Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663237383a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663237383a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          SMjeTLRkPpBtCJb54Yt4gA2gmDK+twPXlf4cGGXI+fI=
Subject key identifier:   2D:70:32:AF:3E:9A:33:24:1D:DA:AE:E3:0A:A5:08:B7:F3:D7:BA:58
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       195F2CC3E76E47899133182DCC8E742656618226
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663237383a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 04:18:03 +0000
ROA not before:           Tue 01 Jul 2025 04:13:03 +0000
ROA not after:            Tue 30 Jun 2026 04:18:03 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f278::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5f:2c:c3:e7:6e:47:89:91:33:18:2d:cc:8e:74:26:56:61:82:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 04:13:03 2025 GMT
            Not After : Jun 30 04:18:03 2026 GMT
        Subject: CN=2D7032AF3E9A33241DDAAEE30AA508B7F3D7BA58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:bc:b5:9c:d4:77:51:6a:03:a9:97:13:7c:
                    0f:b3:9e:ed:f4:93:f6:bf:3b:a5:07:cb:1b:47:93:
                    13:e1:03:d4:73:4f:9d:0c:84:3f:30:7e:a1:f2:c0:
                    cd:e3:26:2d:5e:43:f6:7f:b0:4d:56:12:96:a8:6e:
                    70:cf:6a:34:30:de:0c:8d:c4:78:51:65:8f:5b:06:
                    67:ba:92:95:d3:69:dd:33:3f:88:f5:a2:29:23:50:
                    88:3f:74:38:a9:ba:69:df:57:03:d4:f8:45:98:3a:
                    50:c6:fc:63:9d:27:76:e4:54:0e:ac:73:8e:e7:ca:
                    d0:15:2a:69:73:1c:5c:99:d9:59:32:9d:93:39:f6:
                    df:fc:14:cb:3c:67:e7:7b:c2:2b:21:40:99:fe:76:
                    2b:5a:76:ff:b2:8a:27:dc:14:b1:df:a3:ee:f4:44:
                    6b:e3:3d:48:8f:da:fa:81:c3:e9:ad:58:00:ee:ec:
                    21:a6:d9:37:35:32:27:62:86:87:38:70:58:c5:a1:
                    9a:59:55:0e:99:2e:7d:db:89:53:44:2c:7b:18:69:
                    19:40:b3:b6:b3:56:a8:c6:78:63:b4:d1:11:2f:7c:
                    bb:93:10:1a:be:e2:bd:d2:b6:e5:84:00:a1:b3:b8:
                    db:69:4a:fa:6f:b6:57:12:fe:cc:0c:49:51:c6:e4:
                    ae:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:70:32:AF:3E:9A:33:24:1D:DA:AE:E3:0A:A5:08:B7:F3:D7:BA:58
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663237383a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f278::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:35:be:1c:47:26:bb:82:7d:f7:89:04:13:87:76:1f:b2:1a:
         b5:84:f9:9a:b0:84:15:f0:62:72:f6:b5:08:e7:1d:52:48:cf:
         c0:8b:71:50:1d:25:b8:6f:22:5d:de:fc:e4:49:2b:88:8d:4a:
         99:48:4d:62:2f:4c:b6:4a:af:23:4e:60:f7:32:ce:7c:c2:60:
         ea:5a:72:a4:3a:5a:d3:93:6f:ef:1f:c3:e0:e5:b4:d8:10:1f:
         83:b8:49:3d:f3:8e:e2:b5:57:50:56:b7:19:56:43:56:c7:3e:
         04:51:0a:e2:ad:87:1e:c7:41:ed:e5:ae:4b:ee:9a:f8:f1:0f:
         99:3a:41:2c:8d:66:d3:1e:0b:fb:55:c7:eb:aa:be:10:0c:3b:
         42:d6:a8:63:4b:3c:a3:b4:0c:f0:53:34:29:20:b5:44:b7:98:
         e3:26:db:e5:41:44:33:c0:63:cf:a3:70:ef:cc:12:99:49:31:
         a9:ce:0d:00:6b:e1:dc:3b:69:05:02:ae:8e:44:c3:ab:ab:9f:
         86:dd:36:6a:79:84:70:63:f7:34:8a:ac:bf:42:34:12:31:a7:
         9f:11:73:cc:2b:04:10:50:2b:12:da:12:87:18:a5:d9:5e:c4:
         1f:dd:08:dd:d8:79:2b:22:b5:e5:9f:f5:11:be:11:d0:31:7e:
         1e:e8:b0:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:35:41 2025 by rpki-client