Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653232373a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653232373a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          u7LKQ4xGTCrs9Z5AgnH+DH3gCpphqRhJmIt7ZhJ6rSA=
Subject key identifier:   53:70:25:B0:7A:BE:A8:5C:74:B6:FA:49:EB:A7:5E:AB:06:BA:C7:22
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       283012D5C7531A42B422663C9A1FC2B0DD3BE8B0
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653232373a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 17:08:00 +0000
ROA not before:           Tue 01 Jul 2025 17:03:00 +0000
ROA not after:            Tue 30 Jun 2026 17:08:00 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e227::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:30:12:d5:c7:53:1a:42:b4:22:66:3c:9a:1f:c2:b0:dd:3b:e8:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 17:03:00 2025 GMT
            Not After : Jun 30 17:08:00 2026 GMT
        Subject: CN=537025B07ABEA85C74B6FA49EBA75EAB06BAC722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7a:18:38:4f:7a:81:3c:68:66:8d:18:f9:87:
                    20:06:5f:a3:bd:d1:9b:2a:92:18:ea:a6:f4:4c:17:
                    b4:d9:0b:6c:35:63:35:36:2e:68:a8:24:89:bb:46:
                    6c:50:02:73:ff:8f:b2:93:ba:0f:dc:ea:a3:60:56:
                    21:d7:c5:71:fc:58:a1:49:83:e1:e0:0a:f8:5d:67:
                    33:ee:aa:0d:75:1e:85:6d:4e:58:db:c6:a0:9b:0b:
                    3a:b9:f3:d7:39:11:4f:90:f1:11:dc:b6:69:35:69:
                    3e:2f:ef:2d:a7:d1:5b:c5:13:f6:4d:fe:e7:ea:fb:
                    50:ea:6c:6c:15:24:25:40:4f:27:4a:cf:49:7d:f5:
                    2a:16:e1:7b:e0:84:62:f2:64:4d:a9:84:0e:bf:c5:
                    1d:ab:be:bc:1f:d8:ff:09:29:46:1b:83:b4:6e:7f:
                    68:d1:93:43:ce:aa:f9:22:3c:69:94:75:44:d8:65:
                    23:32:a5:f5:e4:7a:d2:75:48:fb:91:ad:00:ab:7a:
                    1d:bb:49:64:13:90:dc:e0:e1:2d:1b:0e:18:af:83:
                    e1:08:be:de:77:1b:f0:7f:ba:1b:c7:99:b0:aa:2e:
                    6c:2a:78:ab:95:ba:ea:4c:55:b4:21:63:b8:74:db:
                    15:38:ed:fd:c2:b0:63:da:a9:f1:c0:31:5f:48:0e:
                    ce:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:70:25:B0:7A:BE:A8:5C:74:B6:FA:49:EB:A7:5E:AB:06:BA:C7:22
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653232373a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e227::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:d0:72:77:ea:84:d8:f6:42:e6:1b:2f:b1:0e:93:d2:b9:8a:
         47:b1:ff:1e:66:58:64:b7:23:60:c0:ab:76:fb:43:98:e1:a7:
         f8:b5:ed:05:26:d1:37:63:d9:c5:0c:89:9a:8f:99:88:8f:77:
         17:93:03:6c:00:a5:6c:e3:ee:95:73:be:fb:8a:d3:5c:00:fa:
         6e:4a:3b:c1:0d:4b:13:94:99:12:d1:fe:10:2c:5f:7d:26:66:
         98:24:f5:79:2c:6c:5d:f4:5c:19:a7:f4:dc:6d:e1:4e:60:80:
         f0:cd:f7:65:71:95:cd:d6:56:f3:60:3a:c1:94:dd:b4:4b:a5:
         c8:65:33:3b:45:e7:df:08:f0:24:4e:34:89:58:71:af:f3:d1:
         d9:ac:77:42:69:a8:75:24:22:12:73:ad:b0:14:48:9d:38:ad:
         1d:48:d1:d3:42:7e:6c:5a:3a:99:be:a2:f6:c0:2d:46:a2:11:
         0c:b3:1f:68:5c:a7:d5:f3:42:cc:aa:a3:bb:65:25:43:1f:ed:
         07:1a:d9:60:26:da:d2:ea:11:e4:cf:f0:0f:3f:ff:76:10:1d:
         75:6c:45:2e:89:d4:2c:83:27:9f:d2:2e:f1:c0:3c:53:00:d1:
         1a:c8:43:ae:ae:46:11:66:a0:cc:59:e2:92:c1:96:7d:81:eb:
         8d:97:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:36:23 2025 by rpki-client