Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200153.roa
File:                     AS200153.roa (raw, json)
Hash identifier:          Pmq0lTBxLA5IVadixWfhWtEVXGuehO175fQSdhLu+kg=
Subject key identifier:   C6:FD:CB:6E:D2:AC:EC:14:20:CA:6A:B8:76:11:BD:12:26:86:18:F3
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       28E758B74B2D0CFF0FFDB01CA17FE3A279BABD25
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200153.roa
Signing time:             Tue 26 Nov 2024 20:40:12 +0000
ROA not before:           Tue 26 Nov 2024 20:35:12 +0000
ROA not after:            Tue 25 Nov 2025 20:40:12 +0000
asID:                     200153
IP address blocks:        2a06:a005:1873::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e7:58:b7:4b:2d:0c:ff:0f:fd:b0:1c:a1:7f:e3:a2:79:ba:bd:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov 26 20:35:12 2024 GMT
            Not After : Nov 25 20:40:12 2025 GMT
        Subject: CN=C6FDCB6ED2ACEC1420CA6AB87611BD12268618F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4e:61:72:ae:c7:81:f9:1d:74:92:cc:7b:c8:
                    a0:a7:a5:33:ed:ec:16:65:6b:88:23:4f:9d:2a:e5:
                    91:a6:52:c0:66:98:a0:28:0e:fe:fb:c2:7e:71:78:
                    38:77:6f:3c:8c:f8:26:e1:67:ec:c7:d3:dd:d8:59:
                    58:ab:f9:dd:09:13:b3:9d:51:ac:31:06:96:28:9b:
                    19:55:c2:f5:7c:3a:41:93:8d:e5:89:71:09:09:c2:
                    7a:f6:89:70:3d:41:cf:87:42:40:0d:38:29:4b:fd:
                    55:a6:81:f9:71:dc:89:96:b5:24:f2:78:ae:0d:8f:
                    3a:f9:dc:21:9b:d6:14:16:bf:50:20:d3:b1:78:c4:
                    13:0c:f6:1f:48:1d:04:24:fe:59:dd:f5:6b:9b:c9:
                    75:ee:8f:9d:aa:fc:20:9e:d8:de:a8:9b:54:18:a3:
                    9f:85:e7:3e:68:ca:8b:ec:fd:e9:1a:17:24:fe:90:
                    f6:44:f1:65:d1:fd:51:56:90:96:6e:d9:7e:34:1f:
                    7d:12:eb:22:26:93:be:f5:31:f6:2a:96:8b:c3:76:
                    ea:99:31:cb:66:e5:25:81:a4:43:74:19:c7:e5:5f:
                    21:db:96:e9:2c:b8:9d:71:a0:3f:f9:ed:86:00:33:
                    8e:b4:93:b3:ec:ce:c7:84:50:b3:8c:66:6b:2a:ee:
                    e2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:FD:CB:6E:D2:AC:EC:14:20:CA:6A:B8:76:11:BD:12:26:86:18:F3
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200153.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1873::/48

    Signature Algorithm: sha256WithRSAEncryption
         b4:6d:2e:68:49:f8:27:f0:d4:af:8e:26:6c:e0:51:54:13:b1:
         b7:2e:23:6b:cb:05:d2:12:af:bc:db:35:82:5b:78:d7:82:0e:
         5b:a6:75:33:b0:25:10:81:dc:f1:ff:11:b3:3c:99:bf:ba:9e:
         b6:88:2a:d8:9c:74:7b:bf:2c:25:df:30:88:a1:94:3e:18:a1:
         99:a3:9d:18:d6:c9:00:30:9f:58:08:73:e5:89:37:9f:af:fc:
         34:2b:97:83:82:2c:7e:f7:42:92:68:0b:b3:db:9a:53:bf:47:
         11:3d:e3:75:89:35:56:a9:75:37:c9:5c:c8:72:7c:c9:45:0c:
         f0:3c:d1:91:07:83:f4:bb:d4:6b:90:4b:c6:82:7f:3c:67:aa:
         2e:ad:1b:14:a6:a8:c7:6f:e0:8b:0d:bc:6c:05:46:bb:0b:ac:
         10:f2:fc:13:af:02:4e:60:27:8d:98:06:b3:49:50:3a:cb:69:
         04:a6:e0:17:87:88:49:85:cd:60:01:b1:53:ff:9e:a7:8b:88:
         e8:ef:48:10:a9:43:b0:5d:23:14:3b:3e:ea:81:dd:47:b0:37:
         23:64:fc:76:39:a1:12:af:04:00:e4:b2:a4:de:28:a0:f5:0d:
         fe:0e:a2:ed:c0:77:d6:d6:d4:87:e7:12:00:af:f7:b7:c9:47:
         27:47:72:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:16:52 2025 by rpki-client