Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS212085.roa
File:                     AS212085.roa (raw, json)
Hash identifier:          tpnOi9Rh7tf81G+nUwGOa4igr9NHhI6LAHul35xWpIY=
Subject key identifier:   6F:93:95:D7:47:DB:DC:59:09:FE:07:61:A4:44:F0:61:60:1A:8B:7F
Certificate issuer:       /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial:       02C9173D67BE9E5F3072AE609491EDAA4A69DCF7
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS212085.roa
Signing time:             Wed 02 Jul 2025 19:33:13 +0000
ROA not before:           Wed 02 Jul 2025 19:28:13 +0000
ROA not after:            Wed 01 Jul 2026 19:33:13 +0000
asID:                     212085
IP address blocks:        2a0a:6044:ab00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:c9:17:3d:67:be:9e:5f:30:72:ae:60:94:91:ed:aa:4a:69:dc:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
        Validity
            Not Before: Jul  2 19:28:13 2025 GMT
            Not After : Jul  1 19:33:13 2026 GMT
        Subject: CN=6F9395D747DBDC5909FE0761A444F061601A8B7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:32:1a:97:57:f5:99:0a:b9:2f:94:29:02:
                    f6:92:7f:c6:75:32:89:07:ec:c1:22:b7:eb:1e:9f:
                    be:b2:4a:c4:60:60:80:bd:cd:2c:29:e3:8a:2b:27:
                    d8:34:86:22:88:c3:d2:58:0c:f4:14:57:f8:61:76:
                    b9:a1:01:ef:51:23:c0:8f:86:02:67:0a:09:db:d6:
                    a0:7f:dd:d6:1e:4e:77:35:4c:e3:5f:97:fd:a6:78:
                    92:09:17:cf:d3:c5:52:13:f6:9e:cd:a0:c7:63:64:
                    23:06:4a:5b:a2:dd:70:8c:ba:4b:90:f1:30:ae:31:
                    72:12:6c:26:27:a4:10:21:c6:0f:44:97:d6:38:b4:
                    72:9f:53:a7:cd:88:51:a3:c9:af:c4:db:5f:29:b2:
                    5b:78:a7:92:23:8f:3b:d3:68:19:2c:0b:e5:ad:17:
                    0e:ad:b5:7d:00:11:94:03:fc:66:39:85:7c:b6:a6:
                    f0:5a:4d:94:e9:3f:cb:e7:1c:5c:01:4f:3c:f9:56:
                    d5:54:af:61:25:cb:16:c2:ce:79:6b:96:9e:5f:fb:
                    82:cc:c6:88:7a:76:97:a0:e4:37:ed:c0:b9:3a:0a:
                    51:ed:a5:61:e9:f0:e6:5c:d1:1b:6f:15:69:e2:d4:
                    da:d1:81:80:d5:62:40:8d:1a:4a:4a:1e:f5:02:1f:
                    80:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:93:95:D7:47:DB:DC:59:09:FE:07:61:A4:44:F0:61:60:1A:8B:7F
            X509v3 Authority Key Identifier:
                keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS212085.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:ab00::/40

    Signature Algorithm: sha256WithRSAEncryption
         cd:a8:a1:03:9e:8c:cd:0f:ef:39:4b:74:60:a6:aa:15:a1:39:
         e4:56:dc:fa:f7:82:4f:2b:ce:0d:5a:3b:af:f9:5a:aa:d1:0c:
         26:6c:4e:f7:16:76:58:05:0e:48:5e:0a:05:44:c8:27:d0:6d:
         71:5b:07:46:c6:ab:38:f3:d2:11:24:28:3e:0d:91:e8:d8:b8:
         31:2a:e9:85:e5:ca:fd:39:2d:bc:ee:cf:8b:4f:95:3a:66:97:
         32:c0:4e:12:33:69:8f:18:8f:76:b9:44:91:38:0a:11:75:40:
         76:ca:56:c3:15:27:99:fb:43:bf:93:3d:23:bf:83:a8:5b:66:
         4c:44:86:9a:ec:74:77:b3:46:69:f1:77:a6:b2:d7:56:8f:3c:
         7b:42:56:66:50:bd:85:7f:a5:d0:4b:e3:72:ce:8a:b0:93:1c:
         f2:37:f3:44:ee:0a:ad:74:20:14:12:62:01:1e:4c:dc:9a:0e:
         22:46:fd:65:6a:f9:cd:34:37:fc:bb:2a:88:80:13:08:8f:f7:
         26:12:0d:e5:0e:6d:10:6e:26:4c:dd:b5:c4:89:95:04:ac:12:
         c7:d0:e1:1a:6a:72:f8:26:50:0e:68:1e:ce:df:58:45:4b:fc:
         68:66:37:ef:09:b3:d3:1e:f4:f6:e2:9a:af:52:dc:c1:e0:c8:
         6b:ce:31:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:02:16 2025 by rpki-client