Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          7o/NHc6Emf+GrhFD8bQ4z65nPp/rd2exB2fYGtdlhnI=
Subject key identifier:   0C:EE:B1:89:91:BD:E5:4B:24:19:77:84:E4:0E:84:9F:48:8A:73:DA
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       07CB110043A242A85A06D4D7A188275750F5DA27
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 03:28:23 +0000
ROA not before:           Tue 01 Jul 2025 03:23:23 +0000
ROA not after:            Tue 30 Jun 2026 03:28:23 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fb74::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:cb:11:00:43:a2:42:a8:5a:06:d4:d7:a1:88:27:57:50:f5:da:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 03:23:23 2025 GMT
            Not After : Jun 30 03:28:23 2026 GMT
        Subject: CN=0CEEB18991BDE54B24197784E40E849F488A73DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c6:c7:d1:bc:ff:9e:04:c5:1c:e2:1e:b1:ec:
                    47:2f:03:71:ea:60:e2:5b:3a:cd:c1:19:7b:4b:51:
                    4a:7d:82:3c:39:1c:56:e7:d2:a8:25:a9:aa:14:6d:
                    91:86:01:34:73:ce:41:7b:a4:7d:6a:d9:9a:f8:05:
                    2a:5a:81:c4:98:00:14:2d:ca:1a:cf:55:3c:19:b9:
                    57:53:ee:59:5d:25:8f:75:f3:08:73:86:2d:73:54:
                    10:53:24:ab:c9:6f:9c:45:f6:fc:df:0a:1c:5c:d6:
                    f5:43:28:73:b5:fd:b1:27:31:45:ad:41:47:52:21:
                    99:be:46:8b:89:43:9e:ce:ac:07:b3:3f:c9:b2:c7:
                    40:ef:9c:d7:c3:59:96:94:93:23:dd:0f:f0:02:6d:
                    21:8e:b6:30:0d:e7:a6:be:cb:23:b2:ad:ab:fd:d7:
                    07:6b:fc:23:a3:16:be:aa:08:e9:ed:88:88:d3:8e:
                    68:c4:28:7a:a8:dd:17:9b:b3:36:d7:e9:e2:35:14:
                    8f:80:75:bf:d0:73:28:fd:29:8b:c9:58:52:ce:bf:
                    6f:70:5e:cc:6e:ad:0c:d3:58:4a:99:bc:61:eb:e5:
                    8b:6e:43:db:e6:da:eb:98:0f:2a:13:d1:1d:65:8c:
                    97:38:f1:eb:3a:78:c8:64:a5:ae:48:fd:f6:1e:f9:
                    63:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:EE:B1:89:91:BD:E5:4B:24:19:77:84:E4:0E:84:9F:48:8A:73:DA
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666237343a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fb74::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:be:39:00:41:01:cd:8f:d3:8c:d4:c1:35:15:e4:69:05:1c:
         3c:80:21:66:0d:d8:34:8b:77:05:52:2b:61:2f:fc:01:06:e0:
         25:6c:bf:df:4c:ed:fd:9a:5f:d2:9e:a7:de:cb:71:1b:00:bd:
         c3:33:22:d1:a0:2e:64:8b:19:bc:a4:29:0d:81:1f:f9:70:d7:
         1c:ea:2f:09:2d:2b:f1:a2:cd:c1:04:b1:d3:0c:db:a1:aa:66:
         1e:28:92:89:e9:f4:73:b9:54:27:38:71:44:ca:e0:8b:2d:b4:
         9d:e5:43:51:89:d9:e7:b6:ac:13:44:e4:f4:f3:44:dd:f1:89:
         5c:e8:84:6c:e8:d3:5e:11:8d:0d:74:4d:8f:35:8b:6c:09:cc:
         b7:05:71:a5:d3:b5:43:68:de:c6:bc:12:7c:77:36:4e:b4:6e:
         23:33:67:6d:3a:50:a3:7a:e9:d9:57:77:da:b5:12:fb:89:d3:
         85:7e:b0:25:f2:e6:70:66:af:60:84:3b:ba:d3:ad:e9:d1:39:
         3a:b7:32:0a:93:7b:14:c7:40:33:40:1e:23:c1:1a:db:22:7f:
         9d:d3:01:01:7a:57:c0:f8:4a:e3:62:46:13:2c:f3:fc:10:59:
         bd:df:9d:52:71:91:31:5a:ce:99:fb:96:e6:c4:0b:9f:de:7a:
         d8:13:39:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:32:37 2025 by rpki-client