Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214206.roa
File:                     AS214206.roa (raw, json)
Hash identifier:          La3Z8azhQ4F/SRSA/nGAn+w6DHfHGg5fK7jGwbRvdMI=
Subject key identifier:   B3:DA:05:FE:84:4E:47:B1:70:52:6F:96:F8:23:24:30:D2:D2:ED:83
Certificate issuer:       /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial:       2F1BB101E7E6B1E2B49A3ED3C6EB87FF4DAB7D74
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214206.roa
Signing time:             Wed 02 Jul 2025 19:33:12 +0000
ROA not before:           Wed 02 Jul 2025 19:28:12 +0000
ROA not after:            Wed 01 Jul 2026 19:33:12 +0000
asID:                     214206
IP address blocks:        2a05:dfc3:fd70::/44 maxlen: 52
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:1b:b1:01:e7:e6:b1:e2:b4:9a:3e:d3:c6:eb:87:ff:4d:ab:7d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
        Validity
            Not Before: Jul  2 19:28:12 2025 GMT
            Not After : Jul  1 19:33:12 2026 GMT
        Subject: CN=B3DA05FE844E47B170526F96F8232430D2D2ED83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:02:30:7b:65:10:1f:29:30:fa:f3:d9:2c:00:
                    bb:7e:bd:79:c4:bf:e9:15:04:07:16:e0:4e:3d:a6:
                    d5:fe:60:7b:3e:49:96:15:a1:ae:55:71:fd:f5:24:
                    16:b5:cd:19:5f:42:56:67:ba:cf:db:55:99:64:6c:
                    0a:51:95:98:8f:68:cd:ea:98:8c:d0:36:2d:ed:fd:
                    6c:67:81:37:37:15:42:2a:56:da:10:f6:b5:e4:c2:
                    7b:b9:0b:6b:a4:81:12:d6:16:55:20:0c:59:a3:29:
                    66:93:7a:c1:14:83:75:43:5a:07:69:ba:72:f1:aa:
                    49:76:dd:8a:aa:50:4c:05:dc:7a:9e:01:83:33:8c:
                    97:b1:a9:95:86:79:ca:cb:4a:c7:52:6c:71:de:69:
                    a1:5e:eb:3c:fc:c3:c2:23:c2:4f:42:e9:6a:1c:11:
                    c2:07:3e:2a:03:f3:81:ce:65:81:62:61:30:62:53:
                    7f:37:41:e0:15:6b:19:8b:c5:99:b4:dd:fd:96:0e:
                    1c:54:f1:a9:49:ab:8a:d1:b9:ff:b5:ad:5d:84:16:
                    9e:7f:3a:71:74:af:a4:a3:c1:6d:be:67:1c:64:13:
                    cc:e0:8e:93:ac:a8:7d:92:8d:fa:b0:08:45:6c:c5:
                    23:df:68:d2:00:a4:20:9a:aa:b6:f9:eb:3b:a2:76:
                    0e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:DA:05:FE:84:4E:47:B1:70:52:6F:96:F8:23:24:30:D2:D2:ED:83
            X509v3 Authority Key Identifier:
                keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS214206.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:fd70::/44

    Signature Algorithm: sha256WithRSAEncryption
         26:44:3a:e7:49:96:df:f3:b9:07:03:ac:7f:de:0a:bb:2c:3f:
         52:25:c9:05:c5:e3:e9:f8:2d:78:b4:f0:ea:c7:ec:3f:02:50:
         fc:e1:62:9a:ce:84:14:10:2d:7a:2c:36:d8:08:4e:5e:a4:5b:
         ad:f5:c7:06:59:5f:18:08:1f:d9:a8:4d:75:e8:82:20:0b:84:
         20:c8:5f:b1:d7:24:17:2c:40:cd:ff:2c:2e:05:18:2f:49:8b:
         dd:db:f1:16:42:6a:04:25:cb:a8:52:12:81:01:a1:0d:e5:ea:
         df:78:82:55:96:d2:b7:a3:96:be:e4:f4:4e:d7:c8:da:27:c4:
         06:e6:9e:b7:4e:c3:9f:b8:eb:ca:55:35:ee:af:ff:b1:fc:2f:
         67:d0:c0:0f:b7:67:50:77:d4:69:a2:7e:ef:4e:8a:6c:f0:5f:
         64:12:19:e3:76:17:7c:83:57:8a:90:32:39:d6:51:9d:70:58:
         59:e2:c6:7d:f5:75:c9:a6:19:f8:13:3d:ab:9b:23:1f:39:e7:
         d2:dd:7f:37:56:32:4d:04:11:9c:e5:2d:bd:29:e8:9d:46:04:
         e0:5d:3c:e6:ab:94:bc:6a:06:db:4e:60:1a:79:69:84:2e:33:
         55:38:4b:3b:7c:b0:34:c0:b8:46:b3:f2:0e:55:fa:49:aa:30:
         3d:ae:f3:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:40:20 2025 by rpki-client