Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213036.roa
File:                     AS213036.roa (raw, json)
Hash identifier:          cltEBWG3fOcZ5gv+0FlE1z8abEYD0Sx/rtO42kLMPAM=
Subject key identifier:   69:76:5A:7B:66:BF:12:7E:12:F6:07:41:64:94:D3:A3:5F:B7:62:1F
Certificate issuer:       /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial:       53A860A283FA2FF84FF4457EB692C6275205A97D
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213036.roa
Signing time:             Tue 05 Nov 2024 03:40:08 +0000
ROA not before:           Tue 05 Nov 2024 03:35:08 +0000
ROA not after:            Tue 04 Nov 2025 03:40:08 +0000
asID:                     213036
IP address blocks:        2a06:a005:5a3::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a8:60:a2:83:fa:2f:f8:4f:f4:45:7e:b6:92:c6:27:52:05:a9:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
        Validity
            Not Before: Nov  5 03:35:08 2024 GMT
            Not After : Nov  4 03:40:08 2025 GMT
        Subject: CN=69765A7B66BF127E12F607416494D3A35FB7621F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0f:50:64:fe:78:cc:d0:d6:04:65:76:e7:4e:
                    a4:6c:65:8a:65:fb:88:58:c2:b8:28:87:b6:c1:3b:
                    37:ad:81:cb:bf:c2:a4:84:f2:29:de:69:32:72:73:
                    e2:eb:e4:19:1b:74:2d:a0:95:fc:0a:ea:04:63:71:
                    f4:c9:de:eb:52:b1:4b:bd:39:59:28:e5:6e:51:1a:
                    cc:cc:b5:b6:54:42:4e:88:80:d0:1a:5d:59:f8:9c:
                    cb:88:ef:1a:13:02:6d:c7:60:e2:c8:00:42:47:16:
                    7d:c4:9a:3e:eb:30:54:bf:97:de:e7:ff:2c:86:c8:
                    1a:f3:10:35:61:9d:24:34:42:a3:0d:69:5b:23:9c:
                    d0:8a:3e:73:28:42:26:fd:a7:0d:15:8b:80:dd:ca:
                    b4:44:5e:29:4a:0f:df:48:d3:16:b8:1f:7e:c3:08:
                    e6:6b:09:fa:c1:65:e7:40:65:f4:f9:76:d0:68:07:
                    9d:72:a3:df:a1:cb:7d:d5:77:34:15:ad:2a:c0:77:
                    22:8a:0e:94:9c:e5:52:83:8a:d7:cd:2f:55:fb:7a:
                    fc:8b:97:0e:e5:8a:d8:82:d2:f0:28:1b:80:71:77:
                    b0:95:fb:de:dc:72:3e:08:97:ca:6f:94:87:b6:61:
                    b4:b5:ec:97:00:7f:1a:e8:a6:bc:01:34:3e:45:cd:
                    e5:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:76:5A:7B:66:BF:12:7E:12:F6:07:41:64:94:D3:A3:5F:B7:62:1F
            X509v3 Authority Key Identifier:
                keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/AS213036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:a005:5a3::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:0d:f5:6e:58:91:b5:f0:4f:48:6a:3b:13:a5:35:f3:e5:5e:
