Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397165.roa
File:                     AS397165.roa (raw, json)
Hash identifier:          bswIWWvWoWewaZANIYtK4zaXHAHxdYk2qZYcKGTRGmw=
Subject key identifier:   35:95:E4:41:1E:A6:F6:BD:00:78:4D:03:74:A9:C2:07:19:E8:BD:82
Certificate issuer:       /CN=ec93568485034d6f590126278015e55786765323f329d6aa05
Certificate serial:       0580106614EB27356ECE60CF0E904E9D4341CA96
Authority key identifier: BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397165.roa
Signing time:             Tue 06 Aug 2024 21:54:46 +0000
ROA not before:           Tue 06 Aug 2024 21:49:46 +0000
ROA not after:            Tue 05 Aug 2025 21:54:46 +0000
asID:                     397165
IP address blocks:        2603:f000::/20 maxlen: 28
                          2603:f010::/28 maxlen: 28
                          2603:f050::/28 maxlen: 28
                          2603:f090::/28 maxlen: 28
                          2603:f0e0::/28 maxlen: 28
                          2603:f120::/28 maxlen: 28
                          2603:f160::/28 maxlen: 28
                          2603:f1b0::/28 maxlen: 28
                          2603:f1f0::/28 maxlen: 28
                          2603:f210::/28 maxlen: 28
                          2603:f250::/28 maxlen: 28
                          2603:f2a0::/28 maxlen: 28
                          2603:f2e0::/28 maxlen: 28
                          2603:f330::/28 maxlen: 28
                          2603:f380::/28 maxlen: 28
                          2603:f3a0::/28 maxlen: 28
                          2603:f3e0::/28 maxlen: 28
                          2603:f400::/28 maxlen: 28
                          2603:f420::/28 maxlen: 28
                          2603:f460::/28 maxlen: 28
                          2603:f4d0::/28 maxlen: 28
                          2603:f520::/28 maxlen: 28
                          2603:f540::/28 maxlen: 28
                          2603:f5d0::/28 maxlen: 28
                          2603:f5f0::/28 maxlen: 28
                          2603:f610::/28 maxlen: 28
                          2603:f630::/28 maxlen: 28
                          2603:f650::/28 maxlen: 28
                          2603:f6a0::/28 maxlen: 28
                          2603:f720::/28 maxlen: 28
                          2603:f780::/28 maxlen: 28
                          2603:f7b0::/28 maxlen: 28
                          2603:f7e0::/28 maxlen: 28
                          2603:f800::/28 maxlen: 28
                          2603:f830::/28 maxlen: 28
                          2603:f860::/28 maxlen: 28
                          2603:f8c0::/28 maxlen: 28
                          2603:f910::/28 maxlen: 28
                          2603:f940::/28 maxlen: 28
                          2603:f970::/28 maxlen: 28
                          2603:f9d0::/28 maxlen: 28
                          2603:fa00::/28 maxlen: 28
                          2603:fa20::/28 maxlen: 28
                          2603:fa80::/28 maxlen: 28
                          2603:fae0::/28 maxlen: 28
                          2603:fb30::/28 maxlen: 28
                          2603:fb60::/28 maxlen: 28
                          2603:fb90::/28 maxlen: 28
                          2603:fbc0::/28 maxlen: 28
                          2603:fc00::/28 maxlen: 28
                          2603:fc40::/28 maxlen: 28
                          2603:fca0::/28 maxlen: 28
                          2603:fcc0::/28 maxlen: 28
                          2603:fd20::/28 maxlen: 28
                          2603:fd40::/28 maxlen: 28
                          2603:fda0::/28 maxlen: 28
                          2603:fdc0::/28 maxlen: 28
