Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656165343a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656165343a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          hN/vriYJ1eKMEMxrVqpmfEWZqIae6k27LGlerFszRnY=
Subject key identifier:   93:15:FF:14:7C:78:27:FC:DB:DF:FB:27:EC:A3:A8:C4:DF:D4:72:86
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       64785CA47ECE0F53AE847D09EAA164CC3FD5E8EE
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656165343a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 17:08:56 +0000
ROA not before:           Tue 01 Jul 2025 17:03:56 +0000
ROA not after:            Tue 30 Jun 2026 17:08:56 +0000
asID:                     396968
IP address blocks:        2a0f:6287:eae4::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:78:5c:a4:7e:ce:0f:53:ae:84:7d:09:ea:a1:64:cc:3f:d5:e8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 17:03:56 2025 GMT
            Not After : Jun 30 17:08:56 2026 GMT
        Subject: CN=9315FF147C7827FCDBDFFB27ECA3A8C4DFD47286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a2:5c:a5:19:8b:94:42:3d:ed:ef:f7:c7:6b:
                    0c:5d:05:24:4b:b7:1a:24:ab:a2:19:9c:38:04:09:
                    66:3c:9a:e6:27:04:3f:4b:39:bd:d7:1f:e8:9a:94:
                    a0:1c:d0:03:59:82:44:cb:6f:7f:69:9c:b5:02:09:
                    1c:e0:e2:96:06:e7:10:2b:41:08:9c:61:b0:5d:da:
                    33:b3:97:d1:9b:9e:99:c8:18:7f:fe:43:3c:90:07:
                    5c:ef:c5:12:39:2e:11:25:b3:1d:a1:fc:83:80:36:
                    9c:24:7f:6e:f7:68:b7:dd:0c:73:c6:1f:26:85:3c:
                    e6:93:00:b0:8e:87:f7:ca:17:9f:44:28:50:54:aa:
                    a4:ee:12:91:c9:6c:e6:26:3c:70:81:bf:f6:14:f9:
                    73:3e:76:aa:17:0a:b8:a6:2c:51:8b:73:2e:f6:e3:
                    98:02:cd:a9:c4:98:43:07:fa:0a:ba:9e:9d:20:17:
                    5e:20:5f:33:1f:7e:b3:ec:7d:05:03:61:4a:aa:ef:
                    c3:df:3a:19:ba:db:15:56:c6:c9:9d:fa:b2:43:c0:
                    7e:ba:dc:30:25:7d:3c:62:d6:a5:57:99:94:e9:11:
                    80:62:19:51:5e:21:a5:fa:59:a2:3e:34:6a:a2:d0:
                    11:e3:4f:22:6d:ba:07:6e:d5:bf:0a:78:f0:1d:58:
                    b2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:15:FF:14:7C:78:27:FC:DB:DF:FB:27:EC:A3:A8:C4:DF:D4:72:86
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656165343a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:eae4::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:d1:63:f8:af:36:b3:61:67:e1:b3:26:dc:ac:42:1f:a8:38:
         1b:11:16:9c:b9:3b:d0:62:9b:e6:fa:84:1f:f6:b7:25:6f:44:
         2c:3e:63:8c:95:71:fb:ea:2f:8e:ec:e4:50:44:78:cf:f5:dc:
         aa:76:5b:a2:c8:67:5c:8e:52:97:84:20:9d:6b:4e:ff:0b:38:
         c5:f0:6b:fe:ff:e8:73:37:ee:5f:e3:1e:1d:b8:9f:5c:1b:07:
         ca:af:0e:df:2b:df:c8:a6:97:5a:42:63:83:4a:38:b5:23:f6:
         88:bc:c9:10:59:c8:c3:af:48:1c:86:f7:94:fc:07:06:fb:a7:
         f5:22:75:a5:af:83:17:a5:ba:8f:f0:45:13:e9:91:47:62:6c:
         44:17:e7:13:87:26:6b:38:b0:9c:14:37:9b:19:d0:92:01:34:
         1f:9a:5f:4b:35:ff:52:55:ef:0c:b5:70:51:c0:b7:3a:67:3c:
         8b:c3:98:a5:63:34:a0:27:cf:12:4f:c2:7c:3e:51:d3:a0:28:
         ff:18:53:b1:40:5b:b2:b0:07:44:e9:bf:1a:f2:9e:16:d0:ca:
         a4:07:c2:06:a2:fd:6c:b0:0d:3c:39:30:d9:0f:08:01:3f:fc:
         48:53:ab:4b:dc:26:57:53:3a:03:85:a4:f1:dc:4a:89:08:10:
         40:8a:ca:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:31:27 2025 by rpki-client