         76:fe:40:39:18:13:ae:1c:c0:e1:84:09:86:68:f8:5c:d7:88:
         58:77:f5:38:ea:d7:6d:d3:47:47:40:39:f1:66:b8:8a:e6:1a:
         47:92:7e:60:49:99:b1:0d:cf:27:61:75:87:5e:d6:ac:cf:70:
         90:b8:3b:93:9c:64:24:41:96:bc:a7:16:5f:50:63:4f:77:3e:
         ab:2c:19:4f:e7:70:a7:25:7d:20:b0:ec:c7:83:99:ca:a6:17:
         a8:30:62:06:d6:cf:8f:37:d0:9c:b8:59:08:ae:ad:57:34:6e:
         56:9e:e2:d9:cb:48:ed:86:70:d2:a8:bb:2e:1a:d4:0c:09:b8:
         d3:9f:b8:31:df:5b:db:ee:a2:e1:3f:bf:53:69:ca:bc:e3:a9:
         11:2b:d3:30:c0:79:d3:60:67:df:7a:23:b9:b2:50:a2:51:68:
         79:7c:77:65:9b:14:2f:ad:d5:4b:e1:45:9b:db:d3:bd:2f:33:
         de:34:85:8b:84:f9:cd:65:70:b6:ca:06:a7:08:0b:77:6a:02:
         b0:0d:f7:30:c5:6d:f9:06:32:04:8d:72:1b:bc:70:54:57:0c:
         b5:f7:1b:f0:7d:a1:6e:af:ad:58:36:0a:95:7a:3a:ad:8d:62:
         f2:83:25:06
-----BEGIN CERTIFICATE-----
MIIE6DCCA9CgAwIBAgIUU6hgooP6L/hP9EV+tpLGJ1IFqX0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzk5NDM4ZjFiMTc2MmFlZWY4YTM1Y2Y0ZTZjYmFlOTc2
OTliZDAyMDAeFw0yNDExMDUwMzM1MDhaFw0yNTExMDQwMzQwMDhaMDMxMTAvBgNV
BAMTKDY5NzY1QTdCNjZCRjEyN0UxMkY2MDc0MTY0OTREM0EzNUZCNzYyMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcD1Bk/njM0NYEZXbnTqRsZYpl
+4hYwrgoh7bBOzetgcu/wqSE8ineaTJyc+Lr5BkbdC2glfwK6gRjcfTJ3utSsUu9
OVko5W5RGszMtbZUQk6IgNAaXVn4nMuI7xoTAm3HYOLIAEJHFn3Emj7rMFS/l97n
/yyGyBrzEDVhnSQ0QqMNaVsjnNCKPnMoQib9pw0Vi4DdyrREXilKD99I0xa4H37D
COZrCfrBZedAZfT5dtBoB51yo9+hy33VdzQVrSrAdyKKDpSc5VKDitfNL1X7evyL
lw7litiC0vAoG4Bxd7CV+97ccj4Il8pvlIe2YbS17JcAfxroprwBND5FzeVrAgMB
AAGjggHyMIIB7jAdBgNVHQ4EFgQUaXZae2a/En4S9gdBZJTTo1+3Yh8wHwYDVR0j
BBgwFoAUeZQ48bF2Ku74o1z05suul2mb0CAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4NTBkMDYzZTAxODU3NTVjOTFiZTNmOWQvMi83OTk0MzhGMUIx
NzYyQUVFRjhBMzVDRjRFNkNCQUU5NzY5OUJEMDIwLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZVpRNDhiRjJLdTc0bzF6MDVzdXVsMm1iMENBLmNlcjBwBggrBgEF
BQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcnBraS1ycHMuYXJpbi5uZXQv
cmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJlM2Y5ZC8yL0FT
MjEzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEH
AQH/BBMwETAPBAIAAjAJAwcAKgagBQWjMA0GCSqGSIb3DQEBCwUAA4IBAQCRDfVu
WJG18E9IajsTpTXz5V52/kA5GBOuHMDhhAmGaPhc14hYd/U46tdt00dHQDnxZriK
5hpHkn5gSZmxDc8nYXWHXtasz3CQuDuTnGQkQZa8pxZfUGNPdz6rLBlP53CnJX0g
sOzHg5nKpheoMGIG1s+PN9CcuFkIrq1XNG5WnuLZy0jthnDSqLsuGtQMCbjTn7gx
31vb7qLhP79Tacq846kRK9MwwHnTYGffeiO5slCiUWh5fHdlmxQvrdVL4UWb29O9
LzPeNIWLhPnNZXC2yganCAt3agKwDfcwxW35BjIEjXIbvHBUVwy19xvwfaFur61Y
NgqVejqtjWLygyUG
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:16:01 2025 by rpki-client