Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656635633a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656635633a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          ADLFQkLP/ZVTeU2AGd2QW8A9bJBf+0S37EKvZ8wZr4I=
Subject key identifier:   0F:4E:AD:C1:10:CC:42:30:B3:D0:0A:3B:A6:31:57:DE:A3:43:70:C4
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       1A358DD32E8548D63C839D20FD7B236AA1C7E4A5
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656635633a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 17:09:10 +0000
ROA not before:           Tue 01 Jul 2025 17:04:10 +0000
ROA not after:            Tue 30 Jun 2026 17:09:10 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ef5c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:35:8d:d3:2e:85:48:d6:3c:83:9d:20:fd:7b:23:6a:a1:c7:e4:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 17:04:10 2025 GMT
            Not After : Jun 30 17:09:10 2026 GMT
        Subject: CN=0F4EADC110CC4230B3D00A3BA63157DEA34370C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ed:9c:e0:63:fd:e9:9c:e7:8a:a5:56:e1:8a:
                    ba:af:9e:b2:72:d1:49:30:29:6d:93:62:34:78:9c:
                    95:ae:d1:02:d8:8c:fe:be:86:00:0f:26:5c:67:55:
                    72:8f:d6:0f:ef:1e:04:91:dd:14:fe:b4:dd:41:e0:
                    23:b0:9b:a1:b0:44:b9:ae:df:ef:12:45:65:3e:03:
                    b4:63:af:96:d2:07:f1:00:79:28:fb:04:2e:46:dc:
                    f2:fc:a7:d6:5f:10:1d:16:cb:77:dd:02:6d:d7:f1:
                    6d:7a:13:dd:eb:3b:e7:ee:1d:62:d8:46:ed:4b:c4:
                    7f:49:a7:2d:21:3e:c3:b1:df:21:90:b5:02:6a:76:
                    73:ee:62:ce:33:8d:fc:22:c0:50:d3:5b:35:40:ee:
                    cf:47:5e:ba:62:b0:1f:62:6f:17:5b:0f:96:10:3c:
                    d1:51:65:6e:c6:3e:4f:f7:01:01:5b:9b:35:ff:af:
                    5c:b2:28:53:e8:fb:07:a8:46:6d:95:d5:f3:ac:71:
                    1c:2f:48:c4:6c:f1:d9:f9:6d:56:31:80:9a:72:47:
                    88:82:31:54:b7:d0:3a:20:99:95:4c:e8:89:41:d9:
                    5f:cc:a9:f7:9f:e6:aa:32:9d:7f:1f:90:af:32:14:
                    f1:a3:3e:82:1e:80:f3:55:27:d5:83:10:51:6f:63:
                    a3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4E:AD:C1:10:CC:42:30:B3:D0:0A:3B:A6:31:57:DE:A3:43:70:C4
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656635633a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ef5c::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:68:ab:a5:b2:78:fa:2a:c1:3d:86:6d:e1:3d:25:95:d6:00:
         d5:dc:fc:d6:57:98:f4:1c:e4:33:81:fc:7d:97:ea:74:57:a9:
         4a:ab:68:c8:f2:be:ff:46:8d:aa:bf:76:72:61:20:0a:90:d1:
         d2:a1:29:b4:39:c2:d0:9b:57:a6:98:7a:3b:2c:71:ec:6a:f2:
         70:8b:27:04:02:4d:f5:42:e0:e9:ae:dc:a8:9c:50:e0:5d:f0:
         06:f8:f9:e0:a8:52:49:87:66:d6:de:5c:09:dd:7f:61:38:82:
         bc:1a:4d:0b:e1:5b:c4:5c:bd:78:6b:98:3c:2e:a6:77:b0:ae:
         68:d6:3b:e0:7a:47:30:bd:f1:6c:a0:df:93:e9:c0:aa:bd:02:
         c0:57:42:24:97:10:7e:dc:36:e8:9f:82:ba:bb:0c:4a:08:ed:
         11:93:84:5b:f2:0d:b6:f4:89:8b:1a:b6:35:b9:cd:3f:8b:1d:
         21:c3:6c:b5:ef:e3:75:91:74:0e:b0:8b:b1:27:51:83:af:64:
         d3:e3:7a:d0:9b:1a:b9:2a:3e:2c:35:81:8d:c8:db:2f:35:31:
         06:4f:95:1c:f1:6b:f1:9d:bb:22:79:96:fb:dd:8a:91:f0:a6:
         f8:82:8a:08:1a:d3:d5:a6:76:86:c8:90:b8:0e:48:a3:d5:f7:
         07:20:a5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:35:41 2025 by rpki-client