Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203218.roa
File:                     AS203218.roa (raw, json)
Hash identifier:          zcxzCLn/qb3I6SRTFEFZGPf6XC8ikWbRnTVgzC0fl6w=
Subject key identifier:   5A:51:E5:58:9E:6F:AF:BB:B4:27:44:25:37:E1:DA:86:9C:75:97:DC
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       2F3DD45527E0A5E1DBAF768E6E2863F3F439A9D4
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203218.roa
Signing time:             Tue 01 Jul 2025 21:36:34 +0000
ROA not before:           Tue 01 Jul 2025 21:31:34 +0000
ROA not after:            Tue 30 Jun 2026 21:36:34 +0000
asID:                     203218
IP address blocks:        144.48.81.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3d:d4:55:27:e0:a5:e1:db:af:76:8e:6e:28:63:f3:f4:39:a9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jul  1 21:31:34 2025 GMT
            Not After : Jun 30 21:36:34 2026 GMT
        Subject: CN=5A51E5589E6FAFBBB427442537E1DA869C7597DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ee:c1:25:28:d1:9c:d8:74:e9:7c:78:b0:f2:
                    62:8c:a2:61:f8:8e:60:32:c4:d4:b4:c0:0c:3c:3d:
                    5e:0c:25:45:2d:03:8b:78:3d:67:cf:87:6d:cb:5d:
                    0f:05:96:cc:5e:cb:de:94:c7:40:92:bd:6d:6b:e1:
                    a1:4f:2c:11:76:97:6b:b5:f2:8f:3c:83:37:68:a0:
                    61:82:bd:1a:db:c1:ae:83:78:80:79:09:6e:90:f7:
                    fa:bf:b8:5d:0a:9e:8f:2e:18:69:6f:8b:ee:b5:b6:
                    d0:32:3b:ac:3a:74:e4:1b:88:e6:b6:6d:f0:cf:03:
                    60:2e:b7:7b:5e:22:99:06:f5:46:ed:53:bd:b3:f6:
                    8c:5f:12:40:32:f5:4c:94:ed:95:19:83:2a:76:a6:
                    9b:47:9d:28:59:df:9d:3e:c7:3a:fc:db:60:2b:91:
                    00:a8:7e:b7:03:68:9d:d4:73:8a:20:3d:a9:22:7a:
                    3a:9e:c3:d3:31:69:ca:4f:d5:2c:37:73:d7:68:17:
                    2f:ec:f8:8b:37:51:d6:6c:53:da:2a:0d:d1:55:83:
                    f1:e2:d6:1b:13:b6:ac:0f:7c:c7:e4:9a:6d:b9:45:
                    54:1e:c3:03:7d:f3:d3:ec:eb:12:bd:18:0d:03:9f:
                    ae:dd:bc:37:dc:84:b9:ff:84:76:55:87:1a:66:35:
                    1a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:51:E5:58:9E:6F:AF:BB:B4:27:44:25:37:E1:DA:86:9C:75:97:DC
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS203218.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.48.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:8d:2a:23:51:a5:84:2f:34:54:27:b7:06:48:5d:b9:30:c1:
         7a:ba:8d:af:2d:4c:bb:4f:ea:fd:cb:77:bc:75:b3:a3:a3:26:
         6f:bc:b3:06:fc:25:0c:cd:52:8e:64:26:84:a0:42:90:29:a1:
         fb:35:b9:08:02:c7:17:dd:1b:64:e9:14:40:fa:05:2d:dd:1e:
         15:0c:0a:c0:28:cd:37:35:bc:70:61:52:a5:3c:e2:8b:2d:1c:
         c3:ea:88:31:bd:dd:a6:6e:a2:27:da:54:08:3f:68:79:a7:8e:
         35:b5:64:61:13:67:98:88:90:1b:7f:08:4e:23:30:8a:ed:4d:
         a5:45:af:07:15:c4:45:bb:56:61:14:1e:0d:06:eb:e3:56:0a:
         75:18:38:1a:55:f0:e3:76:55:a1:86:27:9e:4b:fa:a6:fb:ca:
         18:4f:d0:7a:1d:ce:c6:5a:98:bb:cc:4e:6d:a9:bb:6c:1b:7e:
         44:5e:35:f9:69:09:aa:16:41:33:aa:cd:c3:b9:a9:da:ee:2f:
         33:37:3d:9a:fb:75:7c:47:d3:7e:08:5f:f1:46:f5:85:98:b9:
         e9:1d:7c:3c:3c:6c:82:dc:5a:62:d0:e8:bb:1a:83:44:ef:0b:
         22:ed:e2:b4:11:b9:f7:8f:c9:b9:58:35:31:17:60:20:79:35:
         af:4e:f9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 11:54:55 2025 by rpki-client