Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653137623a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653137623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          l0u5VGYf0g3OfSQmHpZU4dGTOQsLhY7Pw9UQlNlLTTU=
Subject key identifier:   74:EC:99:6D:FA:13:BE:24:83:BC:D4:2C:83:C4:32:EF:BD:6C:6D:EC
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       0D60FA450626F1B2322549641B2A70F030E77340
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653137623a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 17:08:00 +0000
ROA not before:           Tue 01 Jul 2025 17:03:00 +0000
ROA not after:            Tue 30 Jun 2026 17:08:00 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e17b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:60:fa:45:06:26:f1:b2:32:25:49:64:1b:2a:70:f0:30:e7:73:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 17:03:00 2025 GMT
            Not After : Jun 30 17:08:00 2026 GMT
        Subject: CN=74EC996DFA13BE2483BCD42C83C432EFBD6C6DEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:47:76:be:fa:d8:b7:65:a5:4a:ba:9c:04:6d:
                    44:08:36:43:02:a0:41:bc:ee:3f:86:0c:1d:6d:84:
                    22:ea:d6:5c:85:fd:4a:6e:4d:ef:b5:13:19:b9:8a:
                    84:d0:e3:da:13:70:63:ed:a8:62:7b:fd:30:e9:80:
                    76:03:47:fc:90:6a:c8:54:74:06:07:3f:de:38:c0:
                    3f:7d:e9:80:8d:b4:ba:e2:3a:8f:fe:13:ce:7d:d3:
                    b9:a8:24:46:0e:b2:08:c8:e4:7e:83:d7:a3:6a:ac:
                    ad:f9:b7:ab:a8:bc:e9:5d:eb:56:7f:22:c2:a7:97:
                    30:61:5a:27:15:b7:23:dc:aa:4e:e4:ec:7c:61:6c:
                    da:1b:45:67:b1:20:f2:1c:07:b6:4e:d8:08:76:ad:
                    68:e5:54:eb:f8:7b:18:af:ed:d6:03:fa:eb:ae:ed:
                    46:67:9b:9a:66:4d:fb:ce:2f:70:0b:05:2a:40:b0:
                    ce:4a:a7:13:e2:d0:55:39:31:d1:e6:49:4e:d9:86:
                    d8:7d:88:44:7c:81:83:d1:ff:aa:44:2a:d9:3e:bd:
                    c3:b7:1e:19:39:5b:bb:90:a3:88:25:09:6e:bc:66:
                    5b:20:6e:bf:b0:ef:f1:8e:42:90:16:ef:bb:64:1d:
                    86:f0:b8:8c:09:47:38:b7:fe:95:1c:bd:a2:1c:12:
                    c8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:EC:99:6D:FA:13:BE:24:83:BC:D4:2C:83:C4:32:EF:BD:6C:6D:EC
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653137623a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e17b::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:5c:68:1c:79:52:2a:d9:be:18:f5:7d:f1:bf:b8:0f:6e:1b:
         4a:09:fb:18:3d:68:ea:1b:7b:b6:20:29:41:e0:c3:3c:c8:69:
         d9:df:2b:61:4d:24:d9:75:48:c3:84:06:66:59:2f:d0:fa:b2:
         de:d0:f7:d0:56:a3:61:1b:3a:eb:51:58:a4:2b:da:db:d7:52:
         d9:07:fb:55:fb:e7:2b:ff:d2:9a:3a:b0:3b:ac:94:21:c8:d4:
         66:35:c1:01:d9:f4:62:0e:5c:0e:d0:b6:2e:c4:e4:07:58:43:
         c8:76:b8:19:41:db:32:74:2c:49:53:fe:08:fe:3d:14:6f:66:
         dd:87:89:c8:19:8c:2f:c5:81:48:b8:18:75:a0:e7:d1:6e:d9:
         42:0f:ee:95:73:f6:bb:55:f2:72:98:aa:d6:50:ef:17:17:6e:
         38:5d:e8:fd:6b:d6:8b:b0:7e:6f:6f:e7:14:66:b7:9e:fe:a6:
         5f:55:1e:01:9f:02:7c:47:da:29:92:0f:43:56:51:0a:aa:86:
         cd:29:e6:c4:da:d6:fd:82:6f:5c:76:2e:47:db:3c:58:eb:d6:
         75:8f:78:f8:1e:cb:97:a7:2c:3d:c4:7a:34:85:66:d9:1b:f6:
         c9:72:f8:9b:b0:db:14:0d:52:80:d4:39:38:13:b6:c2:49:de:
         6b:97:c1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:20:52 2025 by rpki-client