Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666538303a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666538303a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          vcUQarfDwXmU66+dcLu2PlrnY3UgQ+2qfWwEr4516rA=
Subject key identifier:   C7:68:CF:D4:ED:70:0B:C3:CE:5A:12:58:0E:93:70:8B:8D:E3:E9:DC
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       18378DA0FFCCF8632B6FC7B66360DD439D664ACF
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666538303a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 03:45:30 +0000
ROA not before:           Tue 01 Jul 2025 03:40:30 +0000
ROA not after:            Tue 30 Jun 2026 03:45:30 +0000
asID:                     396968
IP address blocks:        2a0f:6287:fe80::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:37:8d:a0:ff:cc:f8:63:2b:6f:c7:b6:63:60:dd:43:9d:66:4a:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 03:40:30 2025 GMT
            Not After : Jun 30 03:45:30 2026 GMT
        Subject: CN=C768CFD4ED700BC3CE5A12580E93708B8DE3E9DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:86:c6:c7:4b:1d:10:12:ca:96:f6:98:f9:3f:
                    97:b0:e1:12:53:2e:c7:9a:0e:9c:fb:a5:4a:3a:34:
                    3e:82:81:21:9c:ef:5d:91:20:ff:0d:78:d1:f6:28:
                    c2:b6:99:6d:71:68:5e:2c:58:90:c5:5f:dd:b8:e7:
                    85:34:fd:52:41:13:ea:0e:c6:4a:29:78:db:86:71:
                    a8:49:b9:22:8b:1c:7d:c1:c8:8e:67:75:d6:04:cf:
                    fe:8f:b3:4a:4c:7d:f4:39:68:68:c8:7d:4c:4f:13:
                    94:b2:24:ba:ed:a5:f4:b9:8e:36:01:bb:c8:c2:c7:
                    28:01:d3:a3:1d:a8:62:f4:f9:cf:15:87:f7:76:d8:
                    d2:23:b5:96:78:42:4c:1f:33:43:9f:5b:6f:a8:ce:
                    ca:b9:14:65:6d:35:3e:d5:73:e1:2a:30:ad:a3:af:
                    7c:52:fd:5b:b5:ad:7f:10:1c:00:9c:9f:8b:f8:ae:
                    c3:a1:68:8e:75:ec:18:2e:00:6d:a9:d6:42:66:9a:
                    7f:69:7e:ae:33:d1:f1:b4:8a:75:32:c4:99:cd:47:
                    a1:8a:b8:68:c8:29:46:e1:7f:64:91:11:4b:46:20:
                    32:b7:aa:c2:e9:f5:02:1b:91:a4:33:36:ba:a6:52:
                    a1:a4:0a:0a:5f:47:f8:23:04:ac:4c:ed:ff:d3:83:
                    be:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:68:CF:D4:ED:70:0B:C3:CE:5A:12:58:0E:93:70:8B:8D:E3:E9:DC
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666538303a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:fe80::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:ce:1f:9f:5f:58:3f:8c:70:dd:fa:3a:c8:69:b2:95:8f:fa:
         d8:3a:a2:98:b5:00:74:60:14:cc:e7:43:4b:c1:ba:e0:01:4f:
         0c:0a:5d:87:44:95:ac:72:8d:ac:79:1a:34:aa:f1:10:04:f0:
         78:74:5c:5d:5c:a5:98:12:d7:87:eb:a3:48:b6:25:a6:9c:4d:
         32:02:36:13:75:0d:21:ee:0b:5f:71:89:54:0b:39:90:a5:75:
         0d:90:61:dc:16:3d:99:c0:eb:0a:01:c5:b0:1d:87:34:dc:0b:
         de:6e:6d:5a:34:30:eb:fa:42:51:d1:83:a6:1b:2b:73:33:23:
         fc:6d:26:b3:58:81:96:0c:6e:3b:39:a9:64:1d:55:61:60:94:
         c3:f2:f0:1a:f0:6e:8b:cd:45:ff:74:d8:78:99:4d:9b:3a:42:
         2c:ff:e5:42:10:62:75:ac:59:f0:b2:38:cc:5f:47:53:02:ae:
         63:f7:65:2b:ec:9c:0c:ca:24:a9:a5:dd:de:18:1a:a2:1b:bd:
         4b:16:73:7e:35:0a:46:b9:93:49:2b:07:95:4e:e6:3f:cb:43:
         49:99:b6:e9:38:4c:96:4e:e2:7b:d9:aa:af:b0:95:95:75:fb:
         30:56:d8:c0:02:77:af:ce:76:5b:7f:a1:c4:de:50:2f:38:e6:
         38:d4:4c:f2
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUGDeNoP/M+GMrb8e2Y2DdQ51mSs8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA3MDEwMzQwMzBaFw0yNjA2MzAwMzQ1MzBaMDMxMTAvBgNV
BAMTKEM3NjhDRkQ0RUQ3MDBCQzNDRTVBMTI1ODBFOTM3MDhCOERFM0U5REMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDahsbHSx0QEsqW9pj5P5ew4RJT
LseaDpz7pUo6ND6CgSGc712RIP8NeNH2KMK2mW1xaF4sWJDFX92454U0/VJBE+oO
xkopeNuGcahJuSKLHH3ByI5nddYEz/6Ps0pMffQ5aGjIfUxPE5SyJLrtpfS5jjYB
u8jCxygB06MdqGL0+c8Vh/d22NIjtZZ4QkwfM0OfW2+ozsq5FGVtNT7Vc+EqMK2j
r3xS/Vu1rX8QHACcn4v4rsOhaI517BguAG2p1kJmmn9pfq4z0fG0inUyxJnNR6GK
uGjIKUbhf2SREUtGIDK3qsLp9QIbkaQzNrqmUqGkCgpfR/gjBKxM7f/Tg777AgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUx2jP1O1wC8POWhJYDpNwi43j6dwwHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjUzODMwM2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih/6A
MA0GCSqGSIb3DQEBCwUAA4IBAQBwzh+fX1g/jHDd+jrIabKVj/rYOqKYtQB0YBTM
50NLwbrgAU8MCl2HRJWsco2seRo0qvEQBPB4dFxdXKWYEteH66NItiWmnE0yAjYT
dQ0h7gtfcYlUCzmQpXUNkGHcFj2ZwOsKAcWwHYc03Avebm1aNDDr+kJR0YOmGytz
MyP8bSazWIGWDG47OalkHVVhYJTD8vAa8G6LzUX/dNh4mU2bOkIs/+VCEGJ1rFnw
sjjMX0dTAq5j92Ur7JwMyiSppd3eGBqiG71LFnN+NQpGuZNJKweVTuY/y0NJmbbp
OEyWTuJ72aqvsJWVdfswVtjAAnevznZbf6HE3lAvOOY41Ezy
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:31:30 2025 by rpki-client