                          2603:fe00::/28 maxlen: 28
                          2603:fe30::/28 maxlen: 28
                          2603:fe70::/28 maxlen: 28
                          2603:fee0::/28 maxlen: 28
                          2603:ff10::/28 maxlen: 28
                          2603:ff50::/28 maxlen: 28
                          2603:ff90::/28 maxlen: 28
                          2603:ffa0::/28 maxlen: 28
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:80:10:66:14:eb:27:35:6e:ce:60:cf:0e:90:4e:9d:43:41:ca:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec93568485034d6f590126278015e55786765323f329d6aa05
        Validity
            Not Before: Aug  6 21:49:46 2024 GMT
            Not After : Aug  5 21:54:46 2025 GMT
        Subject: CN=3595E4411EA6F6BD00784D0374A9C20719E8BD82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b5:3d:72:a2:d7:23:49:8d:75:1e:02:70:05:
                    37:6b:70:7a:d2:76:b4:3e:d3:f5:de:37:c3:a5:c4:
                    87:08:44:f1:d5:0b:35:b0:d4:7e:f7:2a:fe:f5:bf:
                    75:02:9b:a6:6c:4d:09:1a:45:41:66:1e:3a:9d:8c:
                    e1:f8:f8:ae:a0:c3:58:f4:12:3e:ca:4e:d3:e6:c1:
                    ef:d3:c1:34:25:e0:22:f8:80:99:cb:c0:2d:3e:d5:
                    c4:25:23:85:c2:24:45:8e:4c:36:a8:3a:32:3a:d3:
                    7b:4c:8a:31:4f:cf:a8:0a:5f:3f:7b:ff:8f:25:71:
                    48:75:61:31:ef:f7:2d:7b:fd:c8:c1:e8:bc:6f:b6:
                    e6:62:cb:8f:00:6d:18:36:0f:88:84:ec:e0:9f:5a:
                    60:31:cd:db:11:8e:85:2e:7c:f3:9a:bd:f5:9c:ea:
                    72:1c:32:bf:a0:0b:e2:1f:b5:cc:15:f6:e4:14:da:
                    13:28:b7:32:8c:39:65:34:94:13:3d:39:a8:f1:ea:
                    03:dd:70:68:5e:48:f8:2e:a9:a2:11:3e:21:a6:48:
                    45:b3:e7:53:ce:ea:26:36:6a:88:d9:51:84:09:20:
                    b7:3c:e2:e7:2c:b1:03:03:c2:76:a8:66:bc:37:87:
                    9b:90:02:f7:50:71:76:4d:fb:be:7f:1b:ab:d8:67:
                    b1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:95:E4:41:1E:A6:F6:BD:00:78:4D:03:74:A9:C2:07:19:E8:BD:82
            X509v3 Authority Key Identifier:
                keyid:BB:27:B3:7B:58:F0:56:06:E1:5F:52:CA:24:2E:A1:D4:FE:B6:B3:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/BB27B37B58F05606E15F52CA242EA1D4FEB6B304.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c556b910-dc6c-4228-adf3-8828ac96ee60/ec93568485034d6f590126278015e55786765323f329d6aa05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de4101837fd0df0a70c8/0/AS397165.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2603:f000::/20

    Signature Algorithm: sha256WithRSAEncryption
         28:ba:01:db:cd:07:07:62:e6:9e:80:dd:ab:a6:14:32:b1:44:
         42:fa:66:c8:5c:07:8d:c0:4e:e8:73:47:d0:e1:1d:4d:1c:01:
         d5:d9:fa:a4:f7:e0:58:18:ee:1e:76:e4:d9:72:76:5a:db:f3:
         15:36:80:6d:b4:19:56:34:4a:a0:fc:98:d9:c8:b5:73:86:57:
         d2:a9:92:66:a6:5f:79:31:a3:74:fd:4d:7a:f9:d5:5b:72:f1:
         4c:49:7b:ce:bd:5b:66:66:9e:77:1b:19:33:d2:59:fb:62:8b:
         28:c8:68:93:b7:d3:14:2d:a9:af:07:78:2c:dc:1d:84:b9:59:
         36:95:36:ad:30:38:1c:cf:14:b1:ab:9c:23:ad:1e:ff:87:e5:
         ce:f0:b2:fd:be:33:19:06:9d:3b:ea:18:d3:ff:86:ee:b8:e7:
         df:28:67:38:38:fa:5b:5e:08:20:a0:f0:8f:ac:7d:34:0d:fe:
         67:f1:ff:a4:db:75:ff:55:d7:df:b9:dc:c7:72:9f:e8:28:3f:
         e3:a7:80:45:50:94:f8:a0:38:ad:1c:74:db:ce:18:51:b3:cc:
         7e:29:85:e9:34:19:d3:78:e0:35:03:d0:6f:7c:1a:73:1b:b5:
         08:2e:e5:ce:22:cd:82:12:8c:03:43:6d:d0:74:b2:58:ee:28:
         70:7f:bc:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:11 2025 by rpki-client