Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS216052.roa
File:                     AS216052.roa (raw, json)
Hash identifier:          uvgNDBnFX9vrUBEwHEGZ2PriUFxoAr/tOKIIABfcBSQ=
Subject key identifier:   78:70:52:C3:48:9C:7C:A0:0A:13:49:17:FA:15:20:D2:C2:33:8B:60
Certificate issuer:       /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial:       0F79CB3E7C2F53716AFFF5B0574BECF1A3E3E416
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS216052.roa
Signing time:             Wed 02 Jul 2025 19:33:03 +0000
ROA not before:           Wed 02 Jul 2025 19:28:03 +0000
ROA not after:            Wed 01 Jul 2026 19:33:03 +0000
asID:                     216052
IP address blocks:        2a0a:6044:a900::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:79:cb:3e:7c:2f:53:71:6a:ff:f5:b0:57:4b:ec:f1:a3:e3:e4:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
        Validity
            Not Before: Jul  2 19:28:03 2025 GMT
            Not After : Jul  1 19:33:03 2026 GMT
        Subject: CN=787052C3489C7CA00A134917FA1520D2C2338B60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:74:ab:9b:a9:11:41:7e:08:53:2f:68:ac:73:
                    e5:52:f2:87:42:1a:93:bd:ba:28:8c:95:ce:ae:9f:
                    e0:aa:49:6c:1b:4c:18:26:14:cb:2e:ae:0e:e9:c1:
                    d0:d6:66:b5:75:22:2b:59:51:ee:22:52:c4:68:73:
                    36:79:d1:d9:01:b4:e6:f9:c2:e8:18:08:4b:db:92:
                    2f:b4:e3:b9:6e:4b:e0:26:a4:8d:ee:79:e5:59:54:
                    d2:20:54:32:38:2a:07:a6:96:2c:14:6a:08:27:11:
                    80:03:d3:f7:8d:58:72:dd:0c:87:73:74:fc:94:27:
                    a2:6b:23:8f:a6:7c:07:fb:36:ee:2f:cc:b9:cd:74:
                    8d:3a:ad:76:87:d8:bc:df:93:3c:0e:6f:d0:8f:f7:
                    41:77:12:65:b6:fe:ea:18:87:66:38:79:28:81:83:
                    d6:07:7e:b3:94:0e:8d:61:75:24:47:18:5d:1b:f8:
                    90:05:92:cb:1f:88:6c:16:ed:9b:3d:15:6d:cc:c5:
                    e7:69:f5:cd:10:b9:df:2e:af:50:0c:a8:19:4e:1b:
                    bf:37:3e:08:3e:fc:7e:4c:fb:12:02:0a:a7:4e:cc:
                    e5:90:ef:b8:33:51:59:3e:ac:a0:15:27:4d:92:60:
                    92:90:d9:4f:4c:4a:80:a2:a5:7b:7c:6b:8a:9a:79:
                    85:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:70:52:C3:48:9C:7C:A0:0A:13:49:17:FA:15:20:D2:C2:33:8B:60
            X509v3 Authority Key Identifier:
                keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS216052.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6044:a900::/40

    Signature Algorithm: sha256WithRSAEncryption
         55:76:3b:43:37:ec:86:ca:e1:ab:2d:45:f8:9c:20:e4:59:84:
         bf:1c:19:c4:0d:e3:68:25:16:09:80:5d:4c:1b:ba:5d:2a:71:
         db:a5:b2:c3:37:97:a0:1c:d6:29:67:7a:a5:40:bf:46:62:ac:
         84:b7:bc:50:93:e3:53:9f:5a:53:ff:56:c7:51:0d:60:be:52:
         35:15:f2:1f:f9:2c:a6:cf:56:42:81:b0:97:e6:98:fe:7e:3b:
         dd:fe:45:70:b9:3a:04:af:6a:47:62:4c:a1:89:82:e8:20:7c:
         2b:13:d9:c2:6c:5a:73:2e:66:73:1d:89:8b:1c:f4:62:d9:44:
         6e:ab:67:f4:dd:f4:ea:af:16:e4:9b:22:23:5a:66:33:78:72:
         09:65:8f:da:92:e8:1f:67:a1:32:a8:be:88:50:5d:bb:5c:07:
         42:c9:f3:69:0b:1b:1a:dd:7d:f4:d9:ad:66:dc:78:95:e3:c7:
         43:49:25:23:9a:fc:79:ee:cd:c0:ca:19:55:31:2a:f1:b2:0f:
         cd:27:9d:ff:52:fe:d0:a6:cf:63:fd:ef:55:9d:09:7c:f3:ee:
         33:38:59:7a:cc:27:69:82:43:06:e6:32:a4:2e:ed:83:89:48:
         bf:0e:7c:57:cd:63:bf:8e:b7:f3:fb:d0:d7:02:63:88:46:58:
         bc:98:83:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:00:53 2025 by rpki-client