Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS215214.roa
File:                     AS215214.roa (raw, json)
Hash identifier:          uNtdCljwUDa/j99G/OAkycIj8lrwjqOz8kqKFIANzMc=
Subject key identifier:   65:DF:55:10:BA:34:2B:AE:1A:E3:21:1D:9E:47:BD:23:5F:96:FF:A8
Certificate issuer:       /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial:       37FAC5A071002FAF2BD02669710D2A932DADFDB3
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS215214.roa
Signing time:             Wed 02 Jul 2025 19:33:08 +0000
ROA not before:           Wed 02 Jul 2025 19:28:08 +0000
ROA not after:            Wed 01 Jul 2026 19:33:08 +0000
asID:                     215214
IP address blocks:        2a09:54c6:f000::/36 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:fa:c5:a0:71:00:2f:af:2b:d0:26:69:71:0d:2a:93:2d:ad:fd:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
        Validity
            Not Before: Jul  2 19:28:08 2025 GMT
            Not After : Jul  1 19:33:08 2026 GMT
        Subject: CN=65DF5510BA342BAE1AE3211D9E47BD235F96FFA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2b:cb:c1:34:18:d0:d4:6e:bc:06:e7:d4:b6:
                    43:5c:01:0b:fc:b7:35:12:d0:8c:7c:9b:35:79:35:
                    7c:66:88:35:ba:c6:b4:7a:fd:b9:64:04:31:2a:48:
                    31:32:a5:d6:17:6f:a8:7e:dc:cc:8b:01:2f:06:d3:
                    1c:82:2d:91:e4:22:f9:a4:d7:34:75:4d:1e:a6:00:
                    08:e7:cd:05:6d:63:f5:cb:4a:c2:82:2d:01:de:c1:
                    83:35:b0:93:a8:fb:d9:2f:40:0b:de:b0:df:ed:73:
                    17:b7:9a:05:2b:e9:8f:b5:32:73:5d:23:29:15:40:
                    95:6f:f9:5e:6e:96:a2:3d:18:b2:ee:78:df:b1:5c:
                    1c:b1:74:b6:30:ed:05:32:24:f2:dc:9e:a4:f5:94:
                    4b:87:0d:5c:08:b7:7d:94:8a:3e:54:44:32:82:3f:
                    c4:bb:ac:cf:09:05:dd:05:02:fd:67:99:f8:eb:93:
                    22:61:f9:22:74:0c:2a:01:94:9c:fb:7e:bd:80:ce:
                    3d:82:b4:d6:d5:76:b5:ca:86:32:da:aa:c1:1b:13:
                    9d:de:c5:7f:77:a2:86:43:a6:cb:02:c6:51:8f:66:
                    dc:8b:0e:5f:18:64:8f:cb:96:9f:be:3a:c8:45:ca:
                    df:7d:0f:d7:df:46:52:2d:fd:40:9e:7d:c0:4a:6a:
                    dd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DF:55:10:BA:34:2B:AE:1A:E3:21:1D:9E:47:BD:23:5F:96:FF:A8
            X509v3 Authority Key Identifier:
                keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS215214.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c6:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0e:cd:0e:a4:37:fd:0a:1f:e7:c8:19:07:c7:51:b4:f8:a9:e5:
         f4:66:4b:31:f8:50:14:2b:25:92:82:9f:65:40:4a:e2:87:d0:
         00:d2:d2:ee:57:19:86:d6:8f:ba:04:2d:cd:3b:29:f9:83:31:
         56:c5:4d:c0:8e:f0:ac:55:74:1f:88:cd:3e:c2:78:d7:af:c9:
         81:d1:45:23:6b:97:0c:af:3a:f2:fc:c1:5b:9a:dd:75:bc:37:
         6e:17:49:6d:76:c2:2b:2e:a6:24:d6:be:95:7d:1b:4a:d0:b4:
         f8:73:1c:f8:95:91:93:44:a0:88:20:fa:68:8e:82:56:54:8f:
         da:0a:e5:c8:c3:e5:92:0c:32:20:76:58:3f:2f:98:03:d5:9d:
         a7:3d:0f:ee:65:e0:8c:5c:c6:cb:88:80:96:b4:be:17:22:63:
         b5:ad:3e:97:1e:9e:04:f6:53:d7:0c:08:cb:a8:d8:18:70:38:
         58:d3:ef:06:94:9d:15:3c:34:67:b4:2b:06:17:f1:56:d2:d3:
         cf:33:6e:58:8e:8a:c3:02:d3:aa:0b:44:3c:e2:7a:20:22:81:
         f6:91:55:d9:51:40:18:4c:37:b2:74:d6:07:df:2f:8c:61:04:
         0b:a8:32:fe:ff:59:2a:60:76:01:d8:d3:07:4f:e3:89:0d:33:
         50:e6:a4:83
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUN/rFoHEAL68r0CZpcQ0qky2t/bMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VERDg1NDkzNjA4RkU5QUFFNTQ2Qjg0Nzk2RUMwRjE5
N0VGMkMwMjAeFw0yNTA3MDIxOTI4MDhaFw0yNjA3MDExOTMzMDhaMDMxMTAvBgNV
BAMTKDY1REY1NTEwQkEzNDJCQUUxQUUzMjExRDlFNDdCRDIzNUY5NkZGQTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqK8vBNBjQ1G68BufUtkNcAQv8
tzUS0Ix8mzV5NXxmiDW6xrR6/blkBDEqSDEypdYXb6h+3MyLAS8G0xyCLZHkIvmk
1zR1TR6mAAjnzQVtY/XLSsKCLQHewYM1sJOo+9kvQAvesN/tcxe3mgUr6Y+1MnNd
IykVQJVv+V5ulqI9GLLueN+xXByxdLYw7QUyJPLcnqT1lEuHDVwIt32Uij5URDKC
P8S7rM8JBd0FAv1nmfjrkyJh+SJ0DCoBlJz7fr2Azj2CtNbVdrXKhjLaqsEbE53e
xX93ooZDpssCxlGPZtyLDl8YZI/Llp++OshFyt99D9ffRlIt/UCefcBKat0xAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUZd9VELo0K64a4yEdnke9I1+W/6gwHwYDVR0j
BBgwFoAUft2FSTYI/pquVGuEeW7A8ZfvLAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNjlmNTY1ZDQzZmFkNDUzZDg4MmQxYzFhYTZiMjhjMjAvMy83RUREODU0OTM2
MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNybDCBkwYIKwYBBQUHAQEE
gYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3Jl
cG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83RURE
ODU0OTM2MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS82OWY1NjVkNDNmYWQ0NTNkODgyZDFjMWFhNmIyOGMyMC8zL0FT
MjE1MjE0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKglUxvAwDQYJKoZIhvcNAQELBQADggEBAA7NDqQ3
/Qof58gZB8dRtPip5fRmSzH4UBQrJZKCn2VASuKH0ADS0u5XGYbWj7oELc07KfmD
MVbFTcCO8KxVdB+IzT7CeNevyYHRRSNrlwyvOvL8wVua3XW8N24XSW12wisupiTW
vpV9G0rQtPhzHPiVkZNEoIgg+miOglZUj9oK5cjD5ZIMMiB2WD8vmAPVnac9D+5l
4IxcxsuIgJa0vhciY7WtPpcengT2U9cMCMuo2BhwOFjT7waUnRU8NGe0KwYX8VbS
088zbliOisMC06oLRDzieiAigfaRVdlRQBhMN7J01gffL4xhBAuoMv7/WSpgdgHY
0wdP44kNM1DmpIM=
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:00:51 2025 by rpki-client