Route Origin Authorization

$ rpki-client -vvf rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a313a3a2f34382d313238203d3e20323035383438.roa
File:                     326130363a313238323a313a3a2f34382d313238203d3e20323035383438.roa (raw, json)
Hash identifier:          MvcD959CSUWqr1epGjwHesOrjV2yPE+hJB5qXAgi80I=
Subject key identifier:   36:B6:01:D2:20:E3:9D:43:13:43:B0:B9:B9:FD:A9:83:6F:F8:C6:C6
Certificate issuer:       /CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
Certificate serial:       026642905CE4551EB4E3B054CFE0281446F31B6F
Authority key identifier: 3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
Subject info access:      rsync://rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a313a3a2f34382d313238203d3e20323035383438.roa
Signing time:             Mon 03 Feb 2025 13:49:58 +0000
ROA not before:           Mon 03 Feb 2025 13:44:58 +0000
ROA not after:            Mon 02 Feb 2026 13:49:58 +0000
asID:                     205848
IP address blocks:        2a06:1282:1::/48 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:66:42:90:5c:e4:55:1e:b4:e3:b0:54:cf:e0:28:14:46:f3:1b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
        Validity
            Not Before: Feb  3 13:44:58 2025 GMT
            Not After : Feb  2 13:49:58 2026 GMT
        Subject: CN=36B601D220E39D431343B0B9B9FDA9836FF8C6C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7c:18:43:cb:ea:7a:99:28:92:e6:6d:45:50:
                    38:f1:fd:b5:af:16:0b:cb:9a:c5:fa:9b:3b:9e:aa:
                    c3:7e:98:22:23:48:fa:fe:27:34:47:70:05:33:60:
                    2c:17:bd:57:de:06:a4:c9:43:95:de:77:aa:6f:ac:
                    6e:1f:8e:8d:3c:48:e4:a2:15:26:2d:37:c3:e2:f3:
                    09:fc:04:3d:a2:1e:da:31:d3:e0:59:dc:b0:39:23:
                    5f:50:45:c8:37:7e:eb:e3:94:10:2e:78:31:86:0b:
                    d6:6f:4b:45:af:16:0f:b8:ea:af:2e:67:77:b0:15:
                    88:77:72:20:0b:56:f7:45:2a:8f:95:45:4b:ac:53:
                    fd:7c:c5:8d:32:e0:d3:00:e1:24:e5:85:96:5c:25:
                    73:f0:60:26:84:87:e4:a5:07:49:c0:9c:8e:72:ad:
                    93:ae:89:23:f2:82:f6:13:c3:7f:ac:da:70:86:84:
                    ef:67:7b:62:85:35:92:d6:7c:80:ff:8f:4a:4c:40:
                    61:9f:e4:2f:85:59:74:4e:7c:51:6c:26:50:6f:29:
                    95:27:88:b5:c6:19:71:e9:fa:6b:f3:6b:f9:15:09:
                    b6:c4:e8:b4:9a:bd:e2:94:18:b5:ca:ad:72:fd:a6:
                    0c:86:33:94:63:8b:29:2f:30:57:09:e1:6a:6b:5c:
                    c5:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B6:01:D2:20:E3:9D:43:13:43:B0:B9:B9:FD:A9:83:6F:F8:C6:C6
            X509v3 Authority Key Identifier:
                keyid:3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/326130363a313238323a313a3a2f34382d313238203d3e20323035383438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a06:1282:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         2d:f7:f5:c0:fd:0d:c5:70:6c:83:8a:41:6c:3a:5e:43:e2:f5:
