Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666361373a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666361373a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          YeMQBAM1L4Qm3iWzMsJL7Fq3intMxGgnX9GUClvr//A=
Subject key identifier:   93:86:63:86:E4:B6:60:1F:17:41:E1:CB:95:BC:CA:9A:33:FD:59:B2
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       19B17FD64EC0994D08F840CBBC278161915790EA
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666361373a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 04:18:02 +0000
ROA not before:           Tue 01 Jul 2025 04:13:02 +0000
ROA not after:            Tue 30 Jun 2026 04:18:02 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fca7::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:b1:7f:d6:4e:c0:99:4d:08:f8:40:cb:bc:27:81:61:91:57:90:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 04:13:02 2025 GMT
            Not After : Jun 30 04:18:02 2026 GMT
        Subject: CN=93866386E4B6601F1741E1CB95BCCA9A33FD59B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:11:1b:85:e9:79:7f:a9:15:7a:18:4d:01:5b:
                    91:8c:5a:43:8b:ae:47:63:69:2d:a6:25:f2:ab:c0:
                    27:b1:d8:48:ab:4b:c8:2f:0b:7b:cd:8a:57:ce:9b:
                    ef:e7:72:cf:54:d8:93:d1:63:01:a8:ed:57:66:8e:
                    d5:2e:28:86:10:fb:09:aa:a5:02:e4:ff:e3:28:45:
                    27:7b:81:15:f7:d7:eb:62:d9:ee:62:54:9e:7f:27:
                    f3:a9:83:e5:7a:12:58:c4:b5:45:01:1f:1f:6e:4d:
                    03:e5:db:ed:f9:df:f1:75:3a:33:03:0f:c6:1d:be:
                    ff:66:2e:76:ad:eb:bb:7c:1d:7c:b0:50:53:43:8d:
                    16:24:50:a7:c4:71:f1:54:8c:24:55:08:09:e5:08:
                    e2:b8:e9:25:b8:02:bb:d9:e0:c0:6b:36:03:70:d3:
                    b9:e2:5a:aa:6a:4a:e0:1a:e4:a2:cc:2c:e3:e0:95:
                    0c:a2:69:be:72:9c:87:c5:1b:6e:06:5d:90:92:15:
                    4a:0a:d1:69:d2:6b:c9:1f:8d:cf:0d:cd:f7:3b:c1:
                    18:93:9f:44:30:06:f2:40:8b:e6:fc:2f:dd:94:32:
                    d0:a4:88:3b:4b:8d:3f:42:72:3a:bb:e5:3e:23:53:
                    82:57:fd:3e:6b:68:8f:1b:1e:ba:0d:a8:9f:af:ab:
                    59:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:86:63:86:E4:B6:60:1F:17:41:E1:CB:95:BC:CA:9A:33:FD:59:B2
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666361373a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fca7::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:f2:8a:ca:a2:e1:e8:ae:e8:96:97:7d:b2:61:cb:06:1b:e0:
         ce:88:de:80:66:97:dd:7c:76:37:97:7f:27:a2:33:10:b2:41:
         cf:7f:0b:e5:ce:36:17:d7:c1:2a:6c:10:ac:1f:b1:0f:ac:58:
         d1:41:43:f4:3d:c3:7e:96:37:87:73:e3:e4:1b:90:42:e3:91:
         32:12:25:63:82:44:54:0a:f4:f1:17:35:b3:72:c1:49:08:ca:
         86:63:e8:1d:01:fb:5b:4d:5a:ba:7f:66:79:68:7a:4d:42:c5:
         98:2c:4f:23:12:b2:62:aa:a1:79:75:76:5a:f4:49:d3:ed:6c:
         50:e6:95:e0:cd:ab:de:fd:20:a5:11:a1:8a:2c:06:3d:22:3b:
         fb:55:f4:b6:79:2b:a6:a4:f0:3c:1a:41:1a:58:3e:cf:87:2e:
         97:2a:44:df:29:69:f4:4e:c2:ec:cd:c6:e6:2c:1a:b6:42:20:
         c1:dc:3e:38:3e:7c:f6:ee:93:b9:23:89:e3:2d:e9:4b:cc:a4:
         97:17:4b:d3:96:24:48:21:35:76:34:e8:20:0f:98:a2:f5:7f:
         45:55:5a:2f:7b:16:33:d7:b1:bb:8a:cb:7c:8a:a7:e2:95:74:
         94:3a:aa:5b:02:8a:85:29:46:d6:7f:1c:ed:75:82:49:58:2a:
         9f:59:3a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:30:21 2025 by rpki-client