Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656231643a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656231643a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          5dQSMrulZnN96jKcsE/Dr6O+HjET3ypA+znTHlKguN0=
Subject key identifier:   E1:26:AC:DE:56:A2:13:90:63:69:7B:FF:F1:77:8E:08:72:35:92:22
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       2EC382AC765E71C366037E6723DBA4012DF1A21C
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656231643a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 17:08:03 +0000
ROA not before:           Tue 01 Jul 2025 17:03:03 +0000
ROA not after:            Tue 30 Jun 2026 17:08:03 +0000
asID:                     396968
IP address blocks:        2a0f:6287:eb1d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c3:82:ac:76:5e:71:c3:66:03:7e:67:23:db:a4:01:2d:f1:a2:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 17:03:03 2025 GMT
            Not After : Jun 30 17:08:03 2026 GMT
        Subject: CN=E126ACDE56A2139063697BFFF1778E0872359222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:ff:29:ea:21:7f:fc:76:e5:5e:e1:96:35:25:
                    9a:a9:b1:6f:cd:99:cf:e1:97:51:20:ac:b4:27:b4:
                    96:03:81:90:4a:ae:7d:f1:f2:24:ef:94:79:fe:e0:
                    a2:32:83:7a:69:10:de:09:04:56:6e:7b:b8:32:a7:
                    00:7b:f0:37:ba:fc:15:9e:4d:f7:6a:52:6a:af:2e:
                    3c:be:de:32:fa:5c:84:fc:d5:85:31:a6:8f:68:df:
                    11:72:b9:7b:5c:7d:c2:31:02:90:cb:0c:cc:12:19:
                    29:9c:02:3a:7f:77:80:e3:96:63:6e:77:8f:dc:aa:
                    73:33:f0:d4:9f:2b:dd:ae:8c:2b:7e:9b:54:20:c0:
                    36:8d:8e:0b:45:89:89:0d:3b:b5:f8:bf:5e:47:0b:
                    69:f7:82:55:2d:eb:da:35:75:54:98:d5:9d:a8:c8:
                    85:51:8c:0c:a9:27:92:c9:41:9d:7e:a5:a6:37:dc:
                    7b:3a:5d:e5:eb:7d:4c:69:e4:a6:f0:15:9f:db:f5:
                    f8:9e:c3:cb:3a:67:51:0d:eb:7e:6a:a9:16:f9:78:
                    1d:6e:fd:2d:b0:96:27:48:96:20:2e:da:cd:ca:2c:
                    a0:45:15:d9:f1:e0:90:f5:9e:a2:ee:67:6e:39:b4:
                    af:82:cd:b6:41:7c:da:8a:0a:68:cf:ba:95:52:c3:
                    af:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:26:AC:DE:56:A2:13:90:63:69:7B:FF:F1:77:8E:08:72:35:92:22
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656231643a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:eb1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         75:cc:b8:c5:8e:af:f7:0b:4a:2a:e9:b1:32:bb:47:af:16:f7:
         4e:e6:07:3b:d0:e7:7a:6c:33:53:8f:e8:68:42:af:1c:7a:32:
         9c:60:c8:a5:bd:95:0a:ce:35:56:8c:4a:2a:0d:2f:e1:f0:7a:
         5f:92:25:2a:2a:36:87:ca:23:a2:dd:bf:42:d1:64:fd:52:47:
         96:a3:44:3d:a4:17:a6:f6:14:bd:5d:0e:5b:92:a0:55:86:19:
         b9:16:b6:d0:ce:d5:e2:07:7e:06:88:dd:52:38:fd:b9:17:71:
         10:51:c3:24:7f:1c:d7:19:c1:0b:1c:1d:35:48:90:60:ba:4b:
         db:28:4f:f5:b5:a4:1f:d1:a8:78:04:59:18:ec:56:01:d9:c7:
         77:5b:dd:67:34:93:e5:88:79:71:5c:1b:60:d9:d6:2b:96:18:
         21:b7:db:c8:23:71:f8:ce:4c:65:2f:d0:57:f7:20:da:c8:da:
         99:8f:a0:c7:00:7d:59:c5:98:95:94:b8:3b:85:5b:e2:5a:ba:
         6e:56:0a:43:38:ed:da:7a:65:75:bd:a3:fc:44:02:37:6b:97:
         29:e6:98:9a:eb:6c:d4:11:ec:9a:46:f2:4d:c3:e1:ef:61:bf:
         d0:2b:0f:c1:71:6c:2a:6a:26:7a:17:6b:31:70:11:fb:4a:d3:
         21:ae:59:80
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIULsOCrHZeccNmA35nI9ukAS3xohwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA3MDExNzAzMDNaFw0yNjA2MzAxNzA4MDNaMDMxMTAvBgNV
BAMTKEUxMjZBQ0RFNTZBMjEzOTA2MzY5N0JGRkYxNzc4RTA4NzIzNTkyMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2/ynqIX/8duVe4ZY1JZqpsW/N
mc/hl1EgrLQntJYDgZBKrn3x8iTvlHn+4KIyg3ppEN4JBFZue7gypwB78De6/BWe
TfdqUmqvLjy+3jL6XIT81YUxpo9o3xFyuXtcfcIxApDLDMwSGSmcAjp/d4DjlmNu
d4/cqnMz8NSfK92ujCt+m1QgwDaNjgtFiYkNO7X4v15HC2n3glUt69o1dVSY1Z2o
yIVRjAypJ5LJQZ1+paY33Hs6XeXrfUxp5KbwFZ/b9fiew8s6Z1EN635qqRb5eB1u
/S2wlidIliAu2s3KLKBFFdnx4JD1nqLuZ245tK+CzbZBfNqKCmjPupVSw6+BAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQU4Sas3laiE5BjaXv/8XeOCHI1kiIwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY1NjIzMTY0M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih+sd
MA0GCSqGSIb3DQEBCwUAA4IBAQB1zLjFjq/3C0oq6bEyu0evFvdO5gc70Od6bDNT
j+hoQq8cejKcYMilvZUKzjVWjEoqDS/h8HpfkiUqKjaHyiOi3b9C0WT9UkeWo0Q9
pBem9hS9XQ5bkqBVhhm5FrbQztXiB34GiN1SOP25F3EQUcMkfxzXGcELHB01SJBg
ukvbKE/1taQf0ah4BFkY7FYB2cd3W91nNJPliHlxXBtg2dYrlhght9vII3H4zkxl
L9BX9yDayNqZj6DHAH1ZxZiVlLg7hVviWrpuVgpDOO3aemV1vaP8RAI3a5cp5pia
62zUEeyaRvJNw+HvYb/QKw/BcWwqaiZ6F2sxcBH7StMhrlmA
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:17:52 2025 by rpki-client