Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666237323a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666237323a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          NbMUh6P+FEaWrpwwK34q47EDpJm4i3+m5i8Sh06s38k=
Subject key identifier:   3B:0F:5E:CE:AC:24:D0:06:04:6E:BE:57:8E:7A:E8:86:C4:7E:8E:39
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       7AA442BD10D9023BF2B3EBC6C912F0BC82A1C4C3
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666237323a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 04:15:03 +0000
ROA not before:           Tue 01 Jul 2025 04:10:03 +0000
ROA not after:            Tue 30 Jun 2026 04:15:03 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fb72::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:a4:42:bd:10:d9:02:3b:f2:b3:eb:c6:c9:12:f0:bc:82:a1:c4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 04:10:03 2025 GMT
            Not After : Jun 30 04:15:03 2026 GMT
        Subject: CN=3B0F5ECEAC24D006046EBE578E7AE886C47E8E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2e:08:56:77:0b:47:cf:39:df:92:f6:d5:c9:
                    ad:68:9b:4e:36:c7:4d:20:51:97:ca:4b:cd:d9:64:
                    9f:6a:22:83:44:fa:43:04:f5:b1:03:a8:49:5f:16:
                    dc:c3:87:cd:04:e3:b0:95:ef:63:de:16:fd:e2:01:
                    3b:07:91:d1:8f:51:50:39:10:7b:8f:bd:18:06:dd:
                    d3:6c:88:9f:31:f9:a1:34:c5:9f:0c:83:b8:9d:a9:
                    01:fc:e3:58:12:64:ec:d4:ff:0c:03:77:ce:87:8e:
                    5a:a3:d0:cd:d4:32:86:71:5c:17:4f:4f:6b:ce:cb:
                    e9:9b:af:1a:a2:dc:aa:42:8d:99:3c:99:4a:ca:60:
                    13:d9:f3:9a:b1:25:b7:f9:51:36:e6:5b:6d:fc:96:
                    8b:82:8d:90:fa:cc:ef:f8:a5:45:16:67:7a:c3:9d:
                    2c:34:b8:be:59:f4:f2:3f:ec:d2:a8:5e:f3:eb:1b:
                    73:6e:71:be:de:13:6c:cd:ef:fc:f6:bb:e1:ea:c8:
                    62:17:e9:bd:73:64:a4:f5:8f:9b:23:1c:57:43:5a:
                    32:db:80:ac:60:84:93:75:f5:af:06:9d:c3:6d:e1:
                    52:da:c4:35:45:d7:ef:86:79:3b:7b:e1:80:d4:4d:
                    60:8e:19:16:b6:2d:d5:2c:60:d8:15:0e:f5:12:a8:
                    35:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:0F:5E:CE:AC:24:D0:06:04:6E:BE:57:8E:7A:E8:86:C4:7E:8E:39
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666237323a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fb72::/48

    Signature Algorithm: sha256WithRSAEncryption
         80:6b:12:21:5b:4e:c9:2d:7d:a3:e1:6c:bc:99:fc:17:81:5e:
         5e:e6:bf:24:29:9f:4c:58:6b:fa:02:07:1a:01:99:c6:f6:16:
         55:4f:4b:52:39:f6:ea:3e:49:a0:f5:fa:bd:f3:a5:b1:bc:ee:
         21:06:83:50:9f:6b:43:b0:29:ec:1c:89:65:86:fc:7f:a1:2c:
         d8:6b:15:c7:85:58:db:45:56:55:d7:15:3d:59:f7:2e:9a:5a:
         0f:2c:09:ab:97:48:57:61:40:a1:a2:b5:79:53:86:a7:8b:46:
         32:9a:a4:66:7d:85:52:19:03:4d:b6:d0:e2:bb:a8:e4:7d:9f:
         2c:63:8a:ad:dd:26:34:4b:a6:b3:13:5c:7d:56:c5:28:6a:0e:
         3d:0a:75:76:77:f4:2e:0d:3a:dd:e8:0c:8f:75:cd:b2:a8:e1:
         18:9b:fa:b5:44:93:60:a3:2c:77:88:4e:f7:5b:4c:00:98:8c:
         17:6f:ef:ca:fe:63:a7:0f:b4:24:31:5e:5d:7e:73:33:77:68:
         f4:3a:fb:eb:4d:fe:35:a0:22:5c:20:52:1c:bb:65:6a:33:8e:
         dc:f0:6f:e8:4b:82:64:20:f6:f8:6b:cb:a3:22:00:9b:0c:76:
         0d:71:5c:38:ff:5d:70:f9:21:fe:aa:23:5e:e2:ed:9b:00:c7:
         37:67:c2:f6
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUeqRCvRDZAjvys+vGyRLwvIKhxMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA3MDEwNDEwMDNaFw0yNjA2MzAwNDE1MDNaMDMxMTAvBgNV
BAMTKDNCMEY1RUNFQUMyNEQwMDYwNDZFQkU1NzhFN0FFODg2QzQ3RThFMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeLghWdwtHzznfkvbVya1om042
x00gUZfKS83ZZJ9qIoNE+kME9bEDqElfFtzDh80E47CV72PeFv3iATsHkdGPUVA5
EHuPvRgG3dNsiJ8x+aE0xZ8Mg7idqQH841gSZOzU/wwDd86Hjlqj0M3UMoZxXBdP
T2vOy+mbrxqi3KpCjZk8mUrKYBPZ85qxJbf5UTbmW238louCjZD6zO/4pUUWZ3rD
nSw0uL5Z9PI/7NKoXvPrG3Nucb7eE2zN7/z2u+HqyGIX6b1zZKT1j5sjHFdDWjLb
gKxghJN19a8GncNt4VLaxDVF1++GeTt74YDUTWCOGRa2LdUsYNgVDvUSqDXpAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUOw9ezqwk0AYEbr5XjnrohsR+jjkwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjIzNzMyM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/ty
MA0GCSqGSIb3DQEBCwUAA4IBAQCAaxIhW07JLX2j4Wy8mfwXgV5e5r8kKZ9MWGv6
AgcaAZnG9hZVT0tSOfbqPkmg9fq986WxvO4hBoNQn2tDsCnsHIllhvx/oSzYaxXH
hVjbRVZV1xU9WfcumloPLAmrl0hXYUChorV5U4ani0YymqRmfYVSGQNNttDiu6jk
fZ8sY4qt3SY0S6azE1x9VsUoag49CnV2d/QuDTrd6AyPdc2yqOEYm/q1RJNgoyx3
iE73W0wAmIwXb+/K/mOnD7QkMV5dfnMzd2j0OvvrTf41oCJcIFIcu2VqM47c8G/o
S4JkIPb4a8ujIgCbDHYNcVw4/11w+SH+qiNe4u2bAMc3Z8L2
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:20:08 2025 by rpki-client