Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656432643a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656432643a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          m2+AjnNT610Jkkuo1D+8SuYw2LU5nnFaAxeVY7auh24=
Subject key identifier:   25:5E:A2:9E:9F:F9:A5:2D:DD:5E:26:8C:80:17:4A:53:E4:BC:1F:33
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       1DC454399AF055CF96E45AC700CBB3A244C576BA
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656432643a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 17:09:17 +0000
ROA not before:           Tue 01 Jul 2025 17:04:17 +0000
ROA not after:            Tue 30 Jun 2026 17:09:17 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ed2d::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c4:54:39:9a:f0:55:cf:96:e4:5a:c7:00:cb:b3:a2:44:c5:76:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 17:04:17 2025 GMT
            Not After : Jun 30 17:09:17 2026 GMT
        Subject: CN=255EA29E9FF9A52DDD5E268C80174A53E4BC1F33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:70:d9:27:b3:b2:40:a0:65:c1:2d:c4:af:86:
                    1a:46:c0:f9:a0:e2:72:b5:c3:67:2e:4b:ec:66:cf:
                    5b:44:7c:80:c8:ad:32:a4:93:42:5d:25:cd:09:ee:
                    aa:0a:81:91:e6:a1:8b:29:cd:21:a5:54:18:37:8c:
                    82:cf:69:d3:20:39:46:21:cb:fc:d0:9b:3d:40:e4:
                    d7:84:60:0c:f9:98:e1:15:eb:5e:16:03:58:43:b7:
                    c1:43:ce:e7:98:bb:d0:5e:e5:12:2f:f6:ed:02:b0:
                    a1:25:c9:8c:c8:48:ef:54:ca:34:22:7d:0c:9a:91:
                    68:68:2b:42:69:6f:6c:3a:db:5a:d6:a6:f8:79:43:
                    90:f7:58:5c:42:3c:ad:fe:a3:af:d4:e5:67:57:69:
                    47:cd:0e:df:33:3a:5e:46:1d:79:e8:62:cf:61:5b:
                    20:e0:50:2e:91:5a:15:87:2b:e8:d9:5c:21:69:74:
                    9c:14:5c:b9:0d:95:73:94:6b:30:c8:c9:82:40:be:
                    ea:df:30:9a:27:56:2f:34:37:42:01:05:4c:6e:e4:
                    e8:72:60:27:e8:08:a7:9e:a0:2f:57:de:6a:2e:1a:
                    a6:9d:3e:8e:32:3d:25:a8:23:bf:d8:a3:a1:f0:4f:
                    aa:e4:22:a4:20:dd:54:a6:1c:a8:00:e6:a0:7b:0f:
                    96:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:5E:A2:9E:9F:F9:A5:2D:DD:5E:26:8C:80:17:4A:53:E4:BC:1F:33
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656432643a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ed2d::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:20:d3:42:38:06:5a:d6:d5:98:18:60:a7:58:93:1c:b7:f6:
         68:32:98:ab:29:ec:88:c9:b5:33:c1:fc:29:a5:57:d9:21:34:
         6f:dd:70:ed:4f:e9:01:f7:4d:26:44:8b:cc:97:13:a9:cf:b0:
         41:7f:f2:ea:bc:50:1c:6f:2c:dd:5c:f4:7a:f6:f1:52:f1:29:
         c4:4f:ef:17:b4:51:be:84:88:e9:95:33:73:93:37:6b:e3:7b:
         3c:f7:ad:74:48:99:00:55:49:0d:a1:b2:48:b0:67:ed:48:c9:
         b4:39:5d:bf:87:6a:f8:c1:6d:0b:7d:9b:0f:cd:85:3e:e4:87:
         a0:54:f8:7c:3a:45:14:75:83:38:f9:5b:3e:b3:4d:a2:c6:7b:
         22:63:5c:0d:d0:af:04:50:3e:e6:e4:30:66:eb:0f:2d:51:0d:
         b3:2c:2f:f5:c4:bf:1a:4c:b7:20:35:5a:3c:b5:d2:be:a2:c5:
         39:41:1a:97:a4:92:58:d0:a4:ea:c4:e0:5b:4f:4e:42:d0:e7:
         fa:c9:f3:ae:8f:17:15:6e:77:bf:1e:ee:b7:06:ed:a8:49:b7:
         48:94:23:e0:e7:7a:5c:21:5d:e7:d6:dd:e9:f8:30:2b:f1:d0:
         27:17:e6:e0:f0:32:1e:c1:db:06:73:ed:49:bf:9b:47:1d:0c:
         ca:05:63:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:14:19 2025 by rpki-client