:fd20::/48 maxlen: 48
                          2a05:dfc3:fd24::/48 maxlen: 48
                          2a0f:6280:1000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:d3:c8:0e:f8:df:d8:00:32:c8:90:2e:f2:1e:80:00:fb:60:7e:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
        Validity
            Not Before: Jul  2 19:28:13 2025 GMT
            Not After : Jul  1 19:33:13 2026 GMT
        Subject: CN=176BB63B2AC959AA2F6A3BDD4E011566A4F4B7EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1e:68:4f:a8:8b:09:2a:6f:78:94:61:5b:6f:
                    d5:92:33:fa:ab:8a:75:6d:e9:71:98:bd:18:41:16:
                    5b:8e:3b:c9:e0:20:05:a5:20:cc:08:bb:fd:af:fd:
                    27:ba:45:3b:b3:04:0f:d2:3d:a5:4c:bd:6e:90:0b:
                    bc:34:b3:d6:c1:c7:92:5f:6f:e5:8a:b5:92:e5:3b:
                    ca:e9:9d:7b:fb:cc:71:62:37:94:c3:97:38:42:be:
                    3f:3c:ab:a3:59:e1:f9:6e:a9:95:db:13:aa:57:85:
                    2e:94:7a:cc:32:86:f7:a0:01:f3:95:e5:d4:40:a4:
                    7a:7e:74:33:b8:d0:60:84:b8:ea:26:59:b8:a9:1a:
                    61:8f:b2:d6:b3:a2:94:d1:8b:cd:33:92:5b:c5:cc:
                    af:d2:7b:e0:9a:4a:fb:ed:a7:94:c7:0c:50:f3:bd:
                    50:f9:69:c7:5c:de:95:84:70:45:98:10:5c:5f:9a:
                    38:65:ce:f7:5b:59:5d:66:b7:34:d1:0c:8b:26:f3:
                    c8:dd:ad:d8:40:53:93:04:25:4e:40:d3:62:1d:bc:
                    37:10:72:2f:20:66:34:5d:f3:8a:be:ad:80:48:d4:
                    6b:2c:dc:38:db:dc:91:1e:fa:c3:f3:00:02:16:61:
                    54:a2:03:5a:48:9a:36:84:b5:0f:aa:95:2b:3c:07:
                    5b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:6B:B6:3B:2A:C9:59:AA:2F:6A:3B:DD:4E:01:15:66:A4:F4:B7:EC
            X509v3 Authority Key Identifier:
                keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS211780.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:fd20::/44
                  2a0f:6280:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         67:6f:e3:4d:c9:b4:4a:a6:4f:5c:21:63:06:6d:1c:d1:d5:78:
         b1:c1:9d:21:cc:e0:60:a3:1c:bd:5c:d3:23:8c:ac:2a:3e:17:
         e5:b7:f9:e6:df:05:e8:a0:f0:01:43:9f:6f:1e:e1:74:f2:90:
         05:5b:0f:85:17:2b:6f:84:9c:26:56:a2:8f:73:cf:60:20:62:
         65:98:61:9e:64:9f:9c:e9:59:26:9b:71:72:9e:0a:37:69:ba:
         6e:93:f0:38:c2:da:a4:95:21:02:bb:c7:a6:b7:59:06:78:d0:
         46:9b:ac:26:92:96:e6:53:81:e2:39:85:de:e2:49:10:42:82:
         a1:7f:e9:48:6a:5a:02:00:3c:8a:6b:18:e4:ab:23:dc:8e:08:
         94:54:25:ae:8a:32:c3:f1:b1:11:5c:d5:ba:90:b4:a0:37:23:
         da:6e:4c:e1:57:5c:9c:40:f1:0b:2c:85:c0:33:63:05:27:d2:
         3d:a0:62:3b:20:3c:8a:6a:d9:49:9e:29:48:1f:73:ea:eb:fc:
         f7:29:1a:03:32:82:d8:f7:b7:5a:dc:02:30:ce:34:a9:71:01:
         58:84:06:a5:b1:d0:b2:7a:59:d4:31:8e:8a:be:aa:78:51:cc:
         e8:62:7c:75:72:76:8f:13:9c:18:0c:7f:b5:0d:7f:ae:d2:4b:
         5e:6f:25:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:03:23 2025 by rpki-client