Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653739393a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653739393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          y7b190BnZ87dbU0fK4TcmYG5qciJjbSPb2ut5hnrHEU=
Subject key identifier:   09:E5:09:D3:2C:D0:BA:1A:6F:16:BB:51:89:35:A6:B9:17:27:B0:F0
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       2C36F865F3E80BB9C357780F5E1E4C915AB5BB05
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653739393a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 17:07:20 +0000
ROA not before:           Tue 01 Jul 2025 17:02:20 +0000
ROA not after:            Tue 30 Jun 2026 17:07:20 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e799::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:36:f8:65:f3:e8:0b:b9:c3:57:78:0f:5e:1e:4c:91:5a:b5:bb:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 17:02:20 2025 GMT
            Not After : Jun 30 17:07:20 2026 GMT
        Subject: CN=09E509D32CD0BA1A6F16BB518935A6B91727B0F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:99:44:fa:39:28:95:c1:c6:01:fb:a1:f3:d0:
                    3c:75:c2:08:cc:1d:fd:1a:0b:32:dc:cb:f4:ed:f9:
                    a5:c5:87:17:4c:40:16:21:7f:8e:cb:f5:ea:e5:54:
                    83:70:8b:8e:50:3c:ba:1e:ee:60:5f:1f:fa:e8:4f:
                    21:77:36:8c:58:69:65:db:5e:9d:64:d2:b5:d9:3a:
                    37:b9:6d:44:8d:c7:9d:d3:8b:40:dc:c8:fb:bb:af:
                    a3:47:de:1d:4b:6c:7e:85:eb:b9:63:f2:40:8b:d6:
                    9f:47:26:b2:b9:53:21:4d:66:2f:75:48:08:39:6f:
                    ce:49:99:6d:de:c0:77:5b:63:25:74:88:f3:3b:f5:
                    37:f6:d4:db:10:3d:c5:21:14:2a:6b:a4:e7:1a:1e:
                    43:e7:bb:e8:1e:d4:07:0d:ef:cb:d3:77:35:34:60:
                    5e:63:ec:c6:46:09:39:77:b2:d6:da:48:50:0a:aa:
                    38:e3:31:f8:5b:a6:4e:a3:d5:13:ed:f9:78:64:ad:
                    d3:7e:7d:1c:28:d1:3c:be:3c:ad:77:d3:2c:ac:f9:
                    32:77:7a:3c:0d:b1:b4:5a:d6:25:da:03:8c:f9:05:
                    df:41:62:84:38:bd:b9:b9:e3:d4:1b:eb:79:5f:de:
                    f7:b2:c4:c5:a3:62:a9:cd:d2:04:9a:b0:61:46:33:
                    47:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E5:09:D3:2C:D0:BA:1A:6F:16:BB:51:89:35:A6:B9:17:27:B0:F0
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653739393a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e799::/48

    Signature Algorithm: sha256WithRSAEncryption
         5e:0e:1c:78:39:ba:23:1c:50:63:09:89:df:c3:f4:25:70:4c:
         06:21:b5:31:cb:3c:7f:6a:84:da:70:ce:84:d4:2e:47:13:a5:
         b3:d1:77:7c:9a:fa:00:d3:52:a3:61:82:65:11:26:51:61:7b:
         c7:40:77:00:89:f9:97:5c:50:6a:39:ea:92:73:1e:8a:e5:bf:
         1d:74:fb:ad:17:8b:e8:65:3c:d9:4b:0b:f1:ae:ba:fc:f8:59:
         f1:94:40:4f:d1:5b:e2:f5:26:78:59:ce:a4:7a:97:17:6e:66:
         69:1d:54:ac:f9:40:3f:c2:6e:92:a4:82:21:ef:96:ef:b2:90:
         9d:6f:cf:c4:26:a5:0d:eb:39:99:93:0c:63:31:37:37:0d:36:
         59:51:6b:16:b9:2f:60:09:3b:0f:93:ee:f9:8f:cd:4f:cc:78:
         83:fe:03:e3:98:cd:de:43:3e:2e:ed:52:2a:ef:08:af:64:56:
         31:76:38:28:f0:18:af:0e:01:df:97:09:d5:16:52:59:58:05:
         06:b3:7f:fb:d7:85:90:40:cd:49:30:1b:c8:d8:12:7a:ac:65:
         01:25:28:73:7c:30:93:4c:d4:b1:90:e3:fe:d7:9b:8f:61:b7:
         6d:96:48:96:a1:06:29:f7:7e:2b:d1:16:c5:4f:f5:34:ad:c3:
         58:eb:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:48:54 2025 by rpki-client