Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS47272.roa
File:                     AS47272.roa (raw, json)
Hash identifier:          awPraI7OzNxG8js2usohUb0BNVHw/vHV1hU0dyR8ZHw=
Subject key identifier:   02:3F:41:4B:32:6B:EB:A6:1C:82:13:33:63:B4:05:EA:3D:75:09:B4
Certificate issuer:       /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial:       6B927D1D928A227D818520A8040C8EB4A1D58E91
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS47272.roa
Signing time:             Wed 02 Jul 2025 19:33:06 +0000
ROA not before:           Wed 02 Jul 2025 19:28:06 +0000
ROA not after:            Wed 01 Jul 2026 19:33:06 +0000
asID:                     47272
IP address blocks:        2a05:dfc3:f500::/40 maxlen: 48
                          2a05:dfc3:fd24::/48 maxlen: 48
                          2a06:1281:1000::/36 maxlen: 36
                          2a09:54c6::/36 maxlen: 36
                          2a0a:6044:10::/48 maxlen: 48
                          2a0f:6280:a::/48 maxlen: 48
                          2a0f:6280:10::/48 maxlen: 128
                          2a0f:6280:11::/48 maxlen: 128
                          2a0f:6280:12::/48 maxlen: 128
                          2a0f:6280:13::/48 maxlen: 128
                          2a0f:6280:14::/48 maxlen: 48
                          2a0f:6280:15::/48 maxlen: 128
                          2a0f:6280:16::/48 maxlen: 128
                          2a0f:6280:17::/48 maxlen: 128
                          2a0f:6280:18::/48 maxlen: 128
                          2a0f:6280:19::/48 maxlen: 128
                          2a0f:6280:1a::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:92:7d:1d:92:8a:22:7d:81:85:20:a8:04:0c:8e:b4:a1:d5:8e:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
        Validity
            Not Before: Jul  2 19:28:06 2025 GMT
            Not After : Jul  1 19:33:06 2026 GMT
        Subject: CN=023F414B326BEBA61C82133363B405EA3D7509B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fe:12:80:2a:f9:18:be:16:31:76:31:cc:df:
                    5e:bc:9e:9b:b8:1f:67:0e:74:09:87:4f:f3:b2:bb:
                    33:6a:fe:14:99:ae:dc:1f:e7:9d:ac:f7:bf:74:d7:
                    5d:70:cc:f2:4d:14:09:ee:bf:62:3a:30:12:d2:73:
                    f7:e6:8a:ae:ac:d6:f8:ec:d4:62:b8:0e:f0:23:25:
                    2c:14:30:63:be:ea:cd:c4:f8:23:38:ac:c1:21:59:
                    7e:08:91:d6:dd:f2:70:34:aa:09:2b:cf:6a:30:50:
                    b4:76:0c:1b:ea:8a:35:a9:d3:da:2e:32:94:b0:f6:
                    9d:35:17:64:32:56:af:5e:73:a4:66:1c:74:91:fc:
                    ed:03:d6:18:a8:96:7c:2e:b1:79:b7:0c:a5:9e:05:
                    e0:a3:4c:d3:22:ff:75:54:7f:63:6c:b4:ba:f1:a2:
                    d3:3a:73:6c:ac:b2:da:16:4c:f0:e9:6c:2b:03:a3:
                    02:fb:b8:57:97:18:60:c1:c0:dd:6c:1d:7d:cc:9a:
                    5d:4a:1f:fe:7f:bb:78:62:8e:51:3b:96:ad:fb:d8:
                    0b:96:4f:fd:ae:4a:93:04:4f:ce:37:80:32:65:f9:
                    bc:b9:d4:45:36:8a:39:f7:3f:2b:8a:ff:fe:17:03:
                    44:70:2b:28:54:e9:67:aa:4d:5b:d2:46:8b:b3:68:
                    0c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:3F:41:4B:32:6B:EB:A6:1C:82:13:33:63:B4:05:EA:3D:75:09:B4
            X509v3 Authority Key Identifier:
                keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS47272.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:f500::/40
                  2a05:dfc3:fd24::/48
                  2a06:1281:1000::/36
                  2a09:54c6::/36
                  2a0a:6044:10::/48
                  2a0f:6280:a::/48
                  2a0f:6280:10::-2a0f:6280:1a:ffff:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         d5:83:45:1d:a7:fa:e5:55:78:f1:59:0e:3c:d4:24:c1:92:58:
         26:67:fa:2e:0c:22:0d:15:34:8b:0e:aa:a9:06:6d:25:42:fd:
         f2:94:57:b2:e5:cb:7c:01:fd:61:90:0d:9a:0c:e8:67:2b:4e:
         8d:29:9f:82:37:42:fb:7c:5d:ea:66:06:5d:ca:74:64:1c:5f:
         de:8b:df:ab:b5:2c:60:b1:82:51:66:cd:53:c6:1c:c7:39:c6:
         33:5b:db:35:d4:b7:ed:cc:b0:49:aa:61:6e:8f:10:cf:16:59:
         75:69:57:4b:d7:b7:64:2c:79:57:b0:99:f9:13:14:6f:4c:6d:
         19:19:2c:06:7b:76:b0:c9:7b:4a:d8:7d:55:05:ac:ec:62:ba:
         bc:d7:d0:c4:38:82:93:85:a4:3e:2c:03:c1:0b:38:a9:55:26:
         29:e6:f1:57:89:a0:5c:e0:8e:ba:04:e0:1e:f7:0c:2f:a6:d1:
         1c:ca:89:e1:fd:ae:a2:5b:9e:a3:61:0b:3d:24:d6:c6:58:ed:
         fb:3b:7a:56:03:71:7f:50:dc:b7:b6:25:55:27:77:e4:3a:78:
         55:01:d9:dd:0b:66:a7:1b:e7:50:21:fd:71:0a:8c:6e:85:05:
         99:d5:6e:a4:b4:7e:bf:47:10:64:7d:8d:4d:79:93:5b:8d:32:
         ea:0a:8d:3e
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIUa5J9HZKKIn2BhSCoBAyOtKHVjpEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0VERDg1NDkzNjA4RkU5QUFFNTQ2Qjg0Nzk2RUMwRjE5
N0VGMkMwMjAeFw0yNTA3MDIxOTI4MDZaFw0yNjA3MDExOTMzMDZaMDMxMTAvBgNV
BAMTKDAyM0Y0MTRCMzI2QkVCQTYxQzgyMTMzMzYzQjQwNUVBM0Q3NTA5QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc/hKAKvkYvhYxdjHM3168npu4
H2cOdAmHT/OyuzNq/hSZrtwf552s9790111wzPJNFAnuv2I6MBLSc/fmiq6s1vjs
1GK4DvAjJSwUMGO+6s3E+CM4rMEhWX4Ikdbd8nA0qgkrz2owULR2DBvqijWp09ou
MpSw9p01F2QyVq9ec6RmHHSR/O0D1hiolnwusXm3DKWeBeCjTNMi/3VUf2NstLrx
otM6c2ysstoWTPDpbCsDowL7uFeXGGDBwN1sHX3Mml1KH/5/u3hijlE7lq372AuW
T/2uSpMET843gDJl+by51EU2ijn3PyuK//4XA0RwKyhU6WeqTVvSRouzaAwXAgMB
AAGjggJfMIICWzAdBgNVHQ4EFgQUAj9BSzJr66YcghMzY7QF6j11CbQwHwYDVR0j
BBgwFoAUft2FSTYI/pquVGuEeW7A8ZfvLAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNjlmNTY1ZDQzZmFkNDUzZDg4MmQxYzFhYTZiMjhjMjAvMy83RUREODU0OTM2
MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNybDCBkwYIKwYBBQUHAQEE
gYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3Jl
cG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83RURE
ODU0OTM2MDhGRTlBQUU1NDZCODQ3OTZFQzBGMTk3RUYyQzAyLmNlcjBvBggrBgEF
BQcBCwRjMGEwXwYIKwYBBQUHMAuGU3JzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS82OWY1NjVkNDNmYWQ0NTNkODgyZDFjMWFhNmIyOGMyMC8zL0FT
NDcyNzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwYAYIKwYBBQUHAQcB
Af8EUTBPME0EAgACMEcDBgAqBd/D9QMHACoF38P9JAMGBCoGEoEQAwYEKglUxgAD
BwAqCmBEABADBwAqD2KAAAowEgMHBCoPYoAAEAMHACoPYoAAGjANBgkqhkiG9w0B
AQsFAAOCAQEA1YNFHaf65VV48VkOPNQkwZJYJmf6LgwiDRU0iw6qqQZtJUL98pRX
suXLfAH9YZANmgzoZytOjSmfgjdC+3xd6mYGXcp0ZBxf3ovfq7UsYLGCUWbNU8Yc
xznGM1vbNdS37cywSaphbo8QzxZZdWlXS9e3ZCx5V7CZ+RMUb0xtGRksBnt2sMl7
Sth9VQWs7GK6vNfQxDiCk4WkPiwDwQs4qVUmKebxV4mgXOCOugTgHvcML6bRHMqJ
4f2uolueo2ELPSTWxljt+zt6VgNxf1Dct7YlVSd35Dp4VQHZ3QtmpxvnUCH9cQqM
boUFmdVupLR+v0cQZH2NTXmTW40y6gqNPg==
-----END CERTIFICATE-----
Generated at Thu Jul 3 08:28:40 2025 by rpki-client