Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653333613a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653333613a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          sreWU0+A7EHpLVSHWQHbndPpTiV+WI9C39bizQ+VEVQ=
Subject key identifier:   F7:B4:0A:83:5F:9C:0D:D1:56:9C:4A:C1:A2:B4:93:73:B3:8E:CB:75
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       2430F0E7E60EC3A5B80CA32B7F68CB6C6E9CD0A2
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653333613a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 17:07:21 +0000
ROA not before:           Tue 01 Jul 2025 17:02:21 +0000
ROA not after:            Tue 30 Jun 2026 17:07:21 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e33a::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:30:f0:e7:e6:0e:c3:a5:b8:0c:a3:2b:7f:68:cb:6c:6e:9c:d0:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 17:02:21 2025 GMT
            Not After : Jun 30 17:07:21 2026 GMT
        Subject: CN=F7B40A835F9C0DD1569C4AC1A2B49373B38ECB75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3c:cd:b0:33:ec:2e:dd:f3:94:8b:4c:0e:9d:
                    2c:55:3f:ab:94:8b:6a:2d:8c:62:36:ea:1e:df:b8:
                    bc:b6:50:8b:e9:a1:a9:9f:88:18:60:5b:fc:1f:dc:
                    98:e2:4d:8d:7b:1b:e2:16:7e:e3:c0:7c:da:7f:31:
                    29:1c:84:fd:79:0a:7d:1e:cc:0e:88:34:1b:ae:91:
                    9b:66:b7:b9:24:77:1e:55:de:19:9f:ec:37:c3:f7:
                    ab:b0:76:c0:49:84:50:4c:9f:92:ca:bb:cc:d7:ea:
                    e5:9d:f9:1a:ed:5c:8f:5d:6a:96:c8:0e:0f:bc:a9:
                    39:f7:cf:2f:b8:73:21:8c:a7:00:a8:26:68:e9:d5:
                    8c:91:2e:d5:0e:55:47:fc:93:c0:57:35:cc:b0:7e:
                    10:55:9b:56:98:30:3a:8b:86:65:87:74:b1:8c:71:
                    52:d7:71:60:57:55:04:7c:87:ed:20:a1:f1:d6:48:
                    6d:87:c7:d1:c3:1e:e4:7e:24:fb:6b:61:a1:a5:3e:
                    be:24:d7:a7:bf:9b:06:72:fe:e9:a7:25:8c:9a:f9:
                    60:e9:86:d1:46:d5:ed:f5:11:9c:0e:06:09:25:9b:
                    91:8c:f0:fe:b5:fd:c5:40:97:d1:8e:df:fb:0c:2d:
                    b8:6f:06:2b:d3:5c:81:39:1e:9f:b5:5b:1b:a7:20:
                    80:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:B4:0A:83:5F:9C:0D:D1:56:9C:4A:C1:A2:B4:93:73:B3:8E:CB:75
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653333613a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e33a::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:18:7a:75:37:35:4a:b2:d6:5b:b5:aa:5b:55:22:f8:49:cd:
         6a:fe:7d:24:e5:2a:d1:b6:f2:55:cf:97:4c:6c:fc:11:49:0c:
         59:f6:cf:78:0b:37:71:bb:03:62:f9:1e:0f:f6:a1:dd:26:78:
         bc:9a:a6:a8:1f:f0:bb:33:e4:0d:5e:a0:f9:80:bf:e5:7d:81:
         88:ec:6a:18:60:ed:cc:3c:8e:3e:0b:67:d4:f4:29:45:22:e7:
         6e:f3:af:4b:8e:a0:09:67:59:f2:37:c2:a7:58:bf:bf:38:8f:
         f2:0b:23:18:a9:e3:ab:44:53:43:2c:ef:6a:c0:92:fc:f8:9e:
         c2:ca:74:fc:01:4f:19:ca:8e:75:38:8c:ac:ed:a9:2e:83:dd:
         4c:39:8c:e9:31:8a:b7:9a:df:e5:0b:40:cb:c6:98:73:82:e6:
         44:53:48:4f:6b:1e:35:56:fd:72:3d:bd:9d:4a:83:d7:38:c5:
         74:ef:96:83:7b:cf:69:9f:e3:02:45:62:a3:d5:21:c3:3a:8c:
         52:d0:bf:ba:8c:bf:83:1c:03:e0:b3:79:83:10:05:9b:7e:0b:
         3e:73:24:09:ed:ed:c0:bd:27:0c:6c:ed:4b:4e:7d:be:83:63:
         0b:d1:45:f4:a0:57:9c:ea:d2:11:9d:4e:dc:1a:e9:64:00:18:
         c3:a1:b0:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:41:11 2025 by rpki-client