Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663433633a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663433633a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          0yb6iLjNvU7a85FTYysoN+gEETHYkXEpO9VD17JHnTk=
Subject key identifier:   C3:72:7E:21:CB:30:C6:D5:FE:88:C5:28:85:26:8D:B5:9F:C9:BE:4D
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       1C5F5C3846AA9D0E36C46B7D840CFD0A7FDB13DB
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663433633a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 03:45:31 +0000
ROA not before:           Tue 01 Jul 2025 03:40:31 +0000
ROA not after:            Tue 30 Jun 2026 03:45:31 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f43c::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5f:5c:38:46:aa:9d:0e:36:c4:6b:7d:84:0c:fd:0a:7f:db:13:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 03:40:31 2025 GMT
            Not After : Jun 30 03:45:31 2026 GMT
        Subject: CN=C3727E21CB30C6D5FE88C52885268DB59FC9BE4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:6c:bb:cb:75:0d:e8:69:c3:88:ef:93:0c:
                    5b:c2:4c:20:5e:83:54:df:20:91:1f:ab:1a:4d:30:
                    c3:c3:73:55:1c:9f:42:3e:38:16:a3:39:f5:21:e4:
                    b6:57:cf:26:0d:f0:24:63:8b:e0:b9:a2:71:78:e1:
                    24:d9:d9:2b:6a:48:05:a3:75:50:2f:41:5e:44:cd:
                    c6:2b:a7:6e:c0:15:44:f3:95:39:fe:fd:6c:f7:c4:
                    97:d3:16:4b:2b:a7:3e:25:ae:d0:8d:9e:8d:9a:cd:
                    be:26:50:13:2d:a2:47:b2:6b:d2:b0:e6:65:15:f6:
                    b4:12:fe:70:9a:2f:cf:6d:42:07:df:a3:34:8a:b3:
                    80:06:83:fd:05:aa:df:fc:95:18:7b:8d:bd:87:d2:
                    14:cc:58:9e:df:95:7e:16:a9:ef:f2:80:e2:ad:f1:
                    e2:36:27:c3:32:97:65:fb:0e:99:b0:43:a3:a8:d7:
                    06:55:42:cf:22:f2:9b:66:6b:c9:91:db:a5:39:3e:
                    e3:02:b0:71:c7:88:ae:d1:1d:9a:26:fe:7f:71:c1:
                    0b:76:8d:05:4b:59:b4:ea:16:88:b9:5f:e8:72:aa:
                    82:e0:4c:90:48:96:82:ae:40:a1:b1:5e:5d:cb:63:
                    46:c0:8d:38:36:48:be:b9:99:9a:83:a9:3d:db:d0:
                    54:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:72:7E:21:CB:30:C6:D5:FE:88:C5:28:85:26:8D:B5:9F:C9:BE:4D
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663433633a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f43c::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:06:13:71:bb:7d:00:b4:4c:e3:23:ff:4d:6a:2c:b2:63:49:
         2a:45:cd:4d:ad:0d:3d:1e:82:7e:08:3e:a5:78:87:0e:7b:10:
         15:e4:96:b3:19:f3:ce:5b:14:ed:35:45:30:f8:79:af:c7:93:
         0b:91:fa:b2:09:4f:77:5b:04:b6:01:1c:fb:28:04:c5:be:46:
         7a:a3:41:4c:c9:c9:a6:a3:74:f3:66:fa:1f:01:eb:3d:f3:4b:
         63:c8:42:cc:4b:26:a7:92:a5:42:60:a0:d5:37:24:53:4d:71:
         be:81:dc:85:44:b5:d1:9c:c8:25:21:1b:e5:9b:ec:63:d8:5e:
         52:bf:a8:9d:49:a6:c2:a1:4a:94:d0:b9:bb:a0:6c:e8:6c:e5:
         c1:2e:33:a9:45:8a:1a:53:b5:24:dd:21:d6:95:ea:55:8b:f1:
         92:3f:23:65:df:cb:a0:d2:e1:c3:d1:7b:6c:a8:98:9a:73:78:
         3c:46:e1:e6:38:07:46:78:13:c9:a8:b9:50:6b:9d:29:a8:1f:
         3a:d1:00:44:0a:5e:56:c9:c4:91:2d:4b:bb:78:18:79:8c:e7:
         22:d7:6c:86:68:08:1e:ad:b9:6e:c3:41:f2:c9:02:73:83:e9:
         cc:8e:10:3d:1c:e8:33:27:24:ad:57:1d:72:aa:01:5e:29:eb:
         76:af:84:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:17:52 2025 by rpki-client