Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656366653a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656366653a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          ikRayo+ZKWHXBT/seviOJy9umBb4BGypSgDoJey8JpU=
Subject key identifier:   77:83:49:29:69:53:F8:0C:C8:A7:CC:D8:DA:A7:75:DF:CD:C2:D4:B8
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       4BC21EDE2CAA3E51E5F13653F865FD6887E4F390
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656366653a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 17:07:16 +0000
ROA not before:           Tue 01 Jul 2025 17:02:16 +0000
ROA not after:            Tue 30 Jun 2026 17:07:16 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ecfe::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:c2:1e:de:2c:aa:3e:51:e5:f1:36:53:f8:65:fd:68:87:e4:f3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 17:02:16 2025 GMT
            Not After : Jun 30 17:07:16 2026 GMT
        Subject: CN=778349296953F80CC8A7CCD8DAA775DFCDC2D4B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:17:dc:d3:55:87:2d:81:3b:0f:9d:90:77:3b:
                    12:3e:90:69:b1:11:d5:2e:30:5a:48:05:bb:68:41:
                    f2:a8:9c:7f:86:55:ae:fc:c6:d3:96:7d:0f:23:6e:
                    e9:4d:20:bd:aa:f2:d0:6a:da:0f:a6:3f:a4:c6:dd:
                    96:88:48:4b:2a:15:39:dd:ad:f0:3d:2e:88:f8:2f:
                    4e:f8:07:85:e8:56:2c:11:b8:69:fb:fa:e6:dd:48:
                    4f:e8:bb:d0:16:d0:e6:8f:14:d4:ad:57:ae:f8:59:
                    41:e7:8c:c3:1a:a7:85:93:d5:e4:11:5c:a5:27:b3:
                    49:e6:9d:0f:4d:3b:00:d7:c6:fb:ff:3e:f8:10:98:
                    70:f7:6d:8c:be:86:e2:b8:f1:72:c8:1f:bc:62:88:
                    7b:8c:e3:68:7a:8c:30:f6:7c:b4:19:99:08:24:da:
                    eb:03:76:6a:40:48:3a:76:10:9b:51:46:de:d6:d3:
                    99:67:fd:71:f2:0b:3b:1f:ca:7c:3b:db:ee:60:d8:
                    46:a6:7c:3f:66:ca:ae:ce:17:2b:79:9b:c5:09:43:
                    e8:52:ec:03:8f:f0:e1:a0:61:11:68:7c:b9:9c:aa:
                    81:d1:bf:3a:14:80:5d:a3:71:ef:a3:1b:cd:dd:c0:
                    29:33:a5:67:b7:50:fd:ef:67:01:7f:ca:76:bc:02:
                    86:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:83:49:29:69:53:F8:0C:C8:A7:CC:D8:DA:A7:75:DF:CD:C2:D4:B8
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656366653a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ecfe::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:44:2c:94:98:8e:42:93:16:69:4c:4a:c8:95:ca:05:a5:dd:
         da:1c:9d:53:13:bf:53:f2:89:ec:f7:0e:fa:b8:5f:62:bb:45:
         b5:3d:77:89:47:c3:54:ed:8c:92:f1:ec:19:60:79:28:df:8a:
         98:76:cb:09:ca:19:13:dc:19:aa:b7:2c:ef:50:91:87:21:60:
         5c:65:2c:ce:a8:3c:4f:42:75:bb:a8:46:d9:52:b0:92:68:29:
         81:25:75:f9:9d:a1:e8:c7:15:54:6d:5a:51:53:e6:a2:54:e8:
         5f:3b:e8:af:0a:26:5a:05:27:81:e9:71:06:59:4e:a3:26:d3:
         1a:77:17:af:b6:d9:15:e6:37:f7:f7:69:63:4a:fa:73:0f:ec:
         26:db:33:19:56:19:bd:7f:3b:7a:5c:66:7f:fb:18:5c:ef:1d:
         e5:8f:dd:05:0d:5e:21:dd:32:6c:1f:fd:38:b7:2c:df:c5:e4:
         0f:fc:87:db:03:e2:3f:c1:1d:0c:c5:68:f3:b5:4d:a9:74:7d:
         e3:b1:b7:fc:5f:d8:5e:67:85:57:04:a0:b8:1b:95:77:10:95:
         bc:01:1e:be:ef:07:05:7f:49:a6:61:d2:2d:9b:28:72:0e:e7:
         b0:b6:87:93:6c:90:83:f1:84:b0:f0:13:ac:1b:45:9e:88:d4:
         06:cf:a2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:54:16 2025 by rpki-client