Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663831313a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a663831313a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          F5zksKnNcEy1bjx8iXvub7loWf88CZS9JqPADpNxBOs=
Subject key identifier:   95:92:08:C9:12:56:D5:7F:66:C3:B4:05:9B:04:5E:69:0C:57:A2:BD
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       19AF06CBC7457E680F252854C6891847B8F6AEFC
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663831313a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 04:18:02 +0000
ROA not before:           Tue 01 Jul 2025 04:13:02 +0000
ROA not after:            Tue 30 Jun 2026 04:18:02 +0000
asID:                     396968
IP address blocks:        2a0f:6287:f811::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:af:06:cb:c7:45:7e:68:0f:25:28:54:c6:89:18:47:b8:f6:ae:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 04:13:02 2025 GMT
            Not After : Jun 30 04:18:02 2026 GMT
        Subject: CN=959208C91256D57F66C3B4059B045E690C57A2BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e4:5a:4b:4e:9b:88:1d:48:59:59:7e:25:4a:
                    70:17:64:cd:70:e1:90:24:9b:f9:bf:a3:d3:ff:3f:
                    49:76:ff:c5:51:d9:b5:ef:ae:b1:1d:41:87:96:44:
                    99:c6:1f:c3:a3:60:7a:cb:07:b0:4e:38:c4:ed:d0:
                    27:ef:23:74:0c:04:74:ae:62:02:af:8e:f3:a4:7e:
                    35:87:e1:5f:96:ab:c7:d0:80:4e:a1:6e:51:1e:f4:
                    9c:2b:a9:81:92:b9:91:e8:fe:ae:03:2c:e9:42:2b:
                    e2:1e:d5:81:9d:70:fa:70:b3:65:c3:85:e5:24:8f:
                    60:19:f0:5b:b3:e2:6d:99:c5:f8:a3:c6:18:e8:d6:
                    f4:bb:76:0a:6b:43:c4:49:97:7f:53:ed:d7:c7:9b:
                    b1:cf:5e:58:ad:2d:9d:89:84:b0:82:f8:a9:91:5e:
                    bc:7d:d5:20:82:d8:a7:5f:5b:96:37:2c:3c:f9:63:
                    41:ab:24:e5:00:48:eb:50:08:2c:99:f8:88:21:f0:
                    9c:3d:85:96:2b:41:07:17:ea:f3:63:ec:f4:d9:cf:
                    b8:54:90:4c:d9:cb:e4:bf:3f:c0:c4:6a:73:9c:f9:
                    a2:87:52:9e:8f:41:11:61:8a:4b:1d:5e:8b:e6:06:
                    eb:47:7e:8c:f1:55:65:8f:3c:0a:a6:ce:70:27:d2:
                    cc:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:92:08:C9:12:56:D5:7F:66:C3:B4:05:9B:04:5E:69:0C:57:A2:BD
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a663831313a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:f811::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:7a:18:5b:a4:55:5d:8f:5f:fc:e2:0c:a5:56:8e:c6:d3:50:
         f0:b8:b1:5c:e9:3d:61:e9:7c:f6:23:17:3b:e7:47:9e:68:4a:
         d2:ea:18:4b:8d:fd:da:a5:47:31:f1:a4:e0:b3:76:09:24:91:
         f6:e9:e8:b4:d3:35:c6:32:d3:26:11:f4:2e:db:7e:2f:d5:1e:
         78:4b:17:4a:2e:81:a0:37:6f:6f:f8:5b:7b:4b:57:38:81:61:
         de:1b:24:cf:c6:0d:9e:46:cb:d9:9b:69:1c:6a:fb:9a:ba:9b:
         a8:4e:b2:52:5a:c7:17:10:31:c8:e7:7a:eb:bd:54:05:bf:2c:
         49:ec:24:de:b0:85:fe:b6:89:94:8f:3f:da:06:58:ee:32:95:
         20:87:5d:f7:4c:8a:5c:0e:08:f7:63:be:40:90:50:92:1b:f7:
         ac:2a:ae:d4:50:73:51:29:a1:ed:37:6b:b6:bf:04:56:f9:0e:
         f7:9f:ca:46:26:39:bb:15:c1:32:81:da:71:80:5c:d4:52:ef:
         39:eb:3b:f0:41:f4:f1:52:21:5a:8a:40:a4:8c:0c:e6:37:72:
         bf:46:2f:d2:71:e0:6f:96:01:0a:b5:da:ac:08:51:2c:e4:5e:
         4c:ba:2d:57:6e:d9:9f:d3:02:bd:11:92:74:1c:c2:a9:ff:c7:
         33:ff:9d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:19:23 2025 by rpki-client