Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663362383a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663362383a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          usxMNNb/aZOm/9837DJiUjkys2IzwU+MNYiqGkFdhZE=
Subject key identifier:   56:8E:A9:B1:B2:91:27:88:C9:99:22:57:C0:AC:0C:82:3D:FC:83:3F
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       27CC11E09FE4AB6AAB4DEA2F4881895A0B12F611
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663362383a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Mon 30 Jun 2025 22:25:12 +0000
ROA not before:           Mon 30 Jun 2025 22:20:12 +0000
ROA not after:            Mon 29 Jun 2026 22:25:12 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f3b8::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:cc:11:e0:9f:e4:ab:6a:ab:4d:ea:2f:48:81:89:5a:0b:12:f6:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jun 30 22:20:12 2025 GMT
            Not After : Jun 29 22:25:12 2026 GMT
        Subject: CN=568EA9B1B2912788C9992257C0AC0C823DFC833F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0b:89:0f:a2:76:0b:11:0e:9e:37:06:52:80:
                    4f:0a:b8:35:da:89:59:e0:1a:f7:94:61:ec:b0:c3:
                    2a:ff:e5:07:63:90:bf:de:47:0c:46:c8:5b:f6:19:
                    9e:a1:da:66:03:cd:ac:bf:05:98:16:b9:c8:f6:5b:
                    62:0f:62:99:8e:b7:36:26:a1:81:20:7c:e9:1e:b1:
                    0b:bc:47:da:94:bd:6a:11:72:4e:5c:49:00:29:e6:
                    e5:6a:b5:9e:71:a9:fc:cc:e7:85:1e:f5:c0:28:f0:
                    25:63:33:cf:67:74:2d:25:f8:53:90:82:77:c9:e9:
                    21:f7:24:a8:d9:c0:09:07:04:18:d3:08:2b:3f:19:
                    61:de:f7:23:6f:1f:02:71:30:e8:0a:03:b3:2b:81:
                    54:11:c7:e9:06:50:3d:94:92:54:21:cf:ce:98:07:
                    93:e8:06:b4:a0:a4:d9:96:7d:bb:4b:a5:3f:d0:89:
                    e8:51:2c:bd:6f:bb:15:ba:f7:4b:c5:17:a0:d0:ce:
                    49:89:09:64:00:6e:52:8b:1d:12:a3:31:5e:18:08:
                    63:2f:71:06:6d:52:1c:2a:7b:e3:89:1a:e9:54:32:
                    d4:4b:0a:74:19:43:52:73:53:bc:58:98:d5:6a:7a:
                    c3:47:9f:be:cb:9c:49:e3:f2:74:da:bf:56:6d:16:
                    75:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:8E:A9:B1:B2:91:27:88:C9:99:22:57:C0:AC:0C:82:3D:FC:83:3F
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663362383a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f3b8::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:4c:b1:b7:fe:a9:7e:9d:36:b7:c2:51:4b:ac:29:1b:39:bc:
         45:52:16:5d:fb:d7:38:2c:36:8e:ae:14:7b:d2:95:1a:08:99:
         73:60:e0:bb:17:f0:82:19:b7:52:d0:d2:ea:15:02:c0:2c:9b:
         a8:54:57:87:75:5e:47:21:97:e1:ee:78:fe:39:aa:36:6d:28:
         b7:4d:74:36:a8:94:34:e4:be:ca:e7:c3:a1:a3:71:df:d3:a7:
         73:9f:ad:22:10:92:c6:0d:f3:e6:ea:05:48:00:c4:ac:70:12:
         14:95:74:54:d2:7e:e8:5c:e3:d7:8a:61:8b:13:ca:c3:86:b8:
         c3:27:23:d2:6c:5c:7c:b5:21:e0:8c:a0:18:d1:f5:18:25:56:
         b3:83:fb:ce:5f:a2:04:4e:9e:4f:57:d1:a8:cb:49:81:a2:ba:
         be:01:8b:4d:89:f3:a2:e6:01:e0:77:9d:b5:89:9e:fb:b1:22:
         e0:c9:76:82:c5:8d:78:64:08:88:91:2c:b7:b9:7e:31:3d:5e:
         20:a3:7b:0d:21:1c:3a:cb:90:a2:05:b7:be:d2:6c:d8:11:b3:
         a0:53:df:4b:c9:32:c6:3a:60:7f:1e:b2:f0:61:62:05:db:3b:
         81:88:74:73:9b:58:a1:57:fa:6b:62:43:a1:d0:9d:94:15:a6:
         fd:f8:2c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:35:12 2025 by rpki-client