Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653833653a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a653833653a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          6x0YcQvxTYH6WXwlOu6D9XfvAL3FiOW0scfpiGY5fK8=
Subject key identifier:   C3:8F:87:26:C9:5E:10:84:50:35:E7:69:33:5E:6A:B0:BF:A3:ED:4B
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       25545FC20132F22A66B84857FC77428B5B6CEEA7
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653833653a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 17:08:01 +0000
ROA not before:           Tue 01 Jul 2025 17:03:01 +0000
ROA not after:            Tue 30 Jun 2026 17:08:01 +0000
asID:                     396968
IP address blocks:        2a0f:6287:e83e::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:54:5f:c2:01:32:f2:2a:66:b8:48:57:fc:77:42:8b:5b:6c:ee:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 17:03:01 2025 GMT
            Not After : Jun 30 17:08:01 2026 GMT
        Subject: CN=C38F8726C95E10845035E769335E6AB0BFA3ED4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:38:90:4d:7a:a4:4b:5a:7e:78:b7:71:af:
                    a4:4b:28:ad:24:27:63:c2:8e:95:af:4c:55:83:9c:
                    53:54:28:8e:da:25:8a:99:62:52:49:ae:30:cc:bf:
                    6f:45:b1:39:d9:9a:79:9e:58:96:b2:aa:09:48:e0:
                    11:e9:ba:52:54:a0:bb:67:e7:09:fe:d4:61:49:e0:
                    97:27:27:9f:f2:fd:71:08:a9:55:17:27:14:fa:36:
                    90:f7:f7:8a:d7:5a:d5:3f:86:64:d6:3a:cb:24:43:
                    75:e6:af:23:af:97:68:8a:91:30:70:6d:e2:35:50:
                    33:56:83:fc:27:42:57:d2:56:3b:60:9e:5c:53:79:
                    36:86:d6:2c:fc:11:1e:fe:a5:73:51:10:ce:dc:a9:
                    cf:75:dc:3d:d6:aa:a0:eb:8b:13:51:56:c6:51:0e:
                    79:6c:19:19:fc:02:3c:3a:9c:91:7f:2f:71:39:da:
                    62:ec:cf:17:ba:ba:7e:55:c8:1c:d1:19:c2:17:c3:
                    bc:16:71:56:9d:42:cb:d1:2a:4d:3b:0f:a4:07:42:
                    42:03:2d:99:a0:6e:1c:8d:9f:9f:52:25:cb:2b:d0:
                    23:dc:f5:9e:83:be:28:1b:d4:88:37:b5:83:58:da:
                    05:a8:f4:33:30:33:93:6c:3b:f6:69:aa:7f:e4:44:
                    c0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:8F:87:26:C9:5E:10:84:50:35:E7:69:33:5E:6A:B0:BF:A3:ED:4B
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a653833653a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:e83e::/48

    Signature Algorithm: sha256WithRSAEncryption
         82:a8:1b:5d:f3:74:e6:f8:07:ea:a5:20:75:f5:1c:ed:29:e0:
         54:84:ed:49:2c:1a:ba:c3:c8:58:91:f6:5b:d3:e0:25:e3:96:
         a7:de:21:3f:ac:09:d5:f4:03:99:20:d2:c8:9a:7e:0e:63:76:
         17:05:93:c2:90:75:e7:c7:57:4c:85:25:4e:d8:32:e5:f4:ee:
         cc:fe:a7:65:7c:6a:1c:23:e9:fd:3c:67:90:a0:24:7b:3a:3d:
         d0:6c:fc:79:61:b5:96:46:bf:49:d6:69:54:39:b4:0a:cd:05:
         ba:5a:11:7c:77:5c:d8:0c:54:88:e7:a1:42:38:6f:53:0e:00:
         25:91:26:92:04:be:8b:1c:19:79:d5:94:0e:4b:6a:94:06:b4:
         c9:8e:9e:28:07:14:0b:ab:1e:89:42:26:12:0c:a7:ed:9b:0a:
         b3:db:18:10:8e:a2:f0:32:42:dd:2e:07:c8:1f:bc:c9:68:61:
         7f:d5:fc:d0:e7:6d:1d:46:96:3a:b3:56:fb:19:32:b3:dd:66:
         84:8b:e8:e0:04:8f:24:88:92:82:30:f3:93:16:e5:f4:03:61:
         4b:e2:bc:86:d2:2b:15:1e:6e:4f:4a:28:21:35:b6:3a:07:6a:
         ea:53:05:29:9b:a1:bd:d2:db:66:b4:b1:2d:c3:14:6f:6f:54:
         65:9e:15:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:43:25 2025 by rpki-client