Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653136393a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653136393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          4xc3FYc9W1yubzQ+UprFxtnrXo8Up3paOVXjx+Z/YTw=
Subject key identifier:   B2:7B:96:9D:34:5A:2A:34:D5:60:89:30:5D:24:92:95:21:1C:D6:56
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       1551A9335F70CBC2469869FB19FB62294CE5E356
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653136393a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 17:07:18 +0000
ROA not before:           Tue 01 Jul 2025 17:02:18 +0000
ROA not after:            Tue 30 Jun 2026 17:07:18 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e169::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:51:a9:33:5f:70:cb:c2:46:98:69:fb:19:fb:62:29:4c:e5:e3:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 17:02:18 2025 GMT
            Not After : Jun 30 17:07:18 2026 GMT
        Subject: CN=B27B969D345A2A34D56089305D249295211CD656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bf:51:3c:96:80:4c:02:89:8e:82:05:cd:34:
                    97:57:2c:a4:2c:05:ac:56:8a:34:ab:97:38:0f:f4:
                    19:2d:35:8a:33:57:f9:e6:97:19:c4:30:43:1a:8a:
                    a1:20:c1:3b:f2:c8:33:a2:11:64:29:38:1f:e3:28:
                    e1:ba:7a:7b:7a:23:88:8b:ff:7b:cb:26:d2:c1:c0:
                    a1:fd:99:c3:06:30:9f:1c:69:f2:07:6b:dc:8a:f9:
                    ed:32:00:7d:1c:28:2e:21:7d:57:54:f0:7c:ed:e9:
                    0b:a9:dd:15:b9:43:36:43:ee:0e:42:77:c5:1d:14:
                    51:e9:b9:39:bf:b6:3f:4d:71:a2:b9:cc:4a:4e:fb:
                    99:b3:6d:de:54:08:0a:05:7a:23:5b:82:61:e7:f2:
                    f4:39:31:e8:38:8f:76:c7:61:35:de:dd:87:51:d7:
                    51:0b:65:ec:8a:48:2a:be:2c:f7:79:86:a7:95:67:
                    06:d9:6f:c1:1c:52:5c:bf:a4:6d:74:72:a2:df:a6:
                    eb:1b:b8:54:30:b4:39:43:68:9e:44:25:1f:af:a1:
                    b2:6e:73:65:4e:3f:8b:ab:db:11:a2:74:d0:a7:c9:
                    2b:68:30:fe:83:b3:ec:83:66:08:da:41:cd:05:63:
                    54:04:03:1a:9e:d6:fb:f5:4e:7e:ee:74:cc:54:2c:
                    2a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7B:96:9D:34:5A:2A:34:D5:60:89:30:5D:24:92:95:21:1C:D6:56
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653136393a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e169::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:74:7e:ff:4f:d4:50:d8:46:07:95:fb:10:6b:94:56:1e:63:
         a0:db:36:6f:96:ac:93:4c:e9:7b:1e:34:67:47:a2:2e:e2:b4:
         83:57:79:44:69:51:a9:77:64:0b:9d:33:cf:7b:85:47:ce:40:
         1a:dc:61:af:37:21:15:17:fa:23:0c:85:58:1d:1b:d5:c5:2a:
         2b:fc:76:73:b6:80:3c:0b:31:ff:8a:9d:bb:ea:cd:c0:a9:cd:
         49:76:90:bb:44:38:59:3b:2b:e8:6f:39:7b:10:23:c8:53:db:
         3c:e8:c9:6f:20:a5:bc:51:e6:ca:e3:68:ac:05:c2:c3:42:db:
         ce:75:a7:04:2b:a9:99:0b:9e:8a:67:a4:18:31:69:23:02:fc:
         56:ce:2b:d2:2a:38:52:89:48:1b:07:14:ba:61:30:33:79:7d:
         cc:42:b3:ce:ad:ec:59:fd:38:88:0e:dd:f0:75:90:81:ed:c9:
         17:fe:3d:d7:b8:20:7c:cd:60:52:c7:a9:37:44:04:68:35:0c:
         71:e8:2d:36:73:1e:2c:7d:38:7e:ec:9c:fa:0f:8f:9f:bf:0a:
         61:43:fd:b5:76:fa:0c:91:e2:e5:4a:00:8f:17:64:3f:bf:93:
         87:17:c5:ea:d7:7f:ff:6c:57:b7:f0:1d:89:87:b4:c4:d9:93:
         19:a2:0c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:44:12 2025 by rpki-client