Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS215150.roa
File:                     AS215150.roa (raw, json)
Hash identifier:          xHMCx0Ip2QosT8sU/Ww0zIR3kj4OyZ17mAXIr6PHAjY=
Subject key identifier:   03:97:03:47:A2:FE:DA:32:02:DE:17:04:EE:7E:F7:5A:C0:A9:A9:21
Certificate issuer:       /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial:       1436BA2690C26004513C69945325A67FFC26C3F1
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS215150.roa
Signing time:             Wed 02 Jul 2025 19:33:06 +0000
ROA not before:           Wed 02 Jul 2025 19:28:06 +0000
ROA not after:            Wed 01 Jul 2026 19:33:06 +0000
asID:                     215150
IP address blocks:        2a0a:6044:acc0::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:36:ba:26:90:c2:60:04:51:3c:69:94:53:25:a6:7f:fc:26:c3:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
        Validity
            Not Before: Jul  2 19:28:06 2025 GMT
            Not After : Jul  1 19:33:06 2026 GMT
        Subject: CN=03970347A2FEDA3202DE1704EE7EF75AC0A9A921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b1:af:5f:ae:5f:04:7f:19:f1:72:87:39:16:
                    59:0a:01:27:cb:d5:c1:db:64:5e:70:50:3f:e0:93:
                    61:8d:f1:b8:9e:56:ec:dd:92:e3:68:e5:81:9b:1b:
                    1c:bc:3a:bc:4d:9a:89:bf:07:d7:24:d3:92:08:35:
                    68:0e:de:10:fa:33:5a:53:d0:29:60:7e:c1:ab:78:
                    97:7f:02:b7:0b:69:63:44:41:bb:c0:78:2c:49:3c:
                    b1:72:19:2f:a9:19:22:b3:bd:d1:f0:ac:01:35:8c:
                    c1:6b:0b:4d:09:5f:63:fc:21:90:86:7f:f5:5d:a3:
                    a6:14:71:64:5f:f6:ae:09:4d:bc:94:87:93:d1:10:
                    c0:60:22:4c:8c:3d:db:0f:d1:ba:3f:6a:0c:d5:6a:
                    65:08:32:83:3d:a9:b5:f0:b8:58:f6:e4:86:f0:d1:
                    71:e8:a3:a9:93:2e:1f:46:03:47:52:04:30:91:0d:
                    ed:a6:88:79:d4:e9:8b:b4:1c:55:ec:fc:d9:7c:a1:
                    69:70:dc:c7:ef:a0:12:19:68:4c:38:7f:1a:d6:01:
                    43:99:6f:c8:12:00:bd:9e:5f:e4:2a:f0:fe:d3:5a:
                    29:a1:c1:7b:6e:3d:78:5c:e5:56:c9:6f:5f:1f:13:
                    be:a5:13:0e:05:33:1e:31:ac:28:2a:66:9d:13:58:
                    4d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:97:03:47:A2:FE:DA:32:02:DE:17:04:EE:7E:F7:5A:C0:A9:A9:21
            X509v3 Authority Key Identifier:
                keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS215150.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:acc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         5c:cd:6d:38:50:98:f5:07:41:a1:1d:26:6b:06:fa:b7:d0:b0:
         3f:b0:05:f1:70:14:08:7a:94:b1:3f:4f:ff:a9:12:80:4c:dc:
         89:e8:74:e9:2b:ad:e7:a1:c7:25:dd:5e:60:23:d6:72:85:5a:
         c2:f1:d8:be:1f:3a:4d:c7:f4:ef:ca:64:da:97:e9:6e:b8:ab:
         4a:b4:9a:50:91:d1:6d:15:a5:1d:de:9d:bc:ad:cf:84:06:32:
         f9:32:01:39:fb:bc:75:1d:75:08:a1:d0:54:5a:48:98:ac:62:
         ed:9a:a3:44:c2:a7:44:d9:ff:d5:6b:47:b6:66:99:dd:43:6b:
         75:a7:03:64:20:fc:df:e0:ec:52:79:b5:15:33:a6:e3:9a:db:
         ae:e2:63:f5:e0:ef:d2:8b:0e:b7:04:36:9d:90:05:98:31:cc:
         aa:99:4d:4a:53:c2:11:f2:d7:28:d7:0b:9b:ba:89:d1:ec:95:
         7c:f9:e8:f6:a8:c3:fc:02:52:65:49:8b:6a:ec:49:3b:bc:72:
         b2:6b:5d:1f:5b:c4:1e:21:81:88:7e:56:8c:af:8f:18:cb:8a:
         71:f8:0b:f9:a7:e4:81:5f:16:53:3e:59:9f:1c:56:ac:3f:91:
         0b:45:f6:80:a9:09:aa:56:31:02:c4:70:09:f7:bb:52:95:c1:
         f2:a4:8c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:02:05 2025 by rpki-client