Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS216260.roa
File:                     AS216260.roa (raw, json)
Hash identifier:          8psDvrAYraAdpPOOK0DjiocuN5cSn8ifRmjziDuI9mw=
Subject key identifier:   3E:4D:28:48:B2:76:5B:16:8B:BD:6F:B3:40:5B:32:65:32:86:97:F3
Certificate issuer:       /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial:       782412C1A76FAB6ED59BC7BA138B039DB2C2F318
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS216260.roa
Signing time:             Wed 02 Jul 2025 19:33:04 +0000
ROA not before:           Wed 02 Jul 2025 19:28:04 +0000
ROA not after:            Wed 01 Jul 2026 19:33:04 +0000
asID:                     216260
IP address blocks:        2a09:54c7:3000::/36 maxlen: 44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:24:12:c1:a7:6f:ab:6e:d5:9b:c7:ba:13:8b:03:9d:b2:c2:f3:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
        Validity
            Not Before: Jul  2 19:28:04 2025 GMT
            Not After : Jul  1 19:33:04 2026 GMT
        Subject: CN=3E4D2848B2765B168BBD6FB3405B3265328697F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9d:75:55:af:79:a4:82:46:dd:d2:4a:8f:fd:
                    cc:26:c7:e0:c4:a4:65:cd:cf:97:5d:08:b4:26:b2:
                    09:ec:3d:60:ff:c8:54:02:60:71:7d:53:9f:c4:ee:
                    e1:0a:ad:9f:ae:2b:8a:12:c2:4b:3a:9d:19:83:10:
                    34:60:1c:13:7d:03:a0:55:3e:8d:3b:1c:dd:87:fc:
                    47:f2:a7:f4:56:c7:f9:3f:38:ec:ff:8c:ec:67:e8:
                    b9:93:8f:e1:52:b7:94:60:c4:e7:3a:fb:92:2f:9c:
                    e2:8c:a8:fc:a7:fa:b3:1c:af:22:16:79:08:b7:11:
                    25:cc:86:5b:9e:13:15:bd:f9:6c:0f:f1:0c:8d:35:
                    7b:84:02:1e:8d:c6:6c:98:03:f1:ee:71:97:63:40:
                    97:a6:b5:ca:6a:62:ea:e5:77:04:d3:23:af:df:03:
                    bd:78:0e:80:b2:e1:fc:33:98:a9:45:0f:73:49:9e:
                    fd:75:01:cf:88:2d:71:43:0b:ad:7d:ab:9b:4c:31:
                    dd:e0:d1:9c:8a:36:30:74:50:c2:ba:09:df:8d:03:
                    50:f5:0d:e7:89:4f:06:39:74:dc:9d:c9:80:19:2f:
                    6d:fc:fe:d7:94:ff:c2:8f:65:2d:a6:31:1d:1c:8b:
                    36:33:af:2f:11:58:00:e0:4c:f6:14:0a:02:e2:bb:
                    b2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4D:28:48:B2:76:5B:16:8B:BD:6F:B3:40:5B:32:65:32:86:97:F3
            X509v3 Authority Key Identifier:
                keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS216260.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a09:54c7:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2e:01:46:05:83:bc:fe:83:f9:57:9d:a4:c7:9c:d4:0b:13:66:
