Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200360.roa
File:                     AS200360.roa (raw, json)
Hash identifier:          JNIptPJAl3UDgiiIlvdk5CJ4yhlT3laZYECrRsIwxVA=
Subject key identifier:   91:DA:89:03:DD:49:BE:4B:EF:97:89:57:37:ED:5A:FA:8E:7E:89:8C
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       7EA0AEA56CE69196D304C4D2A0EE48D00A956E8A
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200360.roa
Signing time:             Wed 08 Jan 2025 03:40:16 +0000
ROA not before:           Wed 08 Jan 2025 03:35:16 +0000
ROA not after:            Wed 07 Jan 2026 03:40:16 +0000
asID:                     200360
IP address blocks:        2a06:a005:1804::/46 maxlen: 48
                          2a06:a005:187f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:a0:ae:a5:6c:e6:91:96:d3:04:c4:d2:a0:ee:48:d0:0a:95:6e:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan  8 03:35:16 2025 GMT
            Not After : Jan  7 03:40:16 2026 GMT
        Subject: CN=91DA8903DD49BE4BEF97895737ED5AFA8E7E898C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:03:30:d8:ab:45:47:7c:80:8a:8a:9f:66:40:
                    96:02:88:a2:15:f9:18:c9:6c:af:2a:34:4f:09:94:
                    08:03:ea:92:26:e2:8b:78:96:5c:aa:05:d7:b9:ca:
                    04:2e:2a:06:cd:6f:e7:2f:5b:fb:91:94:52:53:c8:
                    28:93:56:c5:3c:4f:e2:40:c4:d7:d0:59:ce:ab:22:
                    ad:5d:df:02:0f:65:f7:8c:59:9c:dd:9a:f9:8e:69:
                    1e:03:c7:e2:88:12:9f:02:f8:12:1f:cf:48:ca:f1:
                    85:d9:b2:3c:02:36:f7:27:aa:89:10:07:c2:45:75:
                    3f:d0:e3:5b:b5:9d:e6:5e:80:8b:cc:ac:98:5f:f0:
                    16:a2:a4:fb:3d:ac:aa:35:46:f4:c5:64:a8:03:a8:
                    7d:e6:48:73:ee:73:3b:a8:6a:f8:ee:b7:ca:34:42:
                    47:77:0b:c0:53:08:d0:12:ab:d2:7b:1a:90:c6:d2:
                    f9:10:35:64:87:cd:78:49:11:e9:d5:cd:c5:19:19:
                    de:5f:30:70:f6:07:9a:d1:d3:5a:fc:cd:ef:aa:64:
                    be:9a:07:82:01:75:15:91:d4:0e:3f:a6:6c:5e:e8:
                    c5:05:32:bf:b0:73:61:cc:19:a3:2a:22:42:5c:af:
                    f1:47:71:d4:95:9f:57:42:b5:34:4e:17:bf:cb:04:
                    4a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:DA:89:03:DD:49:BE:4B:EF:97:89:57:37:ED:5A:FA:8E:7E:89:8C
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS200360.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1804::/46
                  2a06:a005:187f::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:ed:85:20:2c:29:18:69:14:5f:65:cc:2c:3b:14:a2:9d:f4:
         eb:88:7b:56:07:da:7c:94:1f:5c:87:7a:1c:7c:57:dc:76:d7:
         95:41:cc:ee:8c:40:66:6a:d2:86:b5:79:2c:1f:47:f1:d5:c7:
         c8:d1:a7:38:6c:60:f9:94:46:fa:3e:c4:52:96:5c:96:b8:40:
         35:06:f5:98:ea:39:97:da:d7:7e:28:36:da:f8:32:1c:da:c6:
         97:8a:ff:91:2a:1f:de:8a:ff:a7:c7:79:ff:47:6e:8b:8e:f7:
         e9:71:a0:ff:e5:97:13:6a:b9:62:c8:21:28:67:a7:5d:0b:ad:
         b1:f9:d7:44:54:b3:83:3f:41:ae:4d:b9:e2:04:1e:77:b3:9a:
         1c:39:f4:c4:2b:d6:c4:c2:a7:ab:fc:8e:69:24:73:50:7b:e9:
         e7:9a:b7:f4:38:d8:18:f0:15:fb:67:9b:58:c8:43:9f:e8:a8:
         bb:44:c2:10:5e:f5:19:f7:08:e0:8b:56:29:6f:33:85:84:8f:
         d2:33:a8:68:98:16:1f:ed:7a:b1:a8:8a:72:5c:fc:55:d2:89:
         d9:67:b3:d7:32:0e:78:ab:b9:70:5a:4e:bd:3d:b4:62:81:d1:
         43:79:ee:ae:e2:bf:8e:6f:f4:c2:40:18:f9:00:24:a7:af:4e:
         4c:ae:39:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:41:24 2025 by rpki-client