Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/16/323630323a666139343a3a2f34302d3430203d3e203439383637.roa
File:                     323630323a666139343a3a2f34302d3430203d3e203439383637.roa (raw, json)
Hash identifier:          ZtkeZ/TQS6EFg1fIvrywQB0kmS7oXWRBy8bv1AglcNs=
Subject key identifier:   FF:EA:F4:D5:33:B9:C2:08:FC:F6:A8:D7:02:8F:CF:CA:30:FA:A6:D6
Certificate issuer:       /CN=a6201efd4cbc7cfdcb17a21b57bbffeeb6fcfd9a8a69896263
Certificate serial:       441AD7516C661A1F7F5DD7925703990D705A9452
Authority key identifier: 7F:A4:70:DC:7D:C3:A7:2F:3D:77:17:AA:35:B2:EE:0E:67:C9:D2:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4cbc7cfdcb17a21b57bbffeeb6fcfd9a8a69896263.cer
Subject info access:      rsync://rpki.co/repo/HYSP/16/323630323a666139343a3a2f34302d3430203d3e203439383637.roa
Signing time:             Sat 08 Apr 2023 03:25:49 +0000
ROA not before:           Sat 08 Apr 2023 03:20:49 +0000
ROA not after:            Sat 06 Apr 2024 03:25:49 +0000
asID:                     49867
IP address blocks:        2602:fa94::/40 maxlen: 40
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:1a:d7:51:6c:66:1a:1f:7f:5d:d7:92:57:03:99:0d:70:5a:94:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6201efd4cbc7cfdcb17a21b57bbffeeb6fcfd9a8a69896263
        Validity
            Not Before: Apr  8 03:20:49 2023 GMT
            Not After : Apr  6 03:25:49 2024 GMT
        Subject: CN=FFEAF4D533B9C208FCF6A8D7028FCFCA30FAA6D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d4:9b:87:cb:14:61:a2:91:78:70:06:01:8b:
                    79:56:fe:9b:f6:b7:9b:3f:5d:5d:9f:0c:1d:1a:38:
                    c5:33:3f:5c:01:38:ba:c3:2a:e1:04:89:93:d3:3e:
                    15:6d:d1:87:c7:49:6e:2a:7a:18:bc:e7:59:85:a0:
                    82:7f:ee:7f:a5:a2:67:c5:b5:a5:20:51:f8:37:c8:
                    db:fd:81:ae:fe:45:ce:63:94:a5:60:de:89:27:3e:
                    3d:84:2e:90:94:de:87:30:2c:24:ce:8a:83:b7:4d:
                    35:26:f4:ef:9c:90:c2:51:82:df:2e:3d:52:3f:03:
                    6b:7e:7e:51:74:71:0c:f1:39:b8:42:07:c5:32:0c:
                    f5:7f:e3:28:88:4a:ed:e0:27:cc:c7:b5:0b:9f:d9:
                    18:90:06:87:c4:a9:36:6a:7a:83:14:37:66:bc:00:
                    4d:73:a8:ca:56:67:c4:cf:cd:51:12:b5:cd:27:ee:
                    24:c3:a1:bb:bb:74:1a:cc:f8:65:8c:3c:01:c0:7e:
                    41:01:fa:1c:65:f6:71:5d:cb:39:7b:3b:c0:f1:c8:
                    0e:7d:09:bb:0f:a1:78:7c:4a:f7:e1:80:9d:bf:81:
                    6e:ac:76:62:5b:d1:bf:df:a2:03:cd:ad:6a:3b:61:
                    d1:97:63:69:5e:6b:c1:87:dd:24:a6:a2:09:bd:47:
                    66:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:EA:F4:D5:33:B9:C2:08:FC:F6:A8:D7:02:8F:CF:CA:30:FA:A6:D6
            X509v3 Authority Key Identifier:
                keyid:7F:A4:70:DC:7D:C3:A7:2F:3D:77:17:AA:35:B2:EE:0E:67:C9:D2:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/16/7FA470DC7DC3A72F3D7717AA35B2EE0E67C9D224.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46c07e76-66d8-48d7-826a-85de29c66a22/a6201efd4cbc7cfdcb17a21b57bbffeeb6fcfd9a8a69896263.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/16/323630323a666139343a3a2f34302d3430203d3e203439383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa94::/40

    Signature Algorithm: sha256WithRSAEncryption
         12:c2:6b:2c:b2:83:d9:d8:9b:b0:c8:6b:74:3c:8a:25:d7:3d:
         03:1a:c0:3d:56:9e:7a:be:f0:11:00:a3:cc:18:13:42:5d:da:
         68:51:b0:61:2c:c9:14:01:51:e6:7f:4c:c8:cf:e4:1e:83:02:
         70:d6:d9:26:00:3b:2a:5d:ae:64:4a:ee:93:e2:b3:b1:86:d4:
         64:26:83:50:eb:38:d6:53:ee:8f:c8:7d:b1:82:5a:bc:ba:f6:
         87:fd:68:f5:f1:f5:0d:64:85:cb:69:64:d2:39:a0:cc:0a:65:
         4b:49:4b:a9:1e:29:a0:a6:df:4e:da:27:bb:8f:36:00:98:4f:
         68:07:0c:15:38:5b:5e:97:eb:dd:45:a4:36:30:db:6a:78:7f:
         8b:06:71:a7:04:a7:fe:95:c2:1f:8a:d4:3e:ab:3a:a0:82:4f:
         63:8a:5d:00:67:66:cd:05:08:f7:7e:1a:da:de:91:f8:3b:73:
         0c:84:90:b3:4b:42:f1:2b:16:b5:1e:75:18:59:e1:cf:b4:20:
         26:38:a5:63:2b:4a:58:c0:05:13:b8:c7:df:d3:70:cd:03:4b:
         83:8f:02:32:1b:77:85:50:60:b1:ed:42:35:fc:b3:77:be:73:
         3a:95:ca:f8:66:0a:9a:d0:d5:95:ad:8a:e3:1b:fa:84:7d:db:
         1c:7f:de:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:29:14 2025 by rpki-client