Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656363383a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656363383a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          Vgm/dNcWoOtBCa6jX6T07ryNFeIlpBvotmABW57Md/Y=
Subject key identifier:   6B:52:A1:92:61:45:1F:D1:8C:9B:81:E5:15:08:BB:33:06:B1:AC:9C
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       1F9D2F2383344A02B0F3518E26D9F69054282D35
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656363383a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 17:09:10 +0000
ROA not before:           Tue 01 Jul 2025 17:04:10 +0000
ROA not after:            Tue 30 Jun 2026 17:09:10 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ecc8::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9d:2f:23:83:34:4a:02:b0:f3:51:8e:26:d9:f6:90:54:28:2d:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 17:04:10 2025 GMT
            Not After : Jun 30 17:09:10 2026 GMT
        Subject: CN=6B52A19261451FD18C9B81E51508BB3306B1AC9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:16:a3:1c:25:3d:31:33:28:f1:f9:d1:71:c9:
                    5d:1f:9d:aa:e2:30:6c:3c:ca:8a:89:1a:b5:c1:d4:
                    95:b2:38:22:ae:5a:c7:04:59:75:b6:8a:f7:75:e1:
                    8a:51:73:a8:0c:cd:ff:12:a5:0a:11:c3:a9:06:98:
                    f4:8c:ec:b3:33:34:2d:29:d6:23:02:fe:ed:5f:79:
                    58:d5:87:21:93:ed:cb:ba:a6:73:62:d5:e3:a3:6f:
                    c1:58:59:ca:54:67:a4:01:d1:7f:b1:b6:bd:ab:62:
                    c6:34:c9:a5:10:44:9c:41:e1:44:51:d0:b8:58:f4:
                    ef:1f:37:ce:6f:ce:ae:a1:28:41:86:a7:a5:80:53:
                    d3:34:0f:53:dd:59:0f:a6:f8:b1:04:63:5f:96:69:
                    52:31:41:4e:af:c8:90:9e:fd:9f:6a:ea:a3:66:b9:
                    21:0c:05:8f:2e:d4:01:de:33:57:a8:81:de:88:52:
                    5f:87:a8:92:c9:a2:b6:2e:4a:57:63:c8:df:4d:48:
                    fa:75:51:b4:f5:43:6d:ae:ac:25:f9:af:18:c3:69:
                    12:d4:32:7f:a6:ab:6a:8d:2d:e0:ce:1e:f7:e4:a5:
                    79:87:a9:79:0e:9a:a3:6b:dd:00:e3:5d:27:0e:68:
                    be:60:71:3a:ad:3e:b2:f2:c7:54:06:0c:8e:21:be:
                    c4:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:52:A1:92:61:45:1F:D1:8C:9B:81:E5:15:08:BB:33:06:B1:AC:9C
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656363383a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ecc8::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:89:92:10:a7:49:92:42:e3:64:e9:39:bf:a1:69:11:a8:94:
         77:94:c3:58:7b:d1:17:1a:2b:17:82:f9:40:16:68:60:81:30:
         07:ff:4a:de:8e:64:1e:f1:71:6e:0a:6e:3e:8a:24:4a:23:f9:
         d9:7a:8a:c1:39:96:87:df:36:32:93:6e:3b:c4:e0:f6:87:e1:
         1c:d5:83:07:7f:82:b4:c1:06:d4:a2:70:65:e5:ee:55:0d:9e:
         2f:6b:69:2e:d0:95:15:3c:38:ae:41:f3:29:5a:78:bf:b6:c1:
         40:fc:b2:e3:cb:72:45:04:af:28:0f:ce:04:5b:03:dd:d4:31:
         95:73:6c:f0:f7:b5:91:df:a1:cf:71:9c:e6:90:d6:1a:42:4c:
         24:15:af:9f:ea:c3:91:9a:a2:ec:44:a6:f6:04:e8:bf:e2:d1:
         4d:41:ca:1f:d6:4f:2e:92:6b:51:01:90:df:9e:0c:32:ea:1d:
         91:e1:fe:41:51:6c:1e:74:d1:6b:13:d1:17:ba:2b:fc:0b:46:
         0a:61:57:d6:2e:ec:db:e8:b2:2b:a0:3a:e1:47:15:49:ec:0c:
         26:f8:a1:3c:97:d9:ce:b7:83:c9:af:32:0f:8e:4c:a3:75:39:
         2b:89:56:a1:1c:bf:d2:05:f4:b3:0c:20:91:9a:a9:1d:6b:fd:
         7c:7d:76:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:43:26 2025 by rpki-client