Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666664663a3a2f34382d3438203d3e20333936393638.roa
File:                     326130663a363238373a666664663a3a2f34382d3438203d3e20333936393638.roa (raw, json)
Hash identifier:          Vabf6wOJVvk1H3Ef1KjHLslHxmP8wJ7w5WVP/1LWI6I=
Subject key identifier:   BF:22:E5:4B:85:06:57:6E:55:48:62:10:D0:7D:47:51:62:31:A0:EF
Certificate issuer:       /CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
Certificate serial:       637031C8BD7C71D8C127A53A2CDF10952C8D25D5
Authority key identifier: 42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666664663a3a2f34382d3438203d3e20333936393638.roa
Signing time:             Tue 01 Jul 2025 03:45:30 +0000
ROA not before:           Tue 01 Jul 2025 03:40:30 +0000
ROA not after:            Tue 30 Jun 2026 03:45:30 +0000
asID:                     396968
IP address blocks:        2a0f:6287:ffdf::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:70:31:c8:bd:7c:71:d8:c1:27:a5:3a:2c:df:10:95:2c:8d:25:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4201C54F92E6552E47AA575ACEED2AF0EE29A8E7
        Validity
            Not Before: Jul  1 03:40:30 2025 GMT
            Not After : Jun 30 03:45:30 2026 GMT
        Subject: CN=BF22E54B8506576E55486210D07D47516231A0EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c6:f6:e8:47:48:c1:3e:8c:3e:ba:85:6c:ed:
                    91:0b:1e:db:93:11:b6:e8:8e:43:a0:04:1e:5b:8a:
                    ec:4a:bf:05:57:c9:d1:4a:83:83:83:5f:58:12:3e:
                    3e:ae:13:5e:fe:24:84:0d:2a:b4:2d:61:77:07:e7:
                    fc:f2:0f:f0:31:77:a7:c1:55:5e:7f:ff:a6:8e:2f:
                    ca:55:6a:50:c9:5d:fb:de:18:63:ae:45:b7:f2:03:
                    98:21:8e:a9:35:40:17:e6:8f:8a:d0:3f:80:8d:56:
                    89:04:26:ae:fe:a3:06:07:e0:e9:9f:88:f2:98:30:
                    79:71:72:e5:94:f7:4d:21:89:b0:1a:a6:ab:be:f6:
                    db:1f:40:12:27:84:3b:b7:14:f8:f9:dd:55:d3:77:
                    74:fd:d6:d9:ee:96:df:f6:e5:9e:8b:97:5c:79:5f:
                    f0:2a:bb:b7:50:25:53:5b:28:16:a1:7c:23:36:65:
                    cd:44:1c:84:95:05:ca:42:f8:46:b4:8e:10:e8:68:
                    c3:08:45:f7:44:ff:4c:48:b6:07:d0:43:c1:72:cb:
                    19:aa:d0:b2:58:eb:a5:f8:73:bb:8b:31:70:ff:2a:
                    b3:5f:d3:74:75:12:58:f3:b6:38:9f:99:9b:8e:5f:
                    c4:92:12:f6:ac:7b:bb:0d:fe:2a:35:3b:e6:18:8e:
                    7a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:22:E5:4B:85:06:57:6E:55:48:62:10:D0:7D:47:51:62:31:A0:EF
            X509v3 Authority Key Identifier:
                keyid:42:01:C5:4F:92:E6:55:2E:47:AA:57:5A:CE:ED:2A:F0:EE:29:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/f7948738-3255-49f9-9b6c-9c9f3898995d/3/4201C54F92E6552E47AA575ACEED2AF0EE29A8E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/2/326130663a363238373a666664663a3a2f34382d3438203d3e20333936393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:6287:ffdf::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:52:bd:fd:e8:8c:7c:55:3e:81:58:db:ca:ed:c7:0e:fe:b4:
         79:36:1c:8c:31:1e:28:c0:41:1b:4b:3c:48:6d:76:51:d4:72:
         e8:b9:51:b5:d6:5f:6e:d4:2a:00:d6:67:16:fb:a9:6d:b6:66:
         ae:71:a3:a5:31:3d:57:f2:59:ae:b9:d8:c3:14:c6:b9:ea:46:
         91:f4:de:d2:aa:18:ef:57:d0:aa:a3:91:3e:df:03:eb:d5:31:
         25:72:f0:dc:ca:9e:6f:c5:b4:fe:bb:70:db:c1:55:ad:d7:bb:
         85:99:30:bd:6c:dc:bd:44:f5:dc:22:b2:10:ca:d0:82:9c:e9:
         1d:45:4d:4d:1f:95:e1:7b:0f:45:8e:9a:29:65:86:e3:99:1c:
         aa:9d:a3:db:78:9a:84:7c:46:b4:93:db:11:bc:7e:4f:fd:ac:
         03:19:f8:96:aa:18:34:34:5f:d7:20:52:98:c2:76:1e:8b:71:
         2d:8c:ca:20:ae:cf:6d:5b:74:a6:8c:a0:ab:96:ff:88:3a:ed:
         db:eb:66:a3:f7:60:b6:69:fc:5a:0e:a8:fd:7a:16:75:23:51:
         36:0f:3a:5a:02:6e:be:ff:a5:b3:d0:20:88:29:6a:6b:0d:e1:
         81:c4:98:2f:36:91:f5:42:c9:dd:62:7a:18:db:35:b5:e1:91:
         91:b8:6d:9a
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUY3AxyL18cdjBJ6U6LN8QlSyNJdUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDIwMUM1NEY5MkU2NTUyRTQ3QUE1NzVBQ0VFRDJBRjBF
RTI5QThFNzAeFw0yNTA3MDEwMzQwMzBaFw0yNjA2MzAwMzQ1MzBaMDMxMTAvBgNV
BAMTKEJGMjJFNTRCODUwNjU3NkU1NTQ4NjIxMEQwN0Q0NzUxNjIzMUEwRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsxvboR0jBPow+uoVs7ZELHtuT
EbbojkOgBB5biuxKvwVXydFKg4ODX1gSPj6uE17+JIQNKrQtYXcH5/zyD/Axd6fB
VV5//6aOL8pValDJXfveGGOuRbfyA5ghjqk1QBfmj4rQP4CNVokEJq7+owYH4Omf
iPKYMHlxcuWU900hibAapqu+9tsfQBInhDu3FPj53VXTd3T91tnult/25Z6Ll1x5
X/Aqu7dQJVNbKBahfCM2Zc1EHISVBcpC+Ea0jhDoaMMIRfdE/0xItgfQQ8Fyyxmq
0LJY66X4c7uLMXD/KrNf03R1EljztjifmZuOX8SSEvase7sN/io1O+YYjnrrAgMB
AAGjggJqMIICZjAdBgNVHQ4EFgQUvyLlS4UGV25VSGIQ0H1HUWIxoO8wHwYDVR0j
BBgwFoAUQgHFT5LmVS5Hqldazu0q8O4pqOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNkZjQ1YTBlYTY2ODcvMi80MjAxQzU0Rjky
RTY1NTJFNDdBQTU3NUFDRUVEMkFGMEVFMjlBOEU3LmNybDCBngYIKwYBBQUHAQEE
gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L2Y3OTQ4NzM4LTMyNTUtNDlmOS05YjZjLTljOWYzODk4
OTk1ZC8zLzQyMDFDNTRGOTJFNjU1MkU0N0FBNTc1QUNFRUQyQUYwRUUyOUE4RTcu
Y2VyMIGsBggrBgEFBQcBCwSBnzCBnDCBmQYIKwYBBQUHMAuGgYxyc3luYzovL3Jw
a2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MmVlNGQ4NDAxOTNk
ZjQ1YTBlYTY2ODcvMi8zMjYxMzA2NjNhMzYzMjM4MzczYTY2NjY2NDY2M2EzYTJm
MzQzODJkMzQzODIwM2QzZTIwMzMzOTM2MzkzNjM4LnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg9ih//f
MA0GCSqGSIb3DQEBCwUAA4IBAQBWUr396Ix8VT6BWNvK7ccO/rR5NhyMMR4owEEb
SzxIbXZR1HLouVG11l9u1CoA1mcW+6lttmaucaOlMT1X8lmuudjDFMa56kaR9N7S
qhjvV9Cqo5E+3wPr1TElcvDcyp5vxbT+u3DbwVWt17uFmTC9bNy9RPXcIrIQytCC
nOkdRU1NH5Xhew9FjpopZYbjmRyqnaPbeJqEfEa0k9sRvH5P/awDGfiWqhg0NF/X
IFKYwnYei3EtjMogrs9tW3SmjKCrlv+IOu3b62aj92C2afxaDqj9ehZ1I1E2Dzpa
Am6+/6Wz0CCIKWprDeGBxJgvNpH1QsndYnoY2zW14ZGRuG2a
-----END CERTIFICATE-----
Generated at Fri Jul 4 14:53:49 2025 by rpki-client