Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205232.roa
File:                     AS205232.roa (raw, json)
Hash identifier:          fy20SqOy3yEXY2dyE0Ic2wFN6Tb1on0Djh5umnmmcaY=
Subject key identifier:   A4:78:32:58:C5:7B:EB:F2:89:54:64:E4:43:9D:78:C8:04:49:34:2E
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       399A6465D543E485D7B57395CF24802E6D365C5F
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205232.roa
Signing time:             Mon 06 Jan 2025 18:40:16 +0000
ROA not before:           Mon 06 Jan 2025 18:35:16 +0000
ROA not after:            Mon 05 Jan 2026 18:40:16 +0000
asID:                     205232
IP address blocks:        2a06:a005:18f0::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:9a:64:65:d5:43:e4:85:d7:b5:73:95:cf:24:80:2e:6d:36:5c:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Jan  6 18:35:16 2025 GMT
            Not After : Jan  5 18:40:16 2026 GMT
        Subject: CN=A4783258C57BEBF2895464E4439D78C80449342E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:52:56:c2:99:95:ec:88:bb:3d:c4:1d:b0:dd:
                    ab:1a:8b:68:6e:42:68:05:5c:79:55:8b:7f:1e:ef:
                    8b:90:c9:9e:5a:c5:0c:c9:6d:df:35:49:68:e9:d0:
                    f8:00:57:62:b7:71:05:1b:08:b7:2b:cf:27:f1:8d:
                    81:ce:75:a2:25:f7:8b:2f:5f:0d:66:a7:97:cc:5a:
                    f2:ff:cf:14:cb:97:d6:5c:84:09:ea:28:f1:22:3c:
                    a1:dd:37:15:5a:dc:61:e4:8e:17:3f:d3:89:50:b7:
                    16:7a:bf:0f:18:57:0b:8d:36:41:97:21:43:47:b8:
                    36:4a:03:e3:fd:54:60:a6:1f:8d:78:f2:aa:6b:f3:
                    7c:cf:11:1a:4d:1a:57:3c:c8:9d:33:2e:13:f2:7c:
                    0f:09:26:fc:31:59:e9:ee:8a:40:93:07:e6:19:b3:
                    2f:5b:5f:5e:15:b3:b7:2e:14:e9:be:ed:6d:97:1c:
                    6a:ba:67:0d:fe:8d:c0:a2:b6:ac:95:cd:02:74:dc:
                    fa:fc:95:7f:71:54:66:47:2b:2a:14:a7:e9:e9:47:
                    fb:3e:91:de:b4:5a:17:f6:a6:99:5b:98:80:78:98:
                    9d:b9:bf:6c:3a:40:eb:00:41:3e:df:50:95:07:6f:
                    5f:a0:d6:f8:ad:32:e5:cd:f3:20:c0:ed:ba:5a:34:
                    4d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:78:32:58:C5:7B:EB:F2:89:54:64:E4:43:9D:78:C8:04:49:34:2E
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:18f0::/44

    Signature Algorithm: sha256WithRSAEncryption
         2d:ea:2f:cb:1d:d0:32:25:e9:44:76:44:53:33:5f:46:b4:ca:
         d1:97:26:b2:f5:5d:72:da:c3:14:46:7a:0f:d3:5d:51:79:0c:
         41:df:1b:67:2f:46:e4:95:d4:dc:52:92:32:5b:f1:3f:08:b1:
         9c:b6:9c:e5:c3:12:ce:9e:cd:59:18:54:46:61:6e:c9:12:3f:
         3a:70:09:f8:34:d8:4f:c1:97:34:30:b9:bc:aa:08:3f:ea:e0:
         ab:98:76:88:e1:d5:6b:67:6a:ed:84:65:cf:81:e5:b0:6b:bb:
         f2:87:91:49:08:16:7b:32:b3:0b:f2:66:b7:2a:88:75:2a:76:
         e1:55:b5:c3:63:8f:6e:71:73:a1:35:42:0f:d6:fb:52:ac:76:
         3c:9f:a4:3f:dd:36:d3:e5:c6:08:49:1c:f3:fa:ec:dc:b4:df:
         db:0b:34:f3:b1:c9:74:63:71:52:80:dd:be:a3:03:63:96:ab:
         5d:cf:15:34:0f:0e:87:85:ff:c7:14:d3:9e:a5:27:ff:e9:63:
         1b:85:ef:3f:d8:87:b7:06:45:a4:f3:9d:cd:d0:e8:0b:60:c6:
         5d:9f:cd:96:d5:61:68:06:94:d3:ce:5d:bd:75:05:f3:b6:43:
         76:6d:8e:a6:28:7d:cb:b5:b6:35:3d:00:35:85:51:1d:8a:17:
         d4:69:de:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:39:18 2025 by rpki-client