Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          OyxkMzEOsiKIYOPts2Q8ynzF4rbMXE+jmGN4Z6CcxfY=
Subject key identifier:   89:3D:16:D0:45:3A:BC:96:B7:47:7E:B3:26:7B:88:C0:4E:7A:72:2F
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       359D611E279EAABFA2E2DC2CE6796C7A6ECA0E20
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 17:08:04 +0000
ROA not before:           Tue 01 Jul 2025 17:03:04 +0000
ROA not after:            Tue 30 Jun 2026 17:08:04 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e27a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9d:61:1e:27:9e:aa:bf:a2:e2:dc:2c:e6:79:6c:7a:6e:ca:0e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 17:03:04 2025 GMT
            Not After : Jun 30 17:08:04 2026 GMT
        Subject: CN=893D16D0453ABC96B7477EB3267B88C04E7A722F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:18:9a:fc:a5:9d:71:c8:db:70:86:8a:74:4d:
                    32:3a:e2:86:82:02:7b:d3:f4:f2:63:4a:53:ed:7b:
                    f3:9c:7d:4f:a1:b4:38:45:76:a7:24:ba:c9:5b:49:
                    5d:03:aa:68:23:e3:c9:5b:e6:5c:93:ad:b7:95:8e:
                    e9:11:fa:91:71:0d:48:a7:26:76:40:00:1d:2d:5b:
                    90:9c:e4:34:4c:cd:d7:2d:7b:9d:ef:da:a7:b9:f6:
                    e8:c6:d3:af:8c:09:19:c2:69:4e:81:c5:11:9a:93:
                    ce:22:d2:16:bf:cf:6d:08:03:e1:e8:47:79:9b:e7:
                    30:01:66:92:9f:b0:12:d8:34:a7:5c:e0:de:d5:36:
                    4c:34:3e:20:4b:2c:bd:4e:7f:c6:51:dd:21:a8:5f:
                    c3:ae:68:f5:f9:90:d2:4e:ce:1b:b8:7a:24:96:95:
                    7f:c0:55:b8:b1:88:1d:0c:a4:06:39:c0:57:00:aa:
                    62:dc:1f:dd:0a:e0:07:3e:04:80:68:e9:79:df:49:
                    73:34:cd:b4:6c:b2:25:3e:c9:71:c6:81:2e:cc:41:
                    c1:9d:11:4e:88:28:e4:c2:c8:5b:b2:7f:19:33:c9:
                    b1:ab:e0:b0:8c:1c:d6:c3:1d:4c:96:1c:22:a1:dc:
                    1f:d8:56:37:d6:a6:c9:53:c5:cc:ae:2f:7a:5c:a8:
                    04:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3D:16:D0:45:3A:BC:96:B7:47:7E:B3:26:7B:88:C0:4E:7A:72:2F
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653237613a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e27a::/48

    Signature Algorithm: sha256WithRSAEncryption
         1b:0f:f7:7b:9e:b4:58:aa:5e:e2:10:39:b5:1b:c0:3f:22:3d:
         37:0d:e4:c5:01:74:71:49:14:69:34:0f:f0:90:89:c2:7e:6a:
         91:5f:7a:22:3a:eb:48:8c:a9:b3:60:02:5f:74:49:de:2a:4c:
         c4:c4:e1:4c:59:50:49:44:b1:7d:2c:25:c1:d3:d5:2a:f7:07:
         ff:3c:bf:a3:fb:cc:e2:a1:59:96:76:6d:7f:d3:43:d5:ea:77:
         ba:92:6d:0b:cc:8d:82:4d:e7:61:4a:57:7f:4d:db:b0:54:ae:
         c9:68:b8:40:40:49:d4:a7:a4:97:c1:01:c8:4d:5a:86:8f:97:
         ad:20:a2:39:15:8c:b2:d2:1f:3c:b5:72:ef:3e:0e:7e:59:25:
         2b:af:0e:61:21:e4:96:d1:f9:91:68:56:a1:69:9b:bc:08:4c:
         b5:2a:1a:73:3a:d8:1b:13:15:6c:eb:4f:aa:1b:27:51:ad:63:
         5d:b0:cd:76:a5:61:78:cf:fd:5f:25:23:5e:63:c4:dc:1b:a6:
         65:32:e8:ff:30:ba:10:16:6f:4d:25:91:81:47:ca:b9:df:08:
         52:00:3f:fc:5a:11:cf:91:23:be:94:b0:d7:97:a4:aa:b7:ca:
         a3:4e:4e:44:4f:41:56:3f:5d:28:48:2c:e1:15:57:aa:c3:23:
         cc:ba:da:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:15:44 2025 by rpki-client