Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653762393a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653762393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          mZT5Axx4iYZ2fdfaoFe9J4E9pcCHTJgaSzro+mVKYSk=
Subject key identifier:   77:2A:35:3A:D7:66:A1:2D:B2:4D:3F:CA:D4:9A:2C:23:66:8B:95:53
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       452C34251AAB21C5AB378BA7D4F44A9DF20C16A7
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653762393a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 17:07:15 +0000
ROA not before:           Tue 01 Jul 2025 17:02:15 +0000
ROA not after:            Tue 30 Jun 2026 17:07:15 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e7b9::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:2c:34:25:1a:ab:21:c5:ab:37:8b:a7:d4:f4:4a:9d:f2:0c:16:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 17:02:15 2025 GMT
            Not After : Jun 30 17:07:15 2026 GMT
        Subject: CN=772A353AD766A12DB24D3FCAD49A2C23668B9553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e2:d2:21:b5:56:20:5b:1a:40:e3:bd:e4:c5:
                    c4:f0:0e:c8:79:ba:35:d2:29:c6:19:b9:35:78:14:
                    73:38:95:b5:42:87:64:3c:eb:06:86:13:4e:cf:fb:
                    7a:2b:73:56:2d:75:86:0e:b2:1b:22:88:8b:f9:1b:
                    e8:11:98:2b:24:5e:d7:e2:af:4c:3a:07:3d:23:04:
                    25:18:fa:80:58:78:0b:ca:9b:d5:09:4d:98:17:9f:
                    74:d1:f9:85:54:48:76:0d:98:6b:8f:cc:b5:5e:87:
                    29:ac:83:4b:dd:12:26:ba:37:15:68:64:d4:fb:20:
                    bb:3b:61:57:db:da:c6:de:2f:07:d7:80:61:29:e3:
                    e0:49:b4:f2:a2:5d:69:b4:3b:09:df:ec:73:d4:8b:
                    e4:bb:9b:72:b1:97:71:c7:17:f5:04:eb:fa:11:21:
                    93:da:a8:6f:42:0a:b3:c4:e0:86:a7:cc:cb:be:83:
                    9a:99:cc:6e:23:0c:1a:ff:12:6c:86:01:e7:b2:5a:
                    c1:4d:11:07:f3:37:82:96:dc:10:b3:e7:c8:dc:19:
                    39:27:4b:d0:34:d3:a8:bd:77:ca:6e:c4:e2:03:63:
                    ed:21:e6:18:8f:5e:c1:b5:be:fd:5e:75:9d:64:7d:
                    2d:e6:4e:d2:19:d7:73:81:b8:54:9f:d8:9c:bc:2c:
                    c5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2A:35:3A:D7:66:A1:2D:B2:4D:3F:CA:D4:9A:2C:23:66:8B:95:53
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653762393a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e7b9::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:b2:15:5a:bc:24:20:d1:5c:e2:41:7b:40:b1:b8:d5:b3:a5:
         85:e3:82:62:d4:92:b6:1b:18:9b:8e:e9:14:0e:5b:b2:46:58:
         73:d2:53:7c:72:20:ad:51:95:82:74:af:85:33:13:aa:16:51:
         f6:f0:60:e3:af:ab:c6:3a:c1:d3:dd:c4:0b:30:c6:ab:bc:aa:
         6d:09:1e:3b:e7:66:6d:94:85:17:60:e0:49:30:6e:9d:da:0d:
         ed:2a:0e:4a:0e:ae:cf:7a:eb:80:52:2d:05:a0:1f:26:c9:d8:
         c4:30:0a:70:07:06:35:06:83:c0:1a:c0:89:70:25:e2:93:48:
         01:e6:f0:2f:f2:7f:85:b2:6b:27:0d:18:fb:ac:99:8b:53:d3:
         73:cf:e6:c5:c7:90:bb:2e:f1:81:83:af:f0:6d:01:88:f7:1b:
         db:f9:3a:3c:17:ad:05:fa:a3:f2:65:ec:3b:23:83:b5:31:1d:
         68:44:d0:cd:a6:72:26:9f:ae:79:a6:6c:4a:bd:15:f1:bb:75:
         b3:0c:40:0b:14:34:76:46:c7:10:89:cb:ed:d6:86:91:3c:61:
         53:28:cb:eb:2d:a5:12:8c:19:7d:4a:d4:8c:e6:98:ac:39:25:
         db:f5:9a:06:96:18:5b:65:42:dd:22:5f:60:e8:df:d6:56:a2:
         79:57:0b:75
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIURSw0JRqrIcWrN4un1PRKnfIMFqcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA3MDExNzAyMTVaFw0yNjA2MzAxNzA3MTVaMDMxMTAvBgNV
BAMTKDc3MkEzNTNBRDc2NkExMkRCMjREM0ZDQUQ0OUEyQzIzNjY4Qjk1NTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4tIhtVYgWxpA473kxcTwDsh5
ujXSKcYZuTV4FHM4lbVCh2Q86waGE07P+3orc1YtdYYOshsiiIv5G+gRmCskXtfi
r0w6Bz0jBCUY+oBYeAvKm9UJTZgXn3TR+YVUSHYNmGuPzLVehymsg0vdEia6NxVo
ZNT7ILs7YVfb2sbeLwfXgGEp4+BJtPKiXWm0Ownf7HPUi+S7m3Kxl3HHF/UE6/oR
IZPaqG9CCrPE4IanzMu+g5qZzG4jDBr/EmyGAeeyWsFNEQfzN4KW3BCz58jcGTkn
S9A006i9d8puxOIDY+0h5hiPXsG1vv1edZ1kfS3mTtIZ13OBuFSf2Jy8LMVJAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUdyo1OtdmoS2yTT/K1JosI2aLlVMwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY1Mzc2MjM5M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+e5
MA0GCSqGSIb3DQEBCwUAA4IBAQBDshVavCQg0VziQXtAsbjVs6WF44Ji1JK2Gxib
jukUDluyRlhz0lN8ciCtUZWCdK+FMxOqFlH28GDjr6vGOsHT3cQLMMarvKptCR47
52ZtlIUXYOBJMG6d2g3tKg5KDq7PeuuAUi0FoB8mydjEMApwBwY1BoPAGsCJcCXi
k0gB5vAv8n+FsmsnDRj7rJmLU9Nzz+bFx5C7LvGBg6/wbQGI9xvb+To8F60F+qPy
Zew7I4O1MR1oRNDNpnImn655pmxKvRXxu3WzDEALFDR2RscQicvt1oaRPGFTKMvr
LaUSjBl9StSM5pisOSXb9ZoGlhhbZULdIl9g6N/WVqJ5Vwt1
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:25:58 2025 by rpki-client