Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666337383a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666337383a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          a5VqHE+85dDiG5Q6Jdz2KyvTDyfBYJnicjwW7BRZy7I=
Subject key identifier:   26:D8:0A:01:2E:D8:AF:9C:79:37:AB:3D:C4:D3:15:30:1E:CE:9E:39
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       4BBCAC533334D1A59EAC182CA13FC3DB7AEAFBB8
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666337383a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 04:15:01 +0000
ROA not before:           Tue 01 Jul 2025 04:10:01 +0000
ROA not after:            Tue 30 Jun 2026 04:15:01 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fc78::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:bc:ac:53:33:34:d1:a5:9e:ac:18:2c:a1:3f:c3:db:7a:ea:fb:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 04:10:01 2025 GMT
            Not After : Jun 30 04:15:01 2026 GMT
        Subject: CN=26D80A012ED8AF9C7937AB3DC4D315301ECE9E39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b2:17:c4:75:43:0e:6f:2d:28:5c:f3:b3:74:
                    ea:19:76:1e:21:f4:d3:75:4d:83:04:69:99:d6:01:
                    e1:bf:39:34:0d:a2:9e:2d:0e:0b:c9:7a:a2:80:5b:
                    d2:46:a6:25:72:85:6b:f0:2c:cd:d8:d8:6d:55:33:
                    25:06:fb:e3:56:a4:ef:d2:cf:53:f4:6e:1d:f0:6f:
                    0c:17:2e:11:ab:60:a0:dc:a6:39:dc:68:37:99:fe:
                    2f:ab:f2:25:1b:e3:1b:d8:c7:5f:1b:63:2f:1f:4e:
                    a7:63:d1:c6:e4:fb:72:2e:e8:9e:91:0d:8a:a9:7d:
                    c7:95:69:60:11:bb:09:83:23:a9:bd:43:90:c4:c6:
                    ac:3f:f8:46:b5:c4:db:48:36:61:98:37:c1:fa:87:
                    92:66:cd:f9:b5:11:78:91:e4:e9:04:78:91:e8:e4:
                    04:dd:5f:b0:9d:73:5a:e0:f6:36:d7:a8:ff:01:5d:
                    08:ca:b7:04:84:4d:40:45:dd:7c:a6:2a:68:02:3e:
                    07:b6:43:78:7a:03:40:88:1b:0e:cc:9f:96:35:d7:
                    e9:d2:78:13:b4:5e:7f:26:9b:b5:35:c7:17:7d:d7:
                    74:f1:70:54:6d:60:61:7a:b7:41:3a:cb:07:ac:48:
                    7b:4a:49:e6:4b:fc:11:fd:6f:6c:c8:b3:51:ca:64:
                    cd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:D8:0A:01:2E:D8:AF:9C:79:37:AB:3D:C4:D3:15:30:1E:CE:9E:39
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666337383a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fc78::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:1a:e1:8d:74:1e:a3:37:82:51:bd:9c:3a:9d:ef:a7:23:cc:
         59:ee:9a:b9:b8:24:ce:9f:14:4b:9e:d0:75:e1:b0:37:c5:6c:
         d9:a5:d5:a4:6a:70:0c:f9:5c:ec:d3:4a:80:2a:02:43:e1:6c:
         08:35:5f:fc:02:7b:98:40:b4:1d:b0:2d:86:2a:5c:8d:81:3d:
         66:77:c8:e9:cb:a9:6c:37:a3:1d:a7:62:7f:8f:e6:71:13:38:
         c3:47:d1:7c:cf:27:df:b4:8b:c9:16:1f:3e:c6:c8:7f:02:c7:
         d4:cb:85:31:30:a2:0d:31:87:e6:3e:6e:b1:40:60:57:a0:72:
         d9:0d:03:4d:27:b2:10:5e:3c:6b:6f:e3:df:31:e6:28:66:8a:
         96:1a:a2:48:aa:7d:e7:b7:63:b4:f8:dd:b4:7e:e9:ce:d8:8c:
         68:92:c1:3a:4f:ef:c1:4f:a7:8c:ce:8f:6f:cc:08:4a:9f:42:
         36:73:59:0e:b5:7d:14:b1:b3:39:55:df:26:5f:b9:ae:ff:33:
         56:f8:23:00:45:12:ce:cb:30:6c:21:ef:1a:74:b7:ed:03:42:
         e8:40:7e:6e:cd:e8:db:75:6f:56:ba:94:40:14:bd:e7:ad:cd:
         45:df:c5:86:97:ff:4e:bc:a4:86:fd:c1:7e:42:db:31:36:a6:
         c9:e2:7c:e1
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUS7ysUzM00aWerBgsoT/D23rq+7gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA3MDEwNDEwMDFaFw0yNjA2MzAwNDE1MDFaMDMxMTAvBgNV
BAMTKDI2RDgwQTAxMkVEOEFGOUM3OTM3QUIzREM0RDMxNTMwMUVDRTlFMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5shfEdUMOby0oXPOzdOoZdh4h
9NN1TYMEaZnWAeG/OTQNop4tDgvJeqKAW9JGpiVyhWvwLM3Y2G1VMyUG++NWpO/S
z1P0bh3wbwwXLhGrYKDcpjncaDeZ/i+r8iUb4xvYx18bYy8fTqdj0cbk+3Iu6J6R
DYqpfceVaWARuwmDI6m9Q5DExqw/+Ea1xNtINmGYN8H6h5Jmzfm1EXiR5OkEeJHo
5ATdX7Cdc1rg9jbXqP8BXQjKtwSETUBF3XymKmgCPge2Q3h6A0CIGw7Mn5Y11+nS
eBO0Xn8mm7U1xxd913TxcFRtYGF6t0E6ywesSHtKSeZL/BH9b2zIs1HKZM0rAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUJtgKAS7Yr5x5N6s9xNMVMB7OnjkwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjMzNzM4M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/x4
MA0GCSqGSIb3DQEBCwUAA4IBAQBzGuGNdB6jN4JRvZw6ne+nI8xZ7pq5uCTOnxRL
ntB14bA3xWzZpdWkanAM+Vzs00qAKgJD4WwINV/8AnuYQLQdsC2GKlyNgT1md8jp
y6lsN6Mdp2J/j+ZxEzjDR9F8zyfftIvJFh8+xsh/AsfUy4UxMKINMYfmPm6xQGBX
oHLZDQNNJ7IQXjxrb+PfMeYoZoqWGqJIqn3nt2O0+N20funO2IxoksE6T+/BT6eM
zo9vzAhKn0I2c1kOtX0UsbM5Vd8mX7mu/zNW+CMARRLOyzBsIe8adLftA0LoQH5u
zejbdW9WupRAFL3nrc1F38WGl/9OvKSG/cF+QtsxNqbJ4nzh
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:44:12 2025 by rpki-client