Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202941.roa
File:                     AS202941.roa (raw, json)
Hash identifier:          kmp3QIyW/49N4Nd4Ps2LVquLxhzxla5h3hiAiWx/dy4=
Subject key identifier:   06:D9:42:CF:D6:FB:13:50:FB:A2:8B:AC:00:C2:D1:A4:EC:78:75:71
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       3B0490CC6AA9C2B91F714BC023941F5AE2DFC161
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202941.roa
Signing time:             Thu 12 Dec 2024 22:40:12 +0000
ROA not before:           Thu 12 Dec 2024 22:35:12 +0000
ROA not after:            Thu 11 Dec 2025 22:40:12 +0000
asID:                     202941
IP address blocks:        2a06:a005:1860::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:04:90:cc:6a:a9:c2:b9:1f:71:4b:c0:23:94:1f:5a:e2:df:c1:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec 12 22:35:12 2024 GMT
            Not After : Dec 11 22:40:12 2025 GMT
        Subject: CN=06D942CFD6FB1350FBA28BAC00C2D1A4EC787571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f0:89:87:fc:50:f0:65:a5:b5:dc:61:bc:28:
                    b3:24:b7:95:c3:08:35:98:b9:97:4d:8c:ad:4d:80:
                    a4:02:b3:e9:a1:46:ed:9c:71:b6:7c:87:5b:3b:9c:
                    a3:20:ff:97:cc:94:6a:55:03:5a:a9:4c:94:f0:df:
                    15:c3:c3:f0:dd:1e:09:fb:6e:82:5e:c1:9d:1b:2a:
                    9a:d4:fc:a7:71:9c:30:fd:fa:7b:b5:73:b2:7c:a1:
                    27:65:88:d3:d7:70:cc:f9:f8:86:15:68:52:13:b5:
                    e1:25:48:06:0b:c9:4d:9b:12:49:89:43:2c:30:73:
                    f3:4a:45:9b:fd:0c:ed:c4:af:87:b1:70:fb:b9:63:
                    a8:2c:fa:41:87:b0:17:1a:91:23:36:a2:6e:23:ca:
                    cf:93:f7:4c:ed:cf:06:98:87:57:70:b2:01:75:16:
                    b0:2e:8c:51:07:e2:c2:28:85:b2:cc:4a:d5:71:91:
                    be:a1:1c:c5:7b:60:41:65:6a:df:d7:a7:80:d4:08:
                    82:24:bd:ac:32:6b:1a:fa:8c:af:20:e7:36:e8:83:
                    91:d6:1a:49:a1:d1:76:b5:0e:ad:ba:54:43:f2:0e:
                    54:b1:ba:18:15:ee:8f:54:f8:cb:e3:68:7e:8e:f5:
                    36:e9:41:f0:ca:b6:97:1e:a7:fe:cc:e6:fb:4b:ca:
                    bd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D9:42:CF:D6:FB:13:50:FB:A2:8B:AC:00:C2:D1:A4:EC:78:75:71
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS202941.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:1860::/44

    Signature Algorithm: sha256WithRSAEncryption
         04:1e:cd:ea:80:94:c0:69:c3:ba:15:5e:9c:9a:42:14:26:04:
         6c:d1:ae:88:f1:0c:57:79:5c:d7:b2:41:0e:65:db:a3:a7:17:
         4b:4d:e0:68:11:ff:cc:38:29:bc:07:b9:06:0e:4a:f8:d9:a0:
         8a:cd:61:76:06:78:c3:f6:de:68:d5:1f:ba:84:e9:89:c9:c4:
         48:a1:09:1f:e5:73:44:ad:31:6f:8e:d6:ab:0b:09:01:3e:e6:
         bf:0c:ce:55:e6:17:27:ab:4e:47:46:1f:f7:5c:7d:24:c6:bb:
         df:99:82:d1:7f:2b:d0:fc:3c:9a:b7:67:e0:51:81:68:fe:0e:
         3a:9e:29:a3:31:19:99:3a:16:64:3d:af:56:88:b3:a5:33:e8:
         10:d0:ff:58:56:0b:fd:43:5b:49:e5:2a:22:37:6b:e0:68:40:
         ff:62:76:90:01:09:9b:8d:fb:5c:bb:29:9e:8e:21:ee:ec:73:
         2b:20:41:fa:14:ed:d9:e6:ae:d8:5d:b8:bf:3a:12:b0:87:5a:
         1e:35:d8:21:e4:36:ed:5b:20:cc:1c:4b:90:11:3b:26:81:1f:
         ef:eb:8e:0a:04:33:3a:ba:4c:ca:d4:22:2b:53:69:89:d2:86:
         ec:f2:7a:9f:0c:5d:bc:5a:78:90:99:56:a7:fc:40:8c:09:44:
         1d:f5:89:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:15:05 2025 by rpki-client