Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653665393a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653665393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          kafUFnkvGlpM41jEOyJYh6qk6r0M8lzgHwzKhsfutDY=
Subject key identifier:   52:AC:38:DF:E8:CB:70:78:D3:EE:7C:E1:BC:23:EC:A6:97:49:8D:70
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       544B7765A00ED2EEF0093C71E0E66C6316B6A492
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653665393a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 17:09:11 +0000
ROA not before:           Tue 01 Jul 2025 17:04:11 +0000
ROA not after:            Tue 30 Jun 2026 17:09:11 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e6e9::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:4b:77:65:a0:0e:d2:ee:f0:09:3c:71:e0:e6:6c:63:16:b6:a4:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 17:04:11 2025 GMT
            Not After : Jun 30 17:09:11 2026 GMT
        Subject: CN=52AC38DFE8CB7078D3EE7CE1BC23ECA697498D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:71:fe:4b:a1:36:73:22:6b:62:69:58:df:1c:
                    b5:d5:f7:bc:3d:1f:03:66:5a:df:82:c5:48:64:46:
                    63:49:e2:b2:89:35:46:48:ac:ec:39:b7:4b:80:7c:
                    4f:a3:95:f8:c8:64:18:66:47:ea:4a:f9:ce:e3:a0:
                    66:88:ad:28:91:cd:eb:21:50:2e:6c:05:4e:58:be:
                    d0:2b:94:f0:4d:a2:25:5e:c1:f7:01:ec:b4:03:2b:
                    04:b0:9a:bd:aa:a8:52:e7:ad:d7:95:a9:6e:e2:1f:
                    94:6f:48:8b:31:28:8a:4d:1b:f6:9e:46:4c:b8:8e:
                    c3:4d:5d:2e:5b:47:bd:3c:87:a6:97:83:5f:83:3c:
                    cb:13:d4:70:d4:dc:3b:f5:8d:3f:49:31:e2:da:b6:
                    30:cd:a1:89:2f:77:29:2f:3f:75:f2:8f:70:68:89:
                    5e:1a:3d:fe:ca:f1:25:7a:8c:d0:8c:7a:b1:07:50:
                    2e:f0:f2:6c:e4:10:ff:31:28:0f:9d:b4:31:66:b5:
                    eb:ce:40:f0:7a:84:a3:dd:4b:a3:20:bb:7a:3a:37:
                    0a:2a:e1:3f:f7:90:af:4c:ec:0b:4a:33:3a:87:8e:
                    9c:93:9a:ad:9e:2d:c1:0c:7a:13:bc:3f:60:8f:37:
                    d1:2e:f2:ef:a2:0b:bf:f6:fc:78:96:cc:c6:d3:b3:
                    2d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:AC:38:DF:E8:CB:70:78:D3:EE:7C:E1:BC:23:EC:A6:97:49:8D:70
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653665393a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e6e9::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:bb:51:ea:1d:37:1a:9e:c2:f3:7b:0f:3d:35:a4:8a:fc:41:
         55:6c:30:ef:65:64:e6:3b:4c:6f:ba:15:5f:e8:b6:b2:cf:75:
         1c:b0:73:13:05:ab:55:fe:5d:e2:ba:10:0b:65:60:8d:56:68:
         ac:32:57:b6:a9:65:f0:42:61:86:b0:e0:d2:f4:36:42:a1:c4:
         5d:47:e8:67:13:42:46:07:1c:93:47:6e:19:7a:17:1b:27:e4:
         a3:ec:7e:91:69:f7:70:7e:5a:dd:5c:9c:be:49:fb:c5:50:2e:
         38:17:f8:2c:18:20:cf:16:1e:ad:ba:ed:28:70:20:b4:3f:44:
         ef:59:11:53:e9:4f:ba:67:90:07:5c:a4:75:4b:b0:29:02:c4:
         1a:e9:0b:9d:14:98:a6:c5:68:af:a0:a4:e0:a6:49:6a:6f:55:
         e1:b9:5a:04:64:d6:88:eb:f8:ac:e3:8d:c0:e4:27:91:3a:0a:
         95:64:0f:00:26:8d:0c:02:a1:81:bd:c3:1f:28:21:f6:ce:6b:
         e2:20:cd:d6:f3:4b:92:3e:2d:96:27:ea:29:c5:af:15:b6:a1:
         f7:46:78:fc:3e:12:18:5a:a6:ff:c7:e7:e8:a1:f2:26:bb:ca:
         8a:5d:68:63:60:8c:b4:1b:db:c7:88:19:73:60:a1:93:80:87:
         27:d6:db:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:45:35 2025 by rpki-client