Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656239353a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656239353a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          ePl4R002rCVu1o2TNCJpjW/ls1s+0zIuAw0/pxMH7iw=
Subject key identifier:   F9:52:31:96:42:A0:1D:24:EA:CE:4C:59:6D:5B:73:48:87:1A:BA:85
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       2B477453CBD1944935C0BFE995244D23F9C66E69
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656239353a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 17:09:04 +0000
ROA not before:           Tue 01 Jul 2025 17:04:04 +0000
ROA not after:            Tue 30 Jun 2026 17:09:04 +0000
asID:                     396968
IP address blocks:        2a0f:6287:eb95::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:47:74:53:cb:d1:94:49:35:c0:bf:e9:95:24:4d:23:f9:c6:6e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 17:04:04 2025 GMT
            Not After : Jun 30 17:09:04 2026 GMT
        Subject: CN=F952319642A01D24EACE4C596D5B7348871ABA85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:45:2e:64:95:65:a9:08:40:21:6d:32:09:89:
                    b0:83:5a:1a:d0:f2:89:bb:7f:46:bc:d1:03:61:88:
                    b0:a0:91:b3:c1:f1:f9:1a:fe:aa:7d:cb:d6:4b:0b:
                    a5:78:19:b7:04:65:8c:c6:16:ae:da:be:c2:5c:c6:
                    c5:d4:7a:66:c4:2d:e1:91:1f:c0:47:75:df:17:0e:
                    aa:79:17:b7:9c:7f:e9:6f:c9:7c:b2:4a:f7:d9:55:
                    d3:8a:ed:36:a8:b7:83:02:26:2c:ad:d4:a2:cd:d2:
                    f7:f2:24:a4:c4:a3:f4:29:91:95:fe:43:07:2d:1f:
                    64:33:66:56:fd:72:c8:99:5e:3c:ad:21:1c:cd:94:
                    64:90:d5:87:f1:37:10:d7:3c:2a:e1:57:15:f6:b3:
                    63:11:57:b4:ef:28:d8:c0:3b:10:63:14:7f:6e:38:
                    f4:a1:b8:44:5d:69:88:2c:19:0b:c4:c8:f9:a8:66:
                    5f:d0:91:5f:02:c3:6a:73:84:bf:12:75:55:a6:b3:
                    7d:91:6c:40:28:b3:61:79:63:7b:a1:fa:2a:74:b9:
                    c8:81:95:76:3b:54:8e:24:3f:f0:cc:f4:9f:06:29:
                    b2:6d:d9:a6:0e:10:7d:13:48:10:c9:fb:e8:12:42:
                    68:cc:12:2e:3c:96:96:29:3f:9c:ce:29:e0:db:6b:
                    4f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:52:31:96:42:A0:1D:24:EA:CE:4C:59:6D:5B:73:48:87:1A:BA:85
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656239353a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:eb95::/48

    Signature Algorithm: sha256WithRSAEncryption
         02:c2:3c:e6:80:e0:a7:57:fe:0e:03:38:fa:a0:bf:ea:5c:5f:
         ec:8c:5d:80:b2:5f:ff:69:b5:fb:a6:19:13:67:e1:bf:67:95:
         3a:5a:13:e9:79:e3:cc:32:a3:c4:dd:ee:57:c9:ef:30:8b:a3:
         bf:a5:98:4a:c7:ab:1f:3a:07:4e:09:3c:ee:ad:61:72:d5:d5:
         10:58:a2:b3:23:56:42:19:ea:04:89:ac:4b:27:dd:f0:4b:0f:
         eb:72:91:e2:14:16:a6:65:07:bb:de:7f:01:b2:e8:41:ac:af:
         3c:e0:b7:93:ed:46:3b:e5:66:94:99:06:57:d7:df:ae:2b:a3:
         6d:5b:de:7e:35:5d:35:d7:35:c6:e5:df:2e:df:a1:8b:35:d9:
         ee:0f:04:8f:09:45:f9:92:22:08:9c:bf:71:9d:ac:16:c8:c9:
         9e:a0:74:34:ea:fb:00:4a:07:99:45:5a:96:da:a9:16:22:b5:
         0c:17:6f:dd:d5:df:ac:1f:4d:0b:24:ed:5b:fc:fc:de:d7:93:
         05:17:ac:87:e4:70:02:6e:70:a0:2e:af:f4:cf:d1:89:d8:da:
         7c:64:a0:35:ac:d7:1a:37:fb:9d:ea:7c:1c:ab:90:40:18:2f:
         22:d9:e2:77:a4:54:96:1e:f6:82:af:ce:1f:e8:64:2e:cc:9d:
         78:81:e3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:25:58 2025 by rpki-client