Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656636393a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a656636393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          upJ4ZXPo1adRtV8kRdkCOk99mlIk3ei+lAfspeIWVEA=
Subject key identifier:   BC:66:CC:3C:86:60:28:69:C3:45:E4:FD:93:49:51:ED:92:3A:DB:6C
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       05837639FCD99FBC5CE5AEC294AA6D1D95600084
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656636393a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 17:09:17 +0000
ROA not before:           Tue 01 Jul 2025 17:04:17 +0000
ROA not after:            Tue 30 Jun 2026 17:09:17 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ef69::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:83:76:39:fc:d9:9f:bc:5c:e5:ae:c2:94:aa:6d:1d:95:60:00:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 17:04:17 2025 GMT
            Not After : Jun 30 17:09:17 2026 GMT
        Subject: CN=BC66CC3C86602869C345E4FD934951ED923ADB6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d9:63:2a:97:53:20:5e:67:fb:af:88:0c:40:
                    02:e8:d6:ec:ba:d4:3f:b2:a6:be:3f:d6:00:8f:6b:
                    54:36:d2:b6:d9:91:6e:db:61:7a:73:85:48:aa:b3:
                    54:6d:65:9b:db:5e:16:bc:49:c3:af:f3:ab:06:48:
                    1d:02:ff:8a:da:0a:74:d2:20:7d:f3:96:12:88:52:
                    b2:f0:63:c8:cf:31:75:ff:89:b7:b9:98:a0:05:11:
                    c4:b8:ff:e3:03:4a:00:6b:0b:8b:90:b4:d7:a2:89:
                    fa:cb:59:53:84:46:c2:7c:c5:5d:f9:bc:4d:90:34:
                    9b:fe:0f:ff:80:dd:b1:6b:9c:ba:20:e0:d8:60:50:
                    c8:d9:9a:ed:59:af:44:63:4c:66:f3:fb:f6:c6:4c:
                    aa:b1:44:af:ab:ea:81:09:4e:f6:d8:0e:86:b1:bf:
                    37:8c:4a:72:cf:8a:5c:80:cb:31:bf:02:a0:a4:ec:
                    24:97:11:25:5c:6a:a1:93:e0:ff:1c:b7:cb:5a:ea:
                    ab:da:5f:7c:ad:73:6d:79:58:79:4e:d0:e7:6f:e4:
                    d4:e4:8f:af:f7:2a:54:2a:38:4a:aa:d0:70:57:f1:
                    9f:9e:fc:ce:f3:4f:f4:96:fa:4a:72:b8:27:6d:41:
                    eb:5d:b7:f3:db:33:5c:a8:75:3a:78:f0:cc:5b:3e:
                    29:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:66:CC:3C:86:60:28:69:C3:45:E4:FD:93:49:51:ED:92:3A:DB:6C
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a656636393a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ef69::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:62:e7:f6:cf:5e:0b:45:95:45:21:3b:3e:e4:6d:83:ee:42:
         69:15:1a:90:23:9c:4e:77:14:03:30:45:d2:1e:4d:dc:0c:0a:
         f7:6a:f0:bf:33:90:f4:6e:70:b8:5d:df:11:fb:c5:ea:c9:32:
         82:4d:de:ba:7e:6d:2c:c4:0f:df:d0:2a:2d:00:1a:1a:3a:66:
         a2:6e:f2:75:af:12:c5:9a:ea:06:08:c4:9f:52:c1:98:7a:63:
         87:37:14:d5:4b:bc:a6:29:81:ea:24:2e:93:6f:f1:d5:84:90:
         14:92:d2:ca:09:2d:3c:36:da:64:e8:8b:03:af:26:69:b0:f4:
         7c:9b:b5:fb:8e:0a:68:ee:b7:a2:9b:e0:58:33:b2:b2:ce:e4:
         7a:fc:e0:85:21:04:02:b3:1a:bc:36:ba:65:2b:ba:64:73:a7:
         13:6b:d4:19:19:3a:2c:1b:67:9b:b7:c8:43:93:3e:c3:7f:b8:
         0e:9f:52:c6:64:b5:10:63:ef:d6:09:d3:36:a3:bf:fd:23:47:
         41:ee:51:93:4b:e2:77:ed:fb:70:20:a5:b3:48:ea:b6:d6:b4:
         54:e8:11:2d:7b:6e:1f:a2:43:df:8c:c8:eb:67:bd:eb:dd:f8:
         5c:7e:d9:cc:d4:59:1b:d2:a7:bf:66:ae:b1:5c:2b:a0:c5:52:
         ae:c7:28:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:46:25 2025 by rpki-client