Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e398c3ce-05e7-3b48-8472-d35935cf038e.roa
File:                     e398c3ce-05e7-3b48-8472-d35935cf038e.roa (raw, json)
Hash identifier:          fniHTJrQM9E7AGZMcA2gCYLi4Wpc75COLGF2mlZOqj4=
Subject key identifier:   58:FE:DF:6E:82:78:B1:9E:52:66:33:5C:0C:8D:13:FF:CB:E9:A8:9D
Certificate issuer:       /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial:       010D0C9F43285848C5600F6E8B3F809261B01180
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e398c3ce-05e7-3b48-8472-d35935cf038e.roa
Signing time:             Tue 04 Feb 2025 12:54:41 +0000
ROA not before:           Tue 04 Feb 2025 12:54:41 +0000
ROA not after:            Mon 05 May 2025 11:54:41 +0000
asID:                     30036
IP address blocks:        2604:2d80:b780::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:60:0f:6e:8b:3f:80:92:61:b0:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
        Validity
            Not Before: Feb  4 12:54:41 2025 GMT
            Not After : May  5 11:54:41 2025 GMT
        Subject: CN=ac66feda-7f42-46a1-abd7-ba84aaa5ea28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7f:bf:3a:1b:86:52:1f:8e:9f:78:dd:86:ae:
                    79:0b:5d:5d:aa:eb:67:4e:3c:c7:94:2c:2a:f8:45:
                    2b:47:a0:98:87:a4:ef:17:65:cc:c1:f9:e7:1f:2b:
                    e5:1f:89:be:68:42:51:6a:4b:aa:48:a7:7c:6c:a6:
                    60:3f:4e:f7:ad:b3:aa:92:2b:36:a6:61:8d:b5:88:
                    4d:19:e4:b1:41:be:f3:81:71:de:33:ae:77:3a:11:
                    8b:7b:3f:74:09:b0:8e:67:e8:93:7c:fb:ed:24:6a:
                    64:15:a3:7a:b4:78:ad:e3:69:d1:28:e3:27:c4:0f:
                    00:3b:f2:28:46:9d:0d:22:ed:68:30:2f:01:bb:a1:
                    a5:fa:46:7a:bc:c5:b3:bc:a2:4b:8d:58:35:12:48:
                    20:7c:9b:d7:a9:bd:0a:79:a2:dd:1d:51:65:3c:1f:
                    07:94:ba:5e:aa:bf:09:12:55:5a:b5:0b:34:79:b0:
                    cf:ea:7c:a2:60:e2:c9:20:ca:77:ee:99:3b:c5:0f:
                    e4:c0:85:a5:d6:98:85:47:d8:7c:24:97:1d:6a:18:
                    af:02:46:39:40:cf:81:dd:57:0c:66:ac:98:b5:d2:
                    77:af:45:74:78:8c:8c:73:ef:cf:f0:14:53:37:9a:
                    af:07:19:73:e4:5a:fa:d3:a2:77:86:ea:66:ee:cd:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FE:DF:6E:82:78:B1:9E:52:66:33:5C:0C:8D:13:FF:CB:E9:A8:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e398c3ce-05e7-3b48-8472-d35935cf038e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl

            X509v3 Authority Key Identifier:
                keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2d80:b780::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:ce:99:ab:a6:8f:9c:af:6b:7f:5c:c9:b6:ec:46:15:25:08:
         0b:99:50:5c:8b:51:48:de:88:23:fe:a9:99:fa:83:be:83:09:
         1f:86:b6:3b:ad:10:6f:fc:cc:9f:d8:a5:e6:d3:20:04:3a:0c:
         34:d0:4a:72:03:72:25:fe:99:1a:d6:a8:9a:76:bf:1c:c2:7f:
         5e:ff:72:25:3e:21:d0:e9:ae:dc:1b:a1:87:f5:23:24:f1:60:
         3f:f4:dc:f6:01:ad:29:01:10:29:06:46:b8:cc:15:f1:08:97:
         ba:97:d8:d8:9d:52:c5:78:cb:93:ed:b0:de:99:37:bb:03:fc:
         62:c0:4c:d8:ef:9a:e4:2c:87:fd:8c:4e:4f:22:37:db:d2:a0:
         fc:96:ac:c5:7d:b4:a3:5e:26:df:64:e9:42:62:0b:15:a4:15:
         34:c5:0e:92:b9:ae:36:f0:13:3c:30:71:c4:2e:99:2d:ed:ce:
         0a:5e:1c:34:53:ce:33:32:cd:19:bd:44:00:57:43:7d:3e:4e:
         aa:78:0d:03:ac:2b:4c:73:5b:1d:34:65:ff:e3:28:76:bf:af:
         42:ad:55:6d:b1:9a:71:7f:84:e2:78:87:fd:33:6d:2c:54:5e:
         dc:f7:26:e3:e0:bd:f6:86:bb:f5:74:63:77:6d:26:9f:96:92:
         e3:85:0d:33
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEjFYA9uiz+AkmGwEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI1MDIwNDEyNTQ0MVoXDTI1MDUwNTExNTQ0MVowLzEtMCsGA1UEAxMk
YWM2NmZlZGEtN2Y0Mi00NmExLWFiZDctYmE4NGFhYTVlYTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmH+/OhuGUh+On3jdhq55C11dqutnTjzHlCwq
+EUrR6CYh6TvF2XMwfnnHyvlH4m+aEJRakuqSKd8bKZgP073rbOqkis2pmGNtYhN
GeSxQb7zgXHeM653OhGLez90CbCOZ+iTfPvtJGpkFaN6tHit42nRKOMnxA8AO/Io
Rp0NIu1oMC8Bu6Gl+kZ6vMWzvKJLjVg1EkggfJvXqb0KeaLdHVFlPB8HlLpeqr8J
ElVatQs0ebDP6nyiYOLJIMp37pk7xQ/kwIWl1piFR9h8JJcdahivAkY5QM+B3VcM
ZqyYtdJ3r0V0eIyMc+/P8BRTN5qvBxlz5Fr606J3hupm7s2ydQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFj+326CeLGeUmYzXAyNE//L6aidMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTM5OGMzY2UtMDVlNy0z
YjQ4LTg0NzItZDM1OTM1Y2YwMzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLeA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFvOmaumj5yva39cybbsRhUlCAuZUFyLUUjeiCP+qZn6g76DCR+G
tjutEG/8zJ/YpebTIAQ6DDTQSnIDciX+mRrWqJp2vxzCf17/ciU+IdDprtwboYf1
IyTxYD/03PYBrSkBECkGRrjMFfEIl7qX2NidUsV4y5PtsN6ZN7sD/GLATNjvmuQs
h/2MTk8iN9vSoPyWrMV9tKNeJt9k6UJiCxWkFTTFDpK5rjbwEzwwccQumS3tzgpe
HDRTzjMyzRm9RABXQ30+Tqp4DQOsK0xzWx00Zf/jKHa/r0KtVW2xmnF/hOJ4h/0z
bSxUXtz3JuPgvfaGu/V0Y3dtJp+WkuOFDTM=
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:16 2025 by rpki-client