Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663566383a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663566383a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          WhS5iPPiGNroV4EsrQQOyYCtiBRO/IIgEZrkt9w2k9M=
Subject key identifier:   59:B1:A8:FA:19:58:24:D9:10:2A:D4:FE:2A:10:3C:67:55:BC:74:CE
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       25434981F8D17649C810E90142901F53B5E3162C
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663566383a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 03:48:59 +0000
ROA not before:           Tue 01 Jul 2025 03:43:59 +0000
ROA not after:            Tue 30 Jun 2026 03:48:59 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f5f8::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:43:49:81:f8:d1:76:49:c8:10:e9:01:42:90:1f:53:b5:e3:16:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 03:43:59 2025 GMT
            Not After : Jun 30 03:48:59 2026 GMT
        Subject: CN=59B1A8FA195824D9102AD4FE2A103C6755BC74CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a7:a6:b8:f7:a3:81:ed:73:40:6e:db:99:83:
                    6d:94:21:05:86:7b:b9:fe:ed:73:8e:0d:d2:37:a8:
                    0b:17:74:84:9f:01:26:4f:51:d3:02:45:b9:64:0b:
                    06:92:3c:41:27:e7:85:b4:b5:4d:88:07:f6:c3:02:
                    d0:39:44:5e:aa:8b:ba:a6:e2:3b:52:d5:0b:10:ee:
                    d7:df:97:9d:14:4f:69:bd:97:18:e4:9e:d0:e8:7e:
                    8f:50:14:12:3e:7e:67:28:55:28:d2:40:f2:83:8c:
                    2c:74:7a:99:62:cd:95:1b:81:11:e8:cd:ee:c7:1a:
                    60:2a:5e:7c:84:9e:2b:10:70:7f:c8:f4:b6:56:eb:
                    0c:5d:6c:59:d0:ea:20:53:d1:70:6f:50:33:37:f5:
                    19:d8:89:46:1c:df:56:f2:eb:c5:83:8e:6b:be:24:
                    1b:f3:a1:d0:f2:1f:82:69:fc:18:1a:aa:69:56:3c:
                    70:90:89:46:80:27:6c:5b:ad:3a:a7:1d:f3:63:08:
                    16:a7:9e:94:b4:14:fd:0b:d4:f8:a2:05:af:9b:b0:
                    04:c7:28:05:f3:a4:01:ea:a8:5c:c4:38:0d:55:d3:
                    1a:2b:fb:91:74:18:41:e8:04:67:8b:12:25:7a:d9:
                    9c:8b:db:ed:05:39:45:42:49:f5:90:1a:53:73:47:
                    8f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B1:A8:FA:19:58:24:D9:10:2A:D4:FE:2A:10:3C:67:55:BC:74:CE
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663566383a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f5f8::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:d8:2d:d6:f0:a2:73:9d:fb:75:ed:2d:45:91:56:b0:26:25:
         e1:37:3b:e1:f1:dc:18:18:c2:a3:b0:c5:fa:46:1a:6c:e6:ac:
         17:a7:48:34:92:96:2f:27:ad:fb:20:09:49:2b:61:21:30:21:
         ea:89:9e:a8:23:ca:f2:41:f8:e6:f9:51:d0:1c:c6:cb:9c:19:
         f8:7a:65:8b:d2:37:a7:7f:02:7f:e8:69:48:c6:64:3b:6e:60:
         69:0f:ef:c5:bf:38:24:32:7c:8d:4b:f3:5f:da:ba:d0:61:18:
         4b:8a:fd:15:d8:9c:a9:20:dc:17:c7:06:ec:da:b7:7c:f4:a3:
         3f:80:d6:07:51:24:43:e1:77:0e:ef:f1:aa:ab:0b:1f:a1:80:
         13:6b:5b:35:17:42:93:22:f1:b9:49:88:b1:57:70:03:80:63:
         62:c0:5e:10:38:a4:2d:97:30:b0:01:cf:fd:04:c7:4c:62:ab:
         eb:6b:36:8e:71:0e:94:49:af:40:57:c9:c5:2b:95:20:9e:9a:
         be:2b:e7:4c:68:8a:5c:fb:3f:94:d8:32:c4:7e:99:66:76:e8:
         2c:ca:06:83:ec:35:66:4d:e4:48:a0:94:7e:8c:18:94:78:e5:
         d2:b9:9f:58:94:b0:69:d6:6e:a2:12:10:31:3d:f8:fc:aa:4e:
         0b:25:30:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:41:17 2025 by rpki-client