Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205980.roa
File:                     AS205980.roa (raw, json)
Hash identifier:          HuRRdTtJ0PfrhlX4GnqxXsO+i9jG/PX0L4RRfc+1m0M=
Subject key identifier:   C4:D4:57:14:BD:77:ED:75:5A:2F:56:04:11:FE:4B:41:48:3E:87:11
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       39A4340CEB46481C6C98690FA9F8645670E6223C
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205980.roa
Signing time:             Fri 13 Dec 2024 02:56:29 +0000
ROA not before:           Fri 13 Dec 2024 02:51:29 +0000
ROA not after:            Fri 12 Dec 2025 02:56:29 +0000
asID:                     205980
IP address blocks:        2a06:a005:2f90::/44 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:a4:34:0c:eb:46:48:1c:6c:98:69:0f:a9:f8:64:56:70:e6:22:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Dec 13 02:51:29 2024 GMT
            Not After : Dec 12 02:56:29 2025 GMT
        Subject: CN=C4D45714BD77ED755A2F560411FE4B41483E8711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:da:e9:27:82:0f:c8:20:5a:e6:91:61:9d:e1:
                    37:7b:a9:00:5b:32:69:3e:95:f6:b6:32:57:4c:e3:
                    ba:20:c4:11:19:93:91:3f:79:6a:0c:54:f9:68:5c:
                    67:a8:7e:4b:37:fd:95:6f:52:a0:b0:e5:f0:4a:3c:
                    e1:fc:0f:84:64:d7:f6:59:b4:91:b2:0b:47:10:b8:
                    f5:98:3e:1e:f8:aa:97:62:59:51:0d:5e:02:f9:7d:
                    04:0c:d7:f7:f5:93:0f:b0:0a:da:e5:21:81:da:ec:
                    74:66:53:48:8e:7a:bd:a8:df:68:71:d2:c0:80:89:
                    ef:23:aa:76:f5:77:5b:f3:64:d1:1a:a8:ff:cd:ab:
                    3d:fa:13:bd:d3:4a:ff:2a:f6:0e:61:10:3c:2d:d4:
                    69:e5:d2:ea:af:66:e8:98:ae:d9:43:31:bf:01:90:
                    67:91:2a:74:6b:f2:1e:37:7d:87:e0:82:99:4f:7b:
                    d8:65:05:9c:04:43:e2:ce:26:c1:fb:2e:40:de:9d:
                    88:01:9f:ee:79:f1:62:87:1d:52:9a:2b:93:bd:5a:
                    f4:1e:21:e9:9f:0a:4b:07:d1:b8:e4:d7:90:72:b0:
                    0f:5b:4a:d5:9f:90:a3:2c:e6:e7:cd:81:22:bc:6e:
                    92:f8:3e:d3:ad:98:d1:28:77:87:66:24:dc:7a:33:
                    c2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D4:57:14:BD:77:ED:75:5A:2F:56:04:11:FE:4B:41:48:3E:87:11
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS205980.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:2f90::/44

    Signature Algorithm: sha256WithRSAEncryption
         5a:e2:a9:0f:8b:f7:85:6c:c6:65:ea:79:a4:ec:9e:0e:d4:5a:
         47:f4:af:5b:e5:e9:f9:53:c0:40:17:d3:8d:5b:d0:27:f9:f5:
         10:08:f9:66:b7:33:b0:32:bf:b1:b5:81:89:9f:ca:e7:72:7b:
         03:b7:f7:00:af:0f:19:49:8a:73:59:31:14:30:ff:fd:5f:bf:
         38:f8:f6:86:a6:85:0d:52:89:60:b5:67:e7:3a:6e:3a:28:9b:
         30:fe:17:10:43:80:8b:31:9f:ac:df:81:09:d7:2c:28:59:2b:
         3b:06:ab:61:d2:56:69:77:57:65:65:2b:09:69:fd:b9:52:33:
         4f:2d:dc:32:e6:af:1a:25:c3:70:48:56:36:25:e5:46:fd:cc:
         a1:11:32:a2:e4:26:4d:a8:c8:4a:2b:52:75:15:2e:ed:fb:91:
         d8:b2:62:8b:6d:48:6e:de:0d:56:d5:83:f4:29:9d:64:d6:e9:
         5d:9e:96:75:4f:3d:71:12:f3:ea:f6:fc:bc:d9:44:9d:84:70:
         5f:80:aa:a7:34:0f:58:90:66:29:73:ed:14:20:6f:28:58:d4:
         01:00:d3:0f:02:72:50:94:31:e0:fe:11:a1:46:40:7c:14:45:
         95:14:21:f7:87:8b:a4:f3:cd:03:80:63:54:28:69:b0:2f:d5:
         4d:d0:1d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:15:51 2025 by rpki-client