Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13729c5f-274c-34cc-a76f-119e8bfd7d29.roa
File:                     13729c5f-274c-34cc-a76f-119e8bfd7d29.roa (raw, json)
Hash identifier:          BINjZDRK1vAAviI/YpNLpwhW8QtZskqs7GJQFW/jGFA=
Subject key identifier:   8D:DD:94:12:37:9B:3C:8F:8D:0D:33:5C:2C:4A:51:4A:E1:D5:7D:8D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C577AF2D586CD3BA87C0B0C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13729c5f-274c-34cc-a76f-119e8bfd7d29.roa
Signing time:             Tue 04 Feb 2025 13:42:17 +0000
ROA not before:           Tue 04 Feb 2025 13:42:17 +0000
ROA not after:            Mon 05 May 2025 12:42:17 +0000
asID:                     30036
IP address blocks:        2604:2e89:2c00::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:77:af:2d:58:6c:d3:ba:87:c0:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  4 13:42:17 2025 GMT
            Not After : May  5 12:42:17 2025 GMT
        Subject: CN=021d9cf5-1b38-4db3-9dd4-7962037e0422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:24:2e:44:47:fa:50:58:7d:0f:5c:dd:db:e2:
                    10:c8:85:e9:f3:9c:da:e5:4d:15:f6:fe:f7:87:6e:
                    c7:c4:d6:53:a7:cf:26:08:49:60:ad:1d:0f:5d:fa:
                    1e:19:fd:f7:07:7e:19:de:af:1c:41:9a:fc:5b:a1:
                    82:e2:8d:e2:5d:95:a1:91:87:99:82:19:99:e8:63:
                    f1:81:db:f9:60:24:f2:39:03:b1:a6:10:3c:cc:9f:
                    58:de:d6:13:fb:72:e2:65:5c:f2:0c:ee:8c:14:44:
                    1a:5c:83:6c:1b:d5:8f:46:2b:52:02:6f:3e:24:e9:
                    26:3a:9e:81:c3:33:61:c0:7b:54:85:e7:18:bd:48:
                    10:7b:af:2a:2c:1a:44:12:98:49:ad:1e:6a:8f:ad:
                    b5:79:84:c0:87:ee:d1:fa:e6:9e:75:33:74:f7:ad:
                    e9:04:01:af:aa:3a:6a:b7:30:f5:18:5e:60:be:33:
                    39:df:74:c3:f5:42:13:40:83:a2:4a:22:af:99:f9:
                    d1:a5:66:9d:28:9a:43:e8:1d:dc:d0:79:60:c1:98:
                    cc:c7:57:2b:c2:37:53:6e:f0:73:c8:9b:a5:9d:e2:
                    4d:11:ca:fd:30:7d:65:dc:94:4d:f1:99:67:51:bd:
                    7e:7c:2c:a7:e5:44:93:03:c9:a7:60:ee:52:59:e4:
                    59:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:DD:94:12:37:9B:3C:8F:8D:0D:33:5C:2C:4A:51:4A:E1:D5:7D:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/13729c5f-274c-34cc-a76f-119e8bfd7d29.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:2c00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:5f:48:09:3f:15:3c:08:55:2c:65:04:d5:ea:c9:7a:af:ae:
         10:66:4a:cd:19:ec:b7:d4:61:68:6a:8c:7d:e9:5b:cb:19:87:
         61:6b:25:63:c0:47:57:30:39:be:b6:f5:9c:c4:54:f5:ce:a7:
         32:76:a5:a8:17:84:30:ea:40:38:57:b5:a7:57:fa:0a:c4:87:
         57:b9:9c:c7:ca:ea:76:7c:a4:c8:3a:d6:bb:b1:51:e6:c0:11:
         7b:55:b1:0b:18:2f:e6:a9:24:87:81:38:40:2d:b5:55:a2:31:
         9c:9b:b9:3e:01:36:57:a9:47:b1:8e:f0:3a:6b:e1:10:a0:71:
         69:9e:37:e7:1f:53:a2:52:2e:3b:b9:f9:2e:ec:6e:c4:62:52:
         c6:12:23:ee:18:f9:cc:9d:79:78:14:49:3e:ea:04:0c:37:b5:
         90:11:ef:5a:16:88:86:2c:7e:3c:3f:b8:ae:75:86:c4:7a:bd:
         d7:5e:1e:18:d2:43:dd:cd:e8:5e:33:ac:97:a5:8c:39:89:4a:
         2c:8b:db:1d:8d:d1:b3:03:02:d7:a4:2a:0d:54:87:a4:3c:ae:
         f0:5b:6f:51:b0:59:fb:9c:13:64:18:5f:5e:ec:4a:95:61:43:
         3c:71:88:1d:68:9a:a1:56:bc:14:7e:7b:77:37:0f:de:4e:42:
         65:60:e0:b5
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFd68tWGzTuofAsMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwNDEzNDIxN1oXDTI1MDUwNTEyNDIxN1owLzEtMCsGA1UEAxMk
MDIxZDljZjUtMWIzOC00ZGIzLTlkZDQtNzk2MjAzN2UwNDIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSQuREf6UFh9D1zd2+IQyIXp85za5U0V9v73
h27HxNZTp88mCElgrR0PXfoeGf33B34Z3q8cQZr8W6GC4o3iXZWhkYeZghmZ6GPx
gdv5YCTyOQOxphA8zJ9Y3tYT+3LiZVzyDO6MFEQaXINsG9WPRitSAm8+JOkmOp6B
wzNhwHtUhecYvUgQe68qLBpEEphJrR5qj621eYTAh+7R+uaedTN0963pBAGvqjpq
tzD1GF5gvjM533TD9UITQIOiSiKvmfnRpWadKJpD6B3c0HlgwZjMx1crwjdTbvBz
yJulneJNEcr9MH1l3JRN8ZlnUb1+fCyn5USTA8mnYO5SWeRZ6QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFI3dlBI3mzyPjQ0zXCxKUUrh1X2NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMTM3MjljNWYtMjc0Yy0z
NGNjLWE3NmYtMTE5ZThiZmQ3ZDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuiSww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAml9ICT8VPAhVLGUE1erJeq+uEGZKzRnst9RhaGqMfelbyxmHYWsl
Y8BHVzA5vrb1nMRU9c6nMnalqBeEMOpAOFe1p1f6CsSHV7mcx8rqdnykyDrWu7FR
5sARe1WxCxgv5qkkh4E4QC21VaIxnJu5PgE2V6lHsY7wOmvhEKBxaZ435x9TolIu
O7n5LuxuxGJSxhIj7hj5zJ15eBRJPuoEDDe1kBHvWhaIhix+PD+4rnWGxHq9114e
GNJD3c3oXjOsl6WMOYlKLIvbHY3RswMC16QqDVSHpDyu8FtvUbBZ+5wTZBhfXuxK
lWFDPHGIHWiaoVa8FH57dzcP3k5CZWDgtQ==
-----END CERTIFICATE-----
Generated at Tue Apr 8 23:51:22 2025 by rpki-client