Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS215216.roa
File:                     AS215216.roa (raw, json)
Hash identifier:          auyv0OTyEXrf06BmmPJyNAIrxWoOa/81w+5pBIV4E1c=
Subject key identifier:   DB:A6:9B:48:88:03:5F:49:45:59:5F:28:E9:75:17:72:77:48:EE:CC
Certificate issuer:       /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial:       0298C9876386823FC8355EAA6B4DAB260CD36AF8
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS215216.roa
Signing time:             Wed 02 Jul 2025 19:33:04 +0000
ROA not before:           Wed 02 Jul 2025 19:28:04 +0000
ROA not after:            Wed 01 Jul 2026 19:33:04 +0000
asID:                     215216
IP address blocks:        2a0a:6044:b000::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:98:c9:87:63:86:82:3f:c8:35:5e:aa:6b:4d:ab:26:0c:d3:6a:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
        Validity
            Not Before: Jul  2 19:28:04 2025 GMT
            Not After : Jul  1 19:33:04 2026 GMT
        Subject: CN=DBA69B4888035F4945595F28E97517727748EECC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7b:91:e0:3a:7b:cc:df:75:d0:d3:79:dc:d7:
                    ed:53:1f:6f:7a:0e:a8:8a:47:8b:ef:3b:c8:ca:6d:
                    99:a1:80:cf:12:2d:fb:e4:e2:30:e6:56:0a:8a:e0:
                    f4:22:80:d1:73:f8:3a:16:af:a3:7b:9d:01:37:03:
                    ec:46:66:25:09:2e:e8:28:25:2a:df:df:35:1a:65:
                    bd:e1:8c:b1:be:8a:b0:03:84:30:52:b8:25:3d:46:
                    bf:2e:c7:a0:44:cd:d7:f8:70:98:77:53:51:34:e6:
                    3e:2b:d9:c5:94:20:5d:50:e5:0e:a0:ff:38:59:90:
                    31:47:84:f5:11:f8:d7:be:d6:37:60:eb:be:59:9f:
                    e4:cf:5c:83:a5:eb:2c:76:ef:84:56:84:16:ec:2a:
                    f4:bf:96:2f:f5:5a:a5:08:a2:63:e0:eb:4c:5c:b7:
                    7a:43:8f:7b:5b:f8:64:10:a5:42:11:aa:92:66:cd:
                    e8:2b:19:e1:f1:e7:cc:df:a5:f3:e0:56:12:a6:ec:
                    7f:c0:02:2b:f2:d9:8f:1d:2d:ac:41:16:37:16:25:
                    cf:a9:db:3c:6e:b8:3f:d6:58:3e:1e:41:90:0a:70:
                    ec:07:b5:de:a2:c0:8e:3d:2d:04:ec:fb:3d:6e:7c:
                    45:e8:0f:f1:fb:34:1f:05:b8:c6:f2:44:5a:f7:c8:
                    a7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A6:9B:48:88:03:5F:49:45:59:5F:28:E9:75:17:72:77:48:EE:CC
            X509v3 Authority Key Identifier:
                keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS215216.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:b000::/40

    Signature Algorithm: sha256WithRSAEncryption
         ab:e7:38:ca:24:1f:a3:68:ce:14:4f:ef:05:b3:27:27:7d:86:
         60:47:63:60:16:a0:b8:a9:e1:e7:bd:18:9f:78:d0:d7:77:85:
         e8:89:04:24:cc:41:57:09:64:76:39:9c:3f:dc:e5:7c:72:1b:
         49:6e:50:b4:f3:3c:1b:5d:b3:db:3d:2f:f1:19:32:d5:2c:45:
         25:f1:8c:9b:da:22:9e:90:ac:59:4c:35:fb:7d:af:4d:58:de:
         dd:25:3a:39:6b:bd:63:a0:45:da:1a:bc:f9:5e:34:be:67:ba:
         41:4d:be:4b:eb:61:35:c6:c8:9a:d3:26:b4:5a:9a:90:71:65:
         e1:70:a6:69:b4:60:87:64:c4:af:d7:aa:72:73:50:26:ae:ac:
         fa:f1:11:40:7c:7d:5d:9a:72:53:4e:a9:79:9a:ad:4d:c9:31:
         ae:f2:7e:57:5d:be:65:d0:c7:54:50:2d:97:9a:d0:61:d2:58:
         8f:1a:0c:ed:a8:51:32:b7:87:47:3f:bb:0b:ce:80:65:01:f0:
         da:f7:00:10:5d:ed:3b:d7:6d:49:d2:1c:59:a6:65:21:d6:fd:
         e0:9f:79:44:c2:c7:d2:2f:2e:63:c0:07:ee:52:6f:ac:d9:ad:
         64:10:1a:e6:92:9f:be:bd:44:8c:20:a8:70:f1:da:b7:dd:a0:
         c5:f1:9f:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:02:08 2025 by rpki-client