         78:f3:64:29:bf:8c:37:1b:25:da:60:55:9b:7f:bc:98:4f:c8:
         aa:ff:d7:11:4c:92:5a:6d:c5:67:8b:ab:4c:a2:e1:68:67:50:
         bc:7e:fb:f9:65:e6:9f:87:2c:69:d4:7d:ce:d1:60:70:db:c5:
         74:36:44:8b:8b:2b:f8:c5:95:fb:a6:c1:0a:0d:5e:75:95:7b:
         a3:e8:0b:00:9a:f7:86:49:9f:97:df:e7:a0:64:c8:5b:9a:c8:
         12:e2:0f:30:fe:e8:6b:ef:d9:03:a2:39:1e:e1:2f:d9:14:0c:
         e5:b6:49:9e:5a:05:22:f1:ca:de:e7:30:2d:19:3f:3a:a8:15:
         70:d8:53:db:c5:29:24:00:df:a3:4f:5c:26:57:b2:6b:96:9a:
         3b:e6:f9:d4:e2:ac:33:c7:74:28:71:3d:a9:4a:51:e5:4c:fa:
         f3:62:7a:bd:ff:43:7b:9a:aa:32:81:5a:87:af:6f:11:e6:8e:
         73:9e:b0:67:2b:e9:74:a3:67:2e:d0:aa:3e:3c:15:3f:4a:90:
         ca:d6:91:82:d0:74:bb:04:f8:83:0a:b1:fa:d0:d6:9b:e6:e0:
         fa:e1:d4:61:b8:12:4d:bb:d8:68:56:ae:75:11:aa:d7:9d:20:
         c7:a1:5a:82
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUeCQSwadvq27Vm8e6E4sDnbLC8xgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VERDg1NDkzNjA4RkU5QUFFNTQ2Qjg0Nzk2RUMwRjE5
N0VGMkMwMjAeFw0yNTA3MDIxOTI4MDRaFw0yNjA3MDExOTMzMDRaMDMxMTAvBgNV
BAMTKDNFNEQyODQ4QjI3NjVCMTY4QkJENkZCMzQwNUIzMjY1MzI4Njk3RjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0nXVVr3mkgkbd0kqP/cwmx+DE
pGXNz5ddCLQmsgnsPWD/yFQCYHF9U5/E7uEKrZ+uK4oSwks6nRmDEDRgHBN9A6BV
Po07HN2H/Efyp/RWx/k/OOz/jOxn6LmTj+FSt5RgxOc6+5IvnOKMqPyn+rMcryIW
eQi3ESXMhlueExW9+WwP8QyNNXuEAh6NxmyYA/HucZdjQJemtcpqYurldwTTI6/f
A714DoCy4fwzmKlFD3NJnv11Ac+ILXFDC619q5tMMd3g0ZyKNjB0UMK6Cd+NA1D1
DeeJTwY5dNydyYAZL238/teU/8KPZS2mMR0cizYzry8RWADgTPYUCgLiu7ItAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUPk0oSLJ2WxaLvW+zQFsyZTKGl/MwHwYDVR0j
BBgwFoAUft2FSTYI/pquVGuEeW7A8ZfvLAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNjlmNTY1ZDQzZmFkNDUzZDg4MmQxYzFhYTZiMjhjMjAvMy83RUREODU0OTM2
MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNybDCBkwYIKwYBBQUHAQEE
gYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3Jl
cG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83RURE
ODU0OTM2MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS82OWY1NjVkNDNmYWQ0NTNkODgyZDFjMWFhNmIyOGMyMC8zL0FT
MjE2MjYwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEH
AQH/BBIwEDAOBAIAAjAIAwYEKglUxzAwDQYJKoZIhvcNAQELBQADggEBAC4BRgWD
vP6D+VedpMec1AsTZnjzZCm/jDcbJdpgVZt/vJhPyKr/1xFMklptxWeLq0yi4Whn
ULx++/ll5p+HLGnUfc7RYHDbxXQ2RIuLK/jFlfumwQoNXnWVe6PoCwCa94ZJn5ff
56BkyFuayBLiDzD+6Gvv2QOiOR7hL9kUDOW2SZ5aBSLxyt7nMC0ZPzqoFXDYU9vF
KSQA36NPXCZXsmuWmjvm+dTirDPHdChxPalKUeVM+vNier3/Q3uaqjKBWoevbxHm
jnOesGcr6XSjZy7Qqj48FT9KkMrWkYLQdLsE+IMKsfrQ1pvm4Prh1GG4Ek272GhW
rnURqtedIMehWoI=
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:10:13 2025 by rpki-client