Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656364313a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656364313a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          y7CAXeOFcuDDQ0UV+WPXi0Bp4cXILnPFobGPucYm8wk=
Subject key identifier:   E0:6B:CA:BC:52:14:E4:3D:B8:F5:1E:91:80:2B:43:9F:D5:AA:F9:74
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       47D5297459C6B8900D92C1537B60C7F0739302A6
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656364313a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 17:08:05 +0000
ROA not before:           Tue 01 Jul 2025 17:03:05 +0000
ROA not after:            Tue 30 Jun 2026 17:08:05 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ecd1::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d5:29:74:59:c6:b8:90:0d:92:c1:53:7b:60:c7:f0:73:93:02:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 17:03:05 2025 GMT
            Not After : Jun 30 17:08:05 2026 GMT
        Subject: CN=E06BCABC5214E43DB8F51E91802B439FD5AAF974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2e:5b:1d:59:b4:fa:cb:87:bb:80:64:42:80:
                    8e:ff:89:8e:82:54:bd:18:58:d0:4d:3b:e4:4d:fa:
                    11:da:90:85:29:76:55:fe:88:d1:5e:bb:94:e2:1a:
                    46:9c:46:83:77:8b:1d:5f:a5:ce:a2:7f:d9:c1:89:
                    1e:95:c0:cf:5c:cb:e3:b5:5e:aa:1c:d4:cd:de:42:
                    aa:3e:93:50:fd:04:a7:9c:54:07:77:a5:f7:9a:2c:
                    e4:05:cb:7f:e8:ca:a5:c0:72:7c:92:ac:31:38:93:
                    af:33:a1:6e:c9:ca:95:a0:c1:7f:a6:be:8d:0a:e0:
                    df:09:d7:23:45:b8:33:78:fd:50:c4:c1:76:20:01:
                    b0:cc:d2:ac:c9:2e:b9:fa:bc:a1:01:67:11:da:3a:
                    8a:b5:4e:43:8a:0f:41:7b:be:8e:ba:bd:69:79:6f:
                    d7:cd:ee:0e:06:aa:23:44:c1:ed:cc:16:cc:18:95:
                    01:41:9f:a1:a5:2e:d2:53:54:c2:87:c1:5f:cf:06:
                    47:c5:cb:4c:18:5e:4c:53:8d:dc:99:40:02:ee:a9:
                    63:da:85:45:5b:1a:73:34:2a:6d:07:92:e1:17:d3:
                    f0:5b:19:ad:18:3d:26:de:34:28:be:5e:49:ce:fd:
                    4d:85:e1:97:f3:31:4a:f5:e9:55:8f:c6:a2:a6:46:
                    7a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6B:CA:BC:52:14:E4:3D:B8:F5:1E:91:80:2B:43:9F:D5:AA:F9:74
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656364313a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ecd1::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:b1:29:ea:12:95:14:7a:5c:f8:3c:ed:bb:e8:27:fc:f2:f2:
         39:17:92:48:64:40:ba:50:26:af:d2:c4:f1:87:73:ed:f0:e0:
         b7:e0:f7:46:1e:ab:49:d1:4f:15:4d:c2:a7:63:4e:96:0b:ff:
         bd:03:05:ab:4f:2e:e6:07:da:a2:01:9e:ba:d6:21:c7:86:b7:
         1b:89:76:66:42:06:7b:d8:54:da:98:da:54:d6:ec:f9:43:79:
         0c:16:a8:ff:51:25:c4:54:11:33:ef:e7:4a:ac:92:68:04:82:
         a6:5a:ba:ce:b4:39:8b:15:77:d7:61:f2:36:76:f9:2d:df:24:
         5b:a1:66:25:83:10:ad:ba:4d:3c:39:41:40:9c:02:c2:b1:f7:
         fe:8b:5e:7d:51:87:cb:a3:89:42:c2:c4:ab:5a:07:3b:4b:64:
         79:ee:00:ff:76:4b:0e:c8:8b:53:76:6e:93:10:da:64:c4:6f:
         35:99:d3:18:07:9e:4b:d5:db:fe:2b:4e:76:a9:6c:0a:99:06:
         c7:a2:70:b1:e5:bd:36:e3:cf:cd:b2:21:e1:15:40:15:e3:12:
         01:a4:bb:ab:a6:6d:53:e8:98:87:79:22:43:11:27:9d:c2:4d:
         02:06:83:05:66:80:b9:24:11:80:db:42:ed:0b:9a:ba:f5:66:
         16:09:a7:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:32:34 2025 by rpki-client