Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666531623a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666531623a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          AaVFrumD6SktiNmRD3Ory+ECDXpitInY27BIMnvt7hU=
Subject key identifier:   66:C5:C2:C7:15:1B:47:F7:7C:52:94:3D:64:B2:4D:D3:F2:B9:DA:7D
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       071215753A65393BBDDAA736692935A36D123A93
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666531623a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 03:49:00 +0000
ROA not before:           Tue 01 Jul 2025 03:44:00 +0000
ROA not after:            Tue 30 Jun 2026 03:49:00 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fe1b::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:12:15:75:3a:65:39:3b:bd:da:a7:36:69:29:35:a3:6d:12:3a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 03:44:00 2025 GMT
            Not After : Jun 30 03:49:00 2026 GMT
        Subject: CN=66C5C2C7151B47F77C52943D64B24DD3F2B9DA7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1b:dd:44:51:ea:7f:c0:41:ae:12:7e:7d:eb:
                    91:22:97:a9:2d:ee:31:ee:0a:01:ef:d4:f9:38:63:
                    91:d7:be:b8:8e:54:10:58:d2:b5:69:e4:52:23:ac:
                    a9:a5:54:60:3d:4e:21:20:fb:9a:45:d9:23:06:3f:
                    60:f3:de:a1:26:87:dc:d9:93:5f:f5:c2:ba:3b:a7:
                    cd:c2:a5:0e:e6:e2:32:3e:d4:e5:0a:61:c8:3b:f4:
                    5e:c1:dd:51:8a:c5:24:8e:22:b3:09:ab:e8:69:63:
                    db:67:9b:2c:0e:de:6d:0d:8a:75:c6:3f:4e:b5:a2:
                    05:85:b4:d6:9a:9e:56:df:97:35:af:bd:74:7a:71:
                    60:de:e8:58:eb:77:be:9e:8b:a7:e0:38:c5:b1:26:
                    bc:e1:0e:be:68:8e:12:73:a2:af:50:22:cb:19:11:
                    39:d5:a0:0f:96:cf:0d:77:5d:77:f2:11:cd:66:3a:
                    82:9f:ac:7c:0c:fb:f9:0d:49:80:0a:88:47:bf:4c:
                    73:d5:55:57:e4:22:a8:e5:5e:7a:e3:8e:ce:c9:87:
                    db:67:7e:58:56:e5:cb:c5:a2:ad:f7:f3:32:35:dc:
                    3f:99:b4:31:db:6a:84:50:04:4c:d2:4a:b8:a4:e0:
                    4e:3c:b7:e3:83:7f:1e:14:82:65:c9:77:cb:d1:33:
                    97:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:C5:C2:C7:15:1B:47:F7:7C:52:94:3D:64:B2:4D:D3:F2:B9:DA:7D
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666531623a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fe1b::/48

    Signature Algorithm: sha256WithRSAEncryption
         be:7c:2a:03:99:a0:71:7f:77:02:29:6f:09:55:14:4b:e4:25:
         7a:18:12:99:5e:5a:20:7f:55:78:fa:87:c3:ae:ec:8d:55:52:
         76:ba:64:7b:8a:3a:5e:a4:b9:39:d3:4b:7a:5b:fe:cd:3a:53:
         b1:22:08:bb:40:4a:e9:12:43:5d:22:8b:4d:1f:b6:93:53:70:
         a3:7e:5c:af:b7:7c:42:c8:ec:b6:a0:96:6c:4d:20:11:9f:64:
         a0:05:41:7c:75:2c:f7:2f:80:22:b2:05:e6:20:f4:6a:9e:6f:
         bb:ee:8a:97:e3:1a:84:49:55:7c:8e:fd:32:39:d3:83:fe:b6:
         d7:0e:93:6c:7c:d4:a4:0b:a4:0f:a4:ff:5d:79:e3:6e:90:f5:
         b3:25:99:0c:93:c8:6f:58:4a:3e:fc:95:f2:21:bd:cc:4c:1d:
         e4:96:76:2e:ff:b2:01:3d:79:33:95:0a:81:82:83:27:39:56:
         8f:2a:09:37:ba:11:7d:b2:32:1f:1e:50:f3:8d:01:8d:3f:dc:
         cd:ee:33:dd:d3:cd:96:0a:22:fb:b1:64:b5:c8:44:06:94:32:
         4d:5c:44:ab:db:b5:8e:da:42:b1:0b:d8:cf:bf:b6:d6:4e:36:
         6f:70:9a:51:d1:b5:44:0c:c7:d9:c1:4b:59:1c:07:67:d8:8e:
         85:b1:86:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 14:19:23 2025 by rpki-client