Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207740.roa
File:                     AS207740.roa (raw, json)
Hash identifier:          P4BZfWA/EKbmLjepwOhx1PLJO99Ha5uwmd0mynApthA=
Subject key identifier:   9B:6D:2D:6C:CA:0D:D6:BD:2E:30:2C:CE:36:D6:14:0A:1D:42:94:C8
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       09F723ADD44F3B79C00DCEC9C21BB517635A6A98
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207740.roa
Signing time:             Thu 07 Nov 2024 20:40:12 +0000
ROA not before:           Thu 07 Nov 2024 20:35:12 +0000
ROA not after:            Thu 06 Nov 2025 20:40:12 +0000
asID:                     207740
IP address blocks:        2a06:a005:6::/48 maxlen: 48
                          2a06:a005:7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:f7:23:ad:d4:4f:3b:79:c0:0d:ce:c9:c2:1b:b5:17:63:5a:6a:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  7 20:35:12 2024 GMT
            Not After : Nov  6 20:40:12 2025 GMT
        Subject: CN=9B6D2D6CCA0DD6BD2E302CCE36D6140A1D4294C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:52:62:7d:77:d6:06:ef:3b:bb:5a:d8:14:6e:
                    13:e6:94:aa:dc:0d:53:7f:d6:1d:a2:a8:da:75:76:
                    9a:1f:97:94:4e:d1:61:44:a1:eb:b9:ac:37:b5:e7:
                    39:60:b6:dc:db:8e:43:bb:dc:1c:4a:f4:fd:e9:ce:
                    6b:1b:47:3b:4b:1b:9a:80:cc:35:0f:66:4a:4c:f6:
                    cd:af:f7:0b:11:81:1b:32:7e:32:89:43:bc:79:62:
                    91:c3:14:29:fb:e4:7f:bc:c1:4f:38:a3:95:d2:d6:
                    7f:93:43:6e:ba:14:ba:fd:2d:24:8d:ed:7b:8c:1e:
                    3a:c5:81:bf:a7:d0:12:82:9b:61:99:f7:d3:9a:d7:
                    a5:10:c1:19:0e:88:ea:9f:31:51:96:e9:4f:af:6f:
                    ac:45:e5:68:a9:19:7c:94:97:03:d8:40:db:0a:7d:
                    e1:fe:ac:1b:e8:a2:1f:96:81:3d:c6:8c:df:98:79:
                    6c:54:e3:a5:76:0c:a6:c9:11:4f:02:84:95:02:88:
                    11:9b:ad:fc:6c:5d:62:c2:f3:da:3c:66:6d:dc:5b:
                    5d:13:cd:4a:05:3c:5c:28:63:d5:2b:2d:61:83:02:
                    87:8e:df:74:9c:44:68:ad:1f:63:d1:73:55:f8:de:
                    56:66:1d:d8:23:dd:a0:7b:c7:ab:2c:79:18:c8:03:
                    8a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6D:2D:6C:CA:0D:D6:BD:2E:30:2C:CE:36:D6:14:0A:1D:42:94:C8
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS207740.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:6::/47

    Signature Algorithm: sha256WithRSAEncryption
         46:0a:06:dc:fc:ee:62:5a:7c:98:fc:40:14:76:21:3f:f0:ff:
         60:32:9d:aa:65:4a:f8:a7:c8:90:e6:e2:6f:0b:16:f5:4a:8d:
         8c:d4:f3:cd:63:9b:4f:5e:dc:01:99:35:0c:16:b1:fe:2f:e9:
         6c:80:42:e8:08:6e:43:9c:8e:9d:0b:56:ec:6d:0d:cf:6c:69:
         72:28:de:0c:25:5f:15:00:95:2e:d0:90:0e:92:17:3e:4a:c1:
         71:2c:bb:e9:fa:31:dd:41:bb:a4:24:8a:3c:7d:d1:e5:9f:13:
         16:08:cb:47:34:4b:aa:2f:44:89:e4:d0:63:66:ad:e1:f4:5d:
         4e:60:b9:ac:1f:f4:92:f0:e6:cf:7d:66:61:a8:fa:5c:17:a5:
         3f:e0:c6:5a:53:f5:38:eb:3d:85:2e:a9:65:5c:b5:83:50:51:
         75:f0:5e:24:5a:e3:d2:dd:97:ee:b2:1b:69:5d:d0:78:c1:89:
         0b:86:6b:4f:16:8b:19:ff:e8:5c:b8:09:ea:89:c9:c5:92:20:
         24:2a:4f:68:bc:15:7b:87:8d:2c:15:75:a8:c6:1e:71:7b:6b:
         1a:5a:f4:e5:75:ba:ea:9a:ef:d8:c7:02:b8:af:9f:9f:e7:1a:
         19:0a:a8:0a:80:2f:32:f3:88:f4:52:28:15:e6:89:d1:db:06:
         22:78:7c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:14:14 2025 by rpki-client