Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS215478.roa
File:                     AS215478.roa (raw, json)
Hash identifier:          Ohq7Cc/wthQBqs9d/davEZETOdRfg+2Zkl+rol4sFEc=
Subject key identifier:   32:A7:FD:2F:EE:1B:2C:C1:DC:CB:F2:45:FB:DA:9A:56:E4:2D:3B:2B
Certificate issuer:       /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial:       0C63BA86479DAACB91AF8E73D614490B99D6708D
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS215478.roa
Signing time:             Wed 02 Jul 2025 19:33:06 +0000
ROA not before:           Wed 02 Jul 2025 19:28:06 +0000
ROA not after:            Wed 01 Jul 2026 19:33:06 +0000
asID:                     215478
IP address blocks:        2a05:dfc3:fb00::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:63:ba:86:47:9d:aa:cb:91:af:8e:73:d6:14:49:0b:99:d6:70:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
        Validity
            Not Before: Jul  2 19:28:06 2025 GMT
            Not After : Jul  1 19:33:06 2026 GMT
        Subject: CN=32A7FD2FEE1B2CC1DCCBF245FBDA9A56E42D3B2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ec:ed:14:25:66:fc:a8:7c:15:d5:1f:b6:23:
                    ad:6b:1e:d6:84:15:92:29:cb:5f:91:b9:7b:5b:26:
                    a3:df:71:d2:b8:99:be:03:74:fd:38:d2:2f:7c:67:
                    bc:52:26:94:4c:66:03:d3:c6:2c:17:e9:35:41:78:
                    ee:9b:d5:b4:c4:cf:6c:e0:7b:d2:2a:3b:01:c1:2f:
                    3f:58:6e:87:5a:22:7a:c1:34:9d:a7:50:c0:d1:a6:
                    63:ce:42:53:6a:ba:0b:92:cd:f9:3f:da:e6:ea:42:
                    7c:e9:22:be:7f:ab:75:30:5e:2b:e6:b3:66:82:5d:
                    3b:1e:99:8e:89:b1:8a:70:b3:32:d4:ba:1e:cb:19:
                    ef:0e:bc:2a:ad:e3:c0:0e:25:96:f9:66:11:6f:a1:
                    ea:63:d9:62:f2:27:da:67:f2:ca:e6:64:e7:a2:b6:
                    55:f4:9a:04:6c:8e:f7:fb:80:6e:b9:11:0f:07:ef:
                    c1:b4:78:15:ff:c2:d5:1e:3d:f9:5a:7e:f0:68:9e:
                    f3:bb:17:7d:99:9e:8d:52:52:66:fe:02:99:33:eb:
                    41:4c:9b:28:95:33:e7:a4:f9:61:d9:46:e1:11:c1:
                    3c:e8:10:bb:2c:f4:27:4e:57:c2:01:e0:0e:a0:ad:
                    0a:b1:2d:dd:54:02:9d:91:5a:9e:19:5f:14:b9:3a:
                    10:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:A7:FD:2F:EE:1B:2C:C1:DC:CB:F2:45:FB:DA:9A:56:E4:2D:3B:2B
            X509v3 Authority Key Identifier:
                keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS215478.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:fb00::/40

    Signature Algorithm: sha256WithRSAEncryption
         e5:04:f6:2c:98:af:db:90:77:47:ae:05:7e:77:9c:3c:85:36:
         72:9b:bc:f0:6c:29:50:44:29:8e:9d:79:f9:34:d2:10:09:0b:
         f1:42:7d:bb:3e:19:54:1b:9b:0d:cb:68:9b:a3:c3:e8:9d:bf:
         67:d8:6d:40:98:12:7c:6d:b4:f1:ce:4a:18:65:23:f9:f8:48:
         1b:8f:0a:3d:0d:3a:79:47:dc:5f:a0:e1:f1:73:22:90:79:f5:
         6e:49:3d:5a:c3:8a:54:32:3b:5c:e9:6f:72:9f:d3:7b:5e:35:
         91:2c:86:65:b1:e0:33:32:4d:32:63:7c:70:ae:6b:f5:00:78:
         86:31:ca:bc:2d:9f:4c:ab:23:42:39:db:55:7a:38:49:ac:ef:
         6c:71:99:6a:15:ee:e7:8b:3b:41:23:b3:09:65:11:4a:c7:9f:
         5a:8e:50:f3:ee:a3:cc:a6:2f:73:c2:c3:af:a6:b5:1f:22:a1:
         99:5c:2a:01:50:ba:b1:c8:dc:6b:92:02:9b:66:24:19:31:19:
         06:e7:cf:b8:ef:d3:32:5b:b6:14:e2:71:e9:4d:0a:9c:b2:a5:
         6b:b0:fc:af:f0:86:19:95:c8:ac:5e:2c:47:4a:b6:6b:53:70:
         3d:12:0a:84:80:45:0d:48:4b:19:07:87:70:05:e2:ce:c1:62:
         ed:51:55:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:08:46 2025 by rpki-client