Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS212112.roa
File:                     AS212112.roa (raw, json)
Hash identifier:          tVyEAXa11tMG1hDT0TDJw8mKXTib12H13Qq3mwDjwAM=
Subject key identifier:   F6:E2:7D:F1:69:8D:3F:47:9F:F5:37:81:7B:B9:47:82:74:D9:6B:40
Certificate issuer:       /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial:       72F1731159DA38F1BF4553E6E9B06ACDC055C4AA
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS212112.roa
Signing time:             Wed 02 Jul 2025 19:33:14 +0000
ROA not before:           Wed 02 Jul 2025 19:28:14 +0000
ROA not after:            Wed 01 Jul 2026 19:33:14 +0000
asID:                     212112
IP address blocks:        2a09:54c7:2000::/36 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f1:73:11:59:da:38:f1:bf:45:53:e6:e9:b0:6a:cd:c0:55:c4:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
        Validity
            Not Before: Jul  2 19:28:14 2025 GMT
            Not After : Jul  1 19:33:14 2026 GMT
        Subject: CN=F6E27DF1698D3F479FF537817BB9478274D96B40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4c:e6:23:cf:99:d7:75:d1:ff:30:e2:2a:23:
                    bf:03:58:68:70:fe:76:66:b5:d4:43:cc:c2:23:ed:
                    ed:fc:c6:89:86:90:9e:f1:db:37:4e:54:4a:31:1d:
                    66:38:d1:48:73:0c:f7:d1:48:6e:e1:ee:a6:76:8a:
                    13:77:08:d5:d1:86:3b:d6:c6:f6:fd:bb:09:4a:94:
                    bd:75:e0:7a:6a:f7:ea:d8:ef:47:dd:89:3a:0c:bc:
                    0e:3f:81:8f:59:ad:33:c6:70:70:50:09:4d:44:d3:
                    9a:fd:e1:a0:66:46:97:09:bf:03:bc:5c:84:4d:1b:
                    bb:2a:9d:bb:87:17:b8:38:87:f5:b7:1a:f7:e9:d6:
                    1b:0e:7f:ed:a9:c1:de:55:c4:12:35:d8:4f:34:ec:
                    6e:25:27:64:3e:75:c9:63:54:d1:7d:7b:22:3a:88:
                    5d:6f:5f:45:f9:48:88:94:e4:95:af:0a:35:34:c3:
                    d1:e0:32:20:e1:b1:bb:70:39:cb:7e:68:a3:01:43:
                    93:5f:11:b5:4e:36:64:8a:51:1d:20:48:55:42:f6:
                    f4:c2:8a:24:1a:f1:f5:ee:74:e4:ca:a4:00:b3:4a:
                    71:c7:1d:28:6c:96:70:e3:b6:50:6f:ff:3e:34:be:
                    68:22:2b:4e:fb:f5:b9:ad:b2:fd:aa:4f:04:3b:3b:
                    09:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:E2:7D:F1:69:8D:3F:47:9F:F5:37:81:7B:B9:47:82:74:D9:6B:40
            X509v3 Authority Key Identifier:
                keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS212112.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c7:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         70:4c:61:e9:b7:84:2f:a0:ed:8a:44:37:be:b9:f6:64:ef:57:
         28:70:71:35:02:0d:f1:16:53:6a:36:61:48:3d:b7:34:12:2e:
         b5:b1:7b:60:88:87:1b:d8:61:09:a0:82:df:16:5e:ad:f9:23:
         b9:f3:50:21:54:b5:81:a2:e3:4e:cc:b8:4c:23:2b:70:36:52:
         e8:d7:b0:e7:42:18:9a:07:85:bb:a8:40:72:9a:58:92:73:ec:
         eb:78:27:6c:3f:f1:cc:35:9f:83:8d:1c:0c:1a:be:9a:23:04:
         f2:17:ff:1e:d1:22:77:c6:05:c3:c2:d2:d1:ef:57:38:d6:34:
         b0:16:2c:d7:b4:7d:b5:a0:e4:30:84:9b:07:c0:4d:c8:29:76:
         53:d2:4f:b8:d6:8c:24:7b:46:93:b5:22:dd:76:0b:da:82:c1:
         59:ab:cf:32:44:e4:74:b8:e5:3f:a3:b4:54:62:4f:ff:09:43:
         04:ee:5f:97:58:b2:fc:54:4d:27:a7:eb:11:49:fb:80:98:ca:
         9c:dc:48:57:b5:84:ec:78:84:53:91:7a:4d:7c:65:3a:75:d5:
         9d:bf:0f:97:63:c1:bd:b5:1d:6f:fb:ae:82:93:20:58:4f:d9:
         86:88:76:b1:31:ea:4c:51:2b:e6:8c:be:99:02:1c:5b:63:d6:
         38:df:25:c1
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUcvFzEVnaOPG/RVPm6bBqzcBVxKowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VERDg1NDkzNjA4RkU5QUFFNTQ2Qjg0Nzk2RUMwRjE5
N0VGMkMwMjAeFw0yNTA3MDIxOTI4MTRaFw0yNjA3MDExOTMzMTRaMDMxMTAvBgNV
BAMTKEY2RTI3REYxNjk4RDNGNDc5RkY1Mzc4MTdCQjk0NzgyNzREOTZCNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7TOYjz5nXddH/MOIqI78DWGhw
/nZmtdRDzMIj7e38xomGkJ7x2zdOVEoxHWY40UhzDPfRSG7h7qZ2ihN3CNXRhjvW
xvb9uwlKlL114Hpq9+rY70fdiToMvA4/gY9ZrTPGcHBQCU1E05r94aBmRpcJvwO8
XIRNG7sqnbuHF7g4h/W3Gvfp1hsOf+2pwd5VxBI12E807G4lJ2Q+dcljVNF9eyI6
iF1vX0X5SIiU5JWvCjU0w9HgMiDhsbtwOct+aKMBQ5NfEbVONmSKUR0gSFVC9vTC
iiQa8fXudOTKpACzSnHHHShslnDjtlBv/z40vmgiK0779bmtsv2qTwQ7Owm/AgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQU9uJ98WmNP0ef9TeBe7lHgnTZa0AwHwYDVR0j
BBgwFoAUft2FSTYI/pquVGuEeW7A8ZfvLAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNjlmNTY1ZDQzZmFkNDUzZDg4MmQxYzFhYTZiMjhjMjAvMy83RUREODU0OTM2
MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNybDCBkwYIKwYBBQUHAQEE
gYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3Jl
cG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83RURE
ODU0OTM2MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS82OWY1NjVkNDNmYWQ0NTNkODgyZDFjMWFhNmIyOGMyMC8zL0FT
MjEyMTEyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKglUxyAwDQYJKoZIhvcNAQELBQADggEBAHBMYem3
hC+g7YpEN7659mTvVyhwcTUCDfEWU2o2YUg9tzQSLrWxe2CIhxvYYQmggt8WXq35
I7nzUCFUtYGi407MuEwjK3A2UujXsOdCGJoHhbuoQHKaWJJz7Ot4J2w/8cw1n4ON
HAwavpojBPIX/x7RInfGBcPC0tHvVzjWNLAWLNe0fbWg5DCEmwfATcgpdlPST7jW
jCR7RpO1It12C9qCwVmrzzJE5HS45T+jtFRiT/8JQwTuX5dYsvxUTSen6xFJ+4CY
ypzcSFe1hOx4hFORek18ZTp11Z2/D5djwb21HW/7roKTIFhP2YaIdrEx6kxRK+aM
vpkCHFtj1jjfJcE=
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:08:55 2025 by rpki-client