Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS49867.roa
File:                     AS49867.roa (raw, json)
Hash identifier:          Yv/WKi/XHokdFymlgWch4Dvc1F4kRjtCkzvhPamFPsM=
Subject key identifier:   19:8D:06:F6:E2:A1:DA:3B:D7:72:78:99:63:30:34:99:94:05:00:70
Certificate issuer:       /CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
Certificate serial:       0370C07536E17A0C149B89040B69218D8523D0EF
Authority key identifier: 7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS49867.roa
Signing time:             Wed 02 Jul 2025 19:33:08 +0000
ROA not before:           Wed 02 Jul 2025 19:28:08 +0000
ROA not after:            Wed 01 Jul 2026 19:33:08 +0000
asID:                     49867
IP address blocks:        2a05:dfc3:f400::/40 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:70:c0:75:36:e1:7a:0c:14:9b:89:04:0b:69:21:8d:85:23:d0:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EDD85493608FE9AAE546B84796EC0F197EF2C02
        Validity
            Not Before: Jul  2 19:28:08 2025 GMT
            Not After : Jul  1 19:33:08 2026 GMT
        Subject: CN=198D06F6E2A1DA3BD77278996330349994050070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:01:66:0e:54:7c:9e:eb:c8:92:d7:d4:55:f3:
                    59:98:63:ac:50:5f:0f:92:2a:8e:a8:c8:ed:3f:15:
                    ca:fc:77:b8:eb:cc:5e:f1:f9:ab:2d:5a:f8:c2:eb:
                    dd:bb:a1:5d:4a:2c:5c:df:6d:d0:4e:92:34:a9:60:
                    16:4f:b9:bb:24:ed:cc:1e:ac:d1:17:63:5b:35:65:
                    b4:40:17:4a:0c:6c:55:75:f4:a3:94:40:b6:7d:53:
                    a7:7e:f7:d6:ab:f4:eb:7b:2d:91:30:62:54:ee:15:
                    67:0b:10:df:1d:0f:69:9c:43:2f:82:96:be:b5:c6:
                    4e:11:73:94:fb:00:73:60:42:35:e4:9b:5e:44:f1:
                    bf:fd:66:e5:17:28:38:29:ba:27:77:c2:29:6a:07:
                    56:10:10:b5:18:e6:bd:5f:12:dc:f1:fe:b2:98:63:
                    cf:ab:7a:60:fe:76:e5:e3:93:56:31:96:b1:8a:50:
                    ab:2c:97:29:00:51:f2:39:e2:46:21:0e:df:a0:7d:
                    a1:bb:ab:61:f2:1d:95:f3:4e:65:4e:58:0d:46:2e:
                    41:4a:03:c2:66:03:39:46:64:b8:dd:2c:5a:bf:84:
                    93:66:94:b5:ff:ce:3e:0b:cc:5d:e9:65:a3:e8:b1:
                    44:37:ab:07:12:d9:f7:ef:da:2f:de:57:66:5c:03:
                    2d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8D:06:F6:E2:A1:DA:3B:D7:72:78:99:63:30:34:99:94:05:00:70
            X509v3 Authority Key Identifier:
                keyid:7E:DD:85:49:36:08:FE:9A:AE:54:6B:84:79:6E:C0:F1:97:EF:2C:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/7EDD85493608FE9AAE546B84796EC0F197EF2C02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/7EDD85493608FE9AAE546B84796EC0F197EF2C02.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/69f565d43fad453d882d1c1aa6b28c20/3/AS49867.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc3:f400::/40

    Signature Algorithm: sha256WithRSAEncryption
         10:59:1d:49:92:6a:26:57:f9:7e:d2:bf:60:a0:77:3e:61:bd:
         28:5c:b8:41:c4:b1:56:f8:f6:60:7b:c1:18:41:7c:f7:de:57:
         4e:38:9d:b4:42:bf:6e:37:d3:94:e2:4b:72:5e:a2:c1:07:20:
         10:d0:32:61:90:e8:70:14:a3:1f:8b:d1:2b:80:f3:48:e0:00:
         39:ee:70:87:f4:0f:87:d7:4b:c3:4f:65:39:61:16:40:49:ee:
         ce:68:98:89:9d:fd:de:09:b0:58:19:48:6b:57:95:3b:63:2f:
         a8:b9:d2:2f:a7:29:03:f7:80:45:67:1e:cf:27:80:2f:ba:10:
         5b:26:16:db:a2:35:4a:ed:53:f0:5d:69:29:d9:eb:97:b2:77:
         42:e2:a2:91:f7:2d:02:5e:72:41:0f:33:44:f2:7e:14:83:25:
         fb:2a:49:8b:5c:0c:2b:d7:c8:ee:6a:f8:9b:49:ec:eb:d1:1d:
         9c:f5:b1:f2:85:0a:50:0e:f2:5e:e6:64:2f:50:18:ee:69:48:
         6a:b7:36:50:79:d8:60:56:0b:d5:96:1f:69:78:aa:15:28:6f:
         c8:01:32:e3:a9:08:a9:c6:1b:c2:cd:cd:e6:d6:76:c8:42:04:
         90:02:fc:15:10:25:41:0d:95:4b:09:ce:d5:80:d6:e5:71:2f:
         71:8d:27:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 23:02:13 2025 by rpki-client