         ae:80:67:08:e0:3e:06:5e:7d:28:1c:50:e5:6e:9a:18:75:1a:
         1c:42:f8:28:78:65:54:05:e1:b0:46:a2:99:57:db:09:d4:5b:
         11:f8:cf:7e:5b:2c:e0:4a:68:be:62:92:72:70:2f:24:2b:d3:
         1b:39:af:4a:c8:4d:64:5f:5d:20:24:ce:44:88:e8:45:68:05:
         d7:bb:a9:49:a4:87:31:ad:a4:20:7d:09:7b:af:df:34:ac:d4:
         c2:64:ae:bd:07:f1:a4:9a:20:6c:ec:3f:cd:1e:43:d0:f5:e1:
         4c:3e:3d:a7:2a:b9:da:b7:de:bf:31:cd:d3:7c:2d:d0:15:0c:
         cb:ed:13:54:11:2a:68:4b:9c:bf:c5:de:46:4e:65:58:90:f4:
         50:1a:c5:9f:e7:0a:46:18:cb:8e:98:09:93:0d:e2:fc:69:ef:
         ee:1f:1f:49:76:ab:8b:06:b9:7b:64:90:dc:44:fd:21:bd:b6:
         d0:0e:3b:6b:bc:45:78:99:ed:44:09:45:b3:47:1f:7e:ca:4b:
         07:46:62:eb:a0:48:0c:59:f2:dc:11:23:90:1f:65:78:9d:c8:
         51:18:0f:5d:49:7c:06:11:f5:04:0b:70:1d:e0:4f:2a:0e:41:
         7b:2e:e6:a7
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUAmZCkFzkVR6047BUz+AoFEbzG28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0IzRTFCRENFRDhDQjg5NTk3RkU5MkVBRjc1QkUyREY5
OEFGODRBNzAeFw0yNTAyMDMxMzQ0NThaFw0yNjAyMDIxMzQ5NThaMDMxMTAvBgNV
BAMTKDM2QjYwMUQyMjBFMzlENDMxMzQzQjBCOUI5RkRBOTgzNkZGOEM2QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrfBhDy+p6mSiS5m1FUDjx/bWv
FgvLmsX6mzueqsN+mCIjSPr+JzRHcAUzYCwXvVfeBqTJQ5Xed6pvrG4fjo08SOSi
FSYtN8Pi8wn8BD2iHtox0+BZ3LA5I19QRcg3fuvjlBAueDGGC9ZvS0WvFg+46q8u
Z3ewFYh3ciALVvdFKo+VRUusU/18xY0y4NMA4STlhZZcJXPwYCaEh+SlB0nAnI5y
rZOuiSPygvYTw3+s2nCGhO9ne2KFNZLWfID/j0pMQGGf5C+FWXROfFFsJlBvKZUn
iLXGGXHp+mvza/kVCbbE6LSaveKUGLXKrXL9pgyGM5RjiykvMFcJ4WprXMVHAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUNrYB0iDjnUMTQ7C5uf2pg2/4xsYwHwYDVR0j
BBgwFoAUOz4b3O2MuJWX/pLq91vi35ivhKcwDgYDVR0PAQH/BAQDAgeAMGEGA1Ud
HwRaMFgwVqBUoFKGUHJzeW5jOi8vcnBraS5zbi1wLmlvL3JlcG8vc24tcC1pby8w
LzNCM0UxQkRDRUQ4Q0I4OTU5N0ZFOTJFQUY3NUJFMkRGOThBRjg0QTcuY3JsMIGT
BggrBgEFBQcBAQSBhjCBgzCBgAYIKwYBBQUHMAKGdHJzeW5jOi8vcnBraS1ycHMu
YXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1NWM5MWJl
M2Y5ZC8yLzNCM0UxQkRDRUQ4Q0I4OTU5N0ZFOTJFQUY3NUJFMkRGOThBRjg0QTcu
Y2VyMIGABggrBgEFBQcBCwR0MHIwcAYIKwYBBQUHMAuGZHJzeW5jOi8vcnBraS5z
bi1wLmlvL3JlcG8vc24tcC1pby8wLzMyNjEzMDM2M2EzMTMyMzgzMjNhMzEzYTNh
MmYzNDM4MmQzMTMyMzgyMDNkM2UyMDMyMzAzNTM4MzQzOC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoG
EoIAATANBgkqhkiG9w0BAQsFAAOCAQEALff1wP0NxXBsg4pBbDpeQ+L1roBnCOA+
Bl59KBxQ5W6aGHUaHEL4KHhlVAXhsEaimVfbCdRbEfjPflss4EpovmKScnAvJCvT
GzmvSshNZF9dICTORIjoRWgF17upSaSHMa2kIH0Je6/fNKzUwmSuvQfxpJogbOw/
zR5D0PXhTD49pyq52rfevzHN03wt0BUMy+0TVBEqaEucv8XeRk5lWJD0UBrFn+cK
RhjLjpgJkw3i/Gnv7h8fSXariwa5e2SQ3ET9Ib220A47a7xFeJntRAlFs0cffspL
B0Zi66BIDFny3BEjkB9leJ3IURgPXUl8BhH1BAtwHeBPKg5Bey7mpw==
-----END CERTIFICATE-----
Generated at Thu Apr 3 07:11:04 2025 by rpki-client