Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663062653a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663062653a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          vSgvh2aXY8w7WRrmed/3GSUi3A1AGsr5XZaRnGkr5xA=
Subject key identifier:   B6:17:21:AB:47:25:F7:90:90:3F:C7:93:5F:2F:BF:23:A1:A3:86:9F
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       1DA78824E3EBB903F42267F454ADFAC3AEFF57AB
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663062653a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 03:28:23 +0000
ROA not before:           Tue 01 Jul 2025 03:23:23 +0000
ROA not after:            Tue 30 Jun 2026 03:28:23 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f0be::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a7:88:24:e3:eb:b9:03:f4:22:67:f4:54:ad:fa:c3:ae:ff:57:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 03:23:23 2025 GMT
            Not After : Jun 30 03:28:23 2026 GMT
        Subject: CN=B61721AB4725F790903FC7935F2FBF23A1A3869F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6f:87:92:52:66:4d:ff:41:5f:aa:bb:82:33:
                    82:de:14:76:40:fa:7b:03:ba:55:7b:6e:b2:77:b3:
                    82:35:2d:64:21:b6:3a:d9:7f:eb:80:40:35:69:b6:
                    de:9b:cd:f9:dd:84:63:f7:02:f6:9b:9d:9d:a9:68:
                    0c:2b:3f:20:b9:38:b6:f3:9d:c1:fe:a1:a5:2f:1c:
                    ac:e8:55:71:28:6d:11:0d:12:d7:07:1f:18:8d:9c:
                    74:f5:d5:f5:9a:df:f5:9c:bd:65:1c:f9:1e:d0:ad:
                    b3:62:63:24:5f:26:e2:3c:9a:56:f9:00:2f:cf:9a:
                    f0:e0:19:33:6d:3e:99:af:80:a0:2a:3a:dd:8f:16:
                    c1:d9:84:92:ac:01:a1:fb:e2:63:1b:cd:40:aa:bf:
                    eb:94:8b:ac:49:ed:fd:ea:22:b7:c3:75:60:47:ba:
                    d3:d1:29:34:de:21:05:6f:b0:dc:d7:b5:28:19:b1:
                    f6:4d:68:82:6b:3e:08:88:e8:01:c4:53:15:1b:e4:
                    69:8d:d8:f8:9c:ee:0e:f1:03:ca:0f:c5:9f:12:43:
                    c4:59:39:8d:af:89:5c:41:cc:ed:c6:05:f6:e3:b1:
                    f6:03:56:7e:eb:e3:af:1e:f8:11:19:53:c3:a9:a0:
                    a6:5d:ec:ed:92:db:f9:ae:16:c1:04:ca:e8:5d:2f:
                    43:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:17:21:AB:47:25:F7:90:90:3F:C7:93:5F:2F:BF:23:A1:A3:86:9F
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663062653a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f0be::/48

    Signature Algorithm: sha256WithRSAEncryption
         86:a0:f1:64:8e:ff:40:53:cb:2b:a3:d6:f3:92:e2:e3:7e:ad:
         fd:a6:db:63:d6:ab:74:82:d8:03:39:e5:b4:2c:b4:ab:81:6e:
         95:35:65:f5:c6:dc:b1:ef:ea:95:33:75:26:d6:21:9d:51:95:
         95:c1:0a:fd:b0:f8:1c:12:df:00:12:c4:4c:a4:a1:f4:5d:db:
         53:6e:f7:b6:c0:ef:38:61:05:d3:84:73:a6:61:10:2c:ca:a0:
         72:b7:7d:f0:ab:e3:01:46:49:a3:44:56:e5:ea:e3:73:98:16:
         9d:8b:d7:d9:62:d6:0e:a9:71:f3:88:85:b4:91:ca:06:89:ae:
         62:b7:ac:85:ca:c4:c9:dd:2e:1b:cb:c8:3d:d2:40:c3:84:75:
         35:98:5e:60:a8:59:bf:aa:b8:ab:13:62:b5:3f:64:d5:df:f8:
         f5:60:1d:fd:27:53:86:ae:01:58:30:04:65:58:86:c2:bf:3e:
         8a:a4:c0:67:21:ef:f0:49:b5:01:d9:c1:45:93:9d:d7:9d:44:
         29:1d:90:77:ac:07:01:5a:97:c8:20:14:e8:e1:83:a6:58:c5:
         74:c6:d0:58:86:ba:25:4b:37:16:84:a4:8a:ee:1e:54:ff:99:
         bf:db:b6:8d:25:b1:ec:71:0a:db:f2:d0:d7:6f:c0:37:8b:d6:
         4d:40:8a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:40:28 2025 by rpki-client