Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653535623a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653535623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          bTMXQPuHmj3RQzz/heYOWDj/OE0UxVCTvWgVEMNJOkI=
Subject key identifier:   B3:92:2F:76:4C:79:02:FE:E4:A3:E4:0C:B3:62:EE:B7:72:FE:4B:AA
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       1AB6F6E6C7B27FBBA1ECFB5C0234F49C88351B8C
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653535623a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 17:08:57 +0000
ROA not before:           Tue 01 Jul 2025 17:03:57 +0000
ROA not after:            Tue 30 Jun 2026 17:08:57 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e55b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b6:f6:e6:c7:b2:7f:bb:a1:ec:fb:5c:02:34:f4:9c:88:35:1b:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 17:03:57 2025 GMT
            Not After : Jun 30 17:08:57 2026 GMT
        Subject: CN=B3922F764C7902FEE4A3E40CB362EEB772FE4BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:55:6d:53:ad:ec:75:22:94:b4:6e:7d:da:
                    5d:9b:36:96:bb:f6:39:f2:39:00:ce:2c:4b:9a:01:
                    c3:64:17:e1:da:26:fe:4c:ae:82:3c:53:37:5f:4a:
                    f6:9f:47:71:40:4f:c1:4a:b8:ca:90:0f:35:36:6a:
                    53:a2:0b:bb:f1:e8:74:58:da:24:ce:41:16:06:a2:
                    31:63:d5:e7:51:23:69:33:b3:49:3f:b7:4f:c9:a7:
                    bc:8a:d2:bb:8c:d0:bf:40:8f:2b:ae:bc:05:67:d3:
                    be:96:c6:b2:72:cd:38:00:39:15:93:81:10:a7:1e:
                    98:f0:e1:b6:ec:b7:db:d6:4d:16:93:25:ca:b6:4b:
                    0e:e5:52:5f:38:99:7f:ba:a9:8f:d0:74:7c:56:c8:
                    15:90:9f:95:77:50:6b:4d:32:d0:66:01:78:ca:68:
                    91:31:38:49:f4:e9:72:3c:54:9f:b6:2b:eb:4d:42:
                    c4:72:20:1a:7b:21:4a:e4:24:bb:44:3e:07:95:0d:
                    45:30:d3:c2:ec:8e:7b:88:4d:9c:8c:46:3c:97:32:
                    ec:97:7b:ef:1b:55:c0:cc:67:40:5d:a2:ce:22:9e:
                    b6:17:bd:c0:81:af:4f:19:f7:e0:60:46:a5:f1:97:
                    42:75:72:27:02:d9:02:5e:61:93:72:39:e0:32:cb:
                    79:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:92:2F:76:4C:79:02:FE:E4:A3:E4:0C:B3:62:EE:B7:72:FE:4B:AA
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653535623a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e55b::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:db:e3:cc:bb:ec:ac:bf:34:fa:94:1a:ae:08:a6:81:aa:0f:
         4e:7d:11:56:52:c7:67:8d:9d:ec:ba:dd:a9:61:ca:15:5f:65:
         e8:80:1e:27:87:a0:ea:61:b7:d1:84:63:60:5a:8d:90:f2:80:
         4f:ce:8c:0f:24:c3:66:e2:16:41:8c:cf:f7:29:b3:7c:38:63:
         c9:ea:7a:14:07:1c:1c:74:4d:dc:12:11:41:14:3f:a3:ee:97:
         a5:a3:9e:68:c1:a7:a6:3c:dd:41:99:8b:2a:11:e0:76:4c:0c:
         a5:68:34:12:86:62:5d:88:4c:29:e6:fd:f3:9b:d6:13:a5:b2:
         00:6c:91:64:10:16:82:fa:1a:a3:34:37:28:a4:74:1d:9b:d6:
         44:05:82:b2:d6:b5:23:19:50:3b:e8:9c:c7:bd:b0:83:bf:d8:
         b0:36:51:69:67:71:39:da:81:b3:1a:60:55:e0:85:45:03:89:
         61:ab:64:ab:72:fe:ba:ed:65:70:d8:90:0b:2e:04:31:19:ac:
         bd:76:74:29:e4:69:bf:f7:11:79:6d:57:b7:40:46:68:79:1a:
         e1:1f:99:5c:73:c8:0d:80:22:75:06:aa:67:78:47:64:d7:9e:
         bb:1c:5e:c0:95:40:b0:5e:31:04:7e:94:39:c4:2b:e7:96:08:
         e0:dd:2e:0b
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUGrb25seyf7uh7PtcAjT0nIg1G4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA3MDExNzAzNTdaFw0yNjA2MzAxNzA4NTdaMDMxMTAvBgNV
BAMTKEIzOTIyRjc2NEM3OTAyRkVFNEEzRTQwQ0IzNjJFRUI3NzJGRTRCQUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKXVVtU63sdSKUtG592l2bNpa7
9jnyOQDOLEuaAcNkF+HaJv5MroI8UzdfSvafR3FAT8FKuMqQDzU2alOiC7vx6HRY
2iTOQRYGojFj1edRI2kzs0k/t0/Jp7yK0ruM0L9AjyuuvAVn076WxrJyzTgAORWT
gRCnHpjw4bbst9vWTRaTJcq2Sw7lUl84mX+6qY/QdHxWyBWQn5V3UGtNMtBmAXjK
aJExOEn06XI8VJ+2K+tNQsRyIBp7IUrkJLtEPgeVDUUw08LsjnuITZyMRjyXMuyX
e+8bVcDMZ0Bdos4inrYXvcCBr08Z9+BgRqXxl0J1cicC2QJeYZNyOeAyy3k/AgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUs5Ivdkx5Av7ko+QMs2Lut3L+S6owHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY1MzUzNTYyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+Vb
MA0GCSqGSIb3DQEBCwUAA4IBAQCf2+PMu+ysvzT6lBquCKaBqg9OfRFWUsdnjZ3s
ut2pYcoVX2XogB4nh6DqYbfRhGNgWo2Q8oBPzowPJMNm4hZBjM/3KbN8OGPJ6noU
BxwcdE3cEhFBFD+j7pelo55owaemPN1BmYsqEeB2TAylaDQShmJdiEwp5v3zm9YT
pbIAbJFkEBaC+hqjNDcopHQdm9ZEBYKy1rUjGVA76JzHvbCDv9iwNlFpZ3E52oGz
GmBV4IVFA4lhq2Srcv667WVw2JALLgQxGay9dnQp5Gm/9xF5bVe3QEZoeRrhH5lc
c8gNgCJ1BqpneEdk1567HF7AlUCwXjEEfpQ5xCvnlgjg3S4L
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:23:05 2025 by rpki-client