Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663162393a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663162393a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          8idJUKfYRv6LWuWKDzWiJd+ibX5hmVCZAXOnGCvAuxk=
Subject key identifier:   72:64:D1:61:20:CC:2B:24:74:7C:5A:3E:29:DC:4B:75:E0:75:7E:08
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       57290BA306884694ED2D1613E8D9D28AF796BB37
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663162393a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 03:48:59 +0000
ROA not before:           Tue 01 Jul 2025 03:43:59 +0000
ROA not after:            Tue 30 Jun 2026 03:48:59 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f1b9::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:29:0b:a3:06:88:46:94:ed:2d:16:13:e8:d9:d2:8a:f7:96:bb:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 03:43:59 2025 GMT
            Not After : Jun 30 03:48:59 2026 GMT
        Subject: CN=7264D16120CC2B24747C5A3E29DC4B75E0757E08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bd:c9:ea:7b:98:37:1b:28:1d:96:73:d2:a3:
                    23:34:15:e4:4e:54:2b:04:5e:ec:90:b8:81:f9:53:
                    64:c7:f7:25:5f:ee:23:c5:9e:87:45:a9:a9:47:f5:
                    bd:41:a9:34:44:c2:7d:80:7d:9a:1d:9f:70:1a:25:
                    86:fe:4d:49:7d:9b:be:75:c0:9c:fb:a2:43:15:0f:
                    c6:52:39:fb:0a:ad:d9:53:e9:c6:51:4c:6b:c7:33:
                    bc:28:9a:b8:17:8d:c7:fe:57:a9:0f:8d:00:63:f1:
                    13:3b:30:06:c5:5c:19:b9:83:9f:2d:17:3d:a0:a6:
                    2e:9b:4e:c3:96:f9:47:28:c1:c4:60:9e:12:86:12:
                    b0:92:72:99:03:50:ae:77:0c:be:1b:1b:d0:d0:dd:
                    20:87:cd:f3:8a:78:78:41:d6:51:86:7a:ff:87:af:
                    3e:32:4c:93:8d:db:61:4c:cd:0d:e5:82:21:50:ec:
                    e0:2c:d4:e0:ab:dd:d5:52:25:5d:5c:2b:ab:23:5b:
                    4b:33:7b:07:28:1c:9f:83:d1:b9:ba:5f:21:15:00:
                    05:46:19:01:a7:b3:9f:e6:2c:2d:8e:a5:2e:9f:7b:
                    41:e1:ab:75:4a:3e:77:16:de:c2:1e:c7:ab:41:42:
                    9b:09:65:9e:87:d2:66:4c:eb:d6:62:41:27:04:f6:
                    a2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:64:D1:61:20:CC:2B:24:74:7C:5A:3E:29:DC:4B:75:E0:75:7E:08
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663162393a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f1b9::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:d4:23:dc:a6:51:ca:d0:eb:41:df:c5:b3:9b:72:3a:49:42:
         e8:a2:79:23:4a:45:6e:67:18:56:2d:1d:8c:73:5a:f4:72:47:
         99:e0:d5:5b:3f:9f:d8:81:55:ac:b4:9a:12:cf:33:86:1e:73:
         c7:9a:b2:eb:7a:07:53:e1:70:c6:2a:da:29:ba:b9:b9:37:a4:
         ee:75:47:6e:b9:6c:ab:35:72:b8:77:9c:b7:28:01:0e:aa:81:
         e7:54:ed:d2:17:f8:e7:f4:dd:33:ea:df:c8:f4:bb:8b:b5:8c:
         9e:18:18:5b:3b:63:c4:fe:d1:f2:b4:71:45:9e:d4:91:25:62:
         52:76:eb:fc:17:ec:c9:6c:63:c0:b8:db:09:3b:dd:1c:b2:3e:
         eb:3a:a9:c5:96:f2:9e:6d:74:e2:9e:59:63:7b:cd:4d:ab:ed:
         ef:62:ae:5a:3c:65:f5:91:bf:49:33:11:13:70:99:25:bd:19:
         9c:02:a8:ce:9e:c4:cf:7f:2f:5f:2a:55:0e:67:bd:a5:69:e1:
         49:4b:24:ef:af:69:74:21:d4:f5:26:e1:17:73:82:85:d2:78:
         76:a9:50:f4:2e:36:59:81:33:c9:d2:93:da:46:46:71:d0:b4:
         56:2e:ae:37:51:b9:f8:fc:04:83:56:3a:33:03:af:0e:81:7c:
         c7:95:e3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:31:27 2025 by rpki-client