Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS48678.roa
File:                     AS48678.roa (raw, json)
Hash identifier:          74FFi023tmAjai1fHklTJdwD3jD9FswN1X8FX8NdzDA=
Subject key identifier:   90:FD:EF:54:CC:9E:44:B2:6A:56:82:6C:98:01:9A:E2:F7:78:FF:A4
Certificate issuer:       /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial:       0CEF48505F3967AFE1920F4A19A2D5B13BC99C88
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS48678.roa
Signing time:             Wed 02 Jul 2025 19:33:05 +0000
ROA not before:           Wed 02 Jul 2025 19:28:05 +0000
ROA not after:            Wed 01 Jul 2026 19:33:05 +0000
asID:                     48678
IP address blocks:        2a05:dfc3:fd23::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:ef:48:50:5f:39:67:af:e1:92:0f:4a:19:a2:d5:b1:3b:c9:9c:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
        Validity
            Not Before: Jul  2 19:28:05 2025 GMT
            Not After : Jul  1 19:33:05 2026 GMT
        Subject: CN=90FDEF54CC9E44B26A56826C98019AE2F778FFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d6:21:2a:85:5a:23:f1:82:10:4c:d9:03:20:
                    e8:2c:01:11:ad:36:11:8a:74:40:7a:24:6e:19:49:
                    b0:aa:c4:a5:44:a3:74:d5:86:99:e9:99:55:e5:99:
                    a8:ae:f0:74:8e:11:a2:5a:9e:19:cb:7d:dc:52:95:
                    06:bf:a4:8d:cf:96:88:f0:18:9c:8e:07:74:6a:44:
                    51:5f:7f:4e:5b:e5:4f:27:de:55:43:06:82:7e:42:
                    87:c2:b2:35:8a:c9:4a:63:ee:f7:44:e3:37:ed:78:
                    27:48:36:e0:5c:f5:e6:22:d4:53:9a:7f:02:d5:26:
                    04:f9:67:9d:2b:cd:87:c7:4f:4e:d4:5e:7b:be:92:
                    f9:41:4a:13:9b:e6:d1:2f:69:3c:97:d6:7d:21:6d:
                    28:35:3e:b0:f0:79:83:a2:31:98:52:80:d8:46:be:
                    f1:5a:19:fa:6a:02:e6:cd:c0:a9:5d:f1:90:8f:3b:
                    dd:90:4f:d8:ce:4d:42:2e:49:de:c7:e8:fa:6e:87:
                    46:0d:fa:4a:c9:50:ac:7d:aa:3b:69:65:bf:6b:47:
                    b9:1a:6a:a7:08:a0:4b:ed:1e:07:95:2a:69:44:99:
                    5b:44:37:14:a8:dd:54:ee:66:2e:ef:f4:c6:bc:13:
                    12:51:54:ed:b8:9b:3e:c8:f1:25:34:51:ef:0b:80:
                    12:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FD:EF:54:CC:9E:44:B2:6A:56:82:6C:98:01:9A:E2:F7:78:FF:A4
            X509v3 Authority Key Identifier:
                keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS48678.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:fd23::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:62:a1:24:ea:0b:9b:af:30:4d:ec:61:d9:ed:fa:42:eb:4a:
         21:ab:5d:39:53:13:0c:c6:58:5a:1f:0c:53:46:ce:72:eb:a9:
         8e:53:a3:30:9c:ea:e7:fd:61:e5:79:f9:d5:2c:7c:94:32:b3:
         15:9a:1e:72:21:f3:05:e0:20:66:48:f8:79:04:76:52:0c:f8:
         1f:40:22:41:51:1d:ac:b4:70:bb:c0:70:8a:88:be:0c:a0:33:
         30:06:1f:96:28:b6:67:38:3e:5c:df:8c:19:4e:0c:e9:98:61:
         c6:c7:35:17:75:3f:4e:11:a8:cb:e0:ef:3e:e3:98:20:7a:5c:
         94:f7:2e:40:50:a7:d2:6c:ee:cf:50:52:20:d2:89:86:9b:23:
         29:ff:ff:92:f5:20:17:d5:8e:b1:98:a0:1d:92:0e:14:1b:a7:
         16:10:98:b6:51:26:bb:64:88:61:02:16:88:1e:a6:1f:4f:4c:
         ae:bf:a4:d8:2b:7a:6d:23:c8:36:a8:6b:6b:9f:2d:a4:87:1b:
         06:4b:52:71:dd:74:e8:eb:29:cd:94:94:f3:29:28:4f:eb:e3:
         ee:60:6a:e1:fd:32:5f:f6:46:20:3e:cb:66:10:36:a8:c4:4f:
         4f:c2:2b:3a:c1:c8:b5:72:c2:fa:ed:42:e3:d2:de:4e:61:e2:
         0d:10:a5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 01:40:20 2025 by rpki-client