Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/27e74db9-fad1-32b9-a128-6442d2a47c5f.roa
File:                     27e74db9-fad1-32b9-a128-6442d2a47c5f.roa (raw, json)
Hash identifier:          lltV89P8S7DSuo72FmnHNiojokSFtiks9aRfPmHx8Aw=
Subject key identifier:   80:F2:69:8F:0D:92:BE:2A:65:DF:ED:65:70:34:69:48:E7:2F:04:82
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C578670C8D4F2AB7800FCE80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/27e74db9-fad1-32b9-a128-6442d2a47c5f.roa
Signing time:             Tue 04 Feb 2025 13:43:44 +0000
ROA not before:           Tue 04 Feb 2025 13:43:44 +0000
ROA not after:            Mon 05 May 2025 12:43:44 +0000
asID:                     30036
IP address blocks:        2604:2e8f:8280::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:78:67:0c:8d:4f:2a:b7:80:0f:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  4 13:43:44 2025 GMT
            Not After : May  5 12:43:44 2025 GMT
        Subject: CN=b7d1ba8e-cbc5-475d-8885-e6633883aa8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6a:54:5c:e4:a4:71:88:54:ae:ab:11:0c:25:
                    42:13:1a:48:2e:71:14:c6:81:bd:b0:22:87:c8:1e:
                    ac:3d:ee:81:aa:ea:01:84:88:73:f8:8e:a7:81:21:
                    ce:2d:b4:90:6e:42:1d:bd:c8:d1:09:49:0b:0a:d0:
                    c3:c8:f0:7e:f3:52:be:94:0e:bd:60:e7:02:09:4f:
                    bf:15:45:15:c2:70:58:c2:c6:d2:59:85:07:17:28:
                    ac:92:85:9c:82:0f:e1:74:c6:e1:0a:5f:c5:9e:20:
                    03:82:af:3e:22:1f:b4:30:5e:79:e3:97:9f:c5:53:
                    4c:fd:81:83:56:a0:91:92:27:cf:d1:01:86:ca:2b:
                    3d:34:9a:d0:01:08:60:47:c5:23:c7:e8:be:1d:80:
                    40:6d:bb:68:4b:7c:86:dc:5c:36:da:49:62:e3:09:
                    ed:32:9d:51:c6:82:9c:ba:2b:53:4e:31:b1:66:83:
                    de:a3:46:95:86:25:3e:40:5b:b9:bc:a3:4f:fb:07:
                    e9:b3:ac:7f:40:d4:95:d6:f0:df:68:6b:1c:7b:00:
                    00:4e:c4:70:25:b9:94:0a:e4:72:b6:23:3d:b9:a7:
                    77:12:f5:e3:c0:b3:73:70:86:05:fa:2b:87:dc:8b:
                    b6:ef:64:ca:36:8c:85:c7:7c:13:5b:ba:5c:cc:76:
                    5c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F2:69:8F:0D:92:BE:2A:65:DF:ED:65:70:34:69:48:E7:2F:04:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/27e74db9-fad1-32b9-a128-6442d2a47c5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:8280::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:f6:0a:f2:ef:5d:84:49:b9:c8:9b:cc:d0:19:81:e4:e3:29:
         e8:03:40:30:f5:35:ca:a8:b3:a8:81:af:51:a6:2c:be:aa:88:
         f9:1c:88:ca:f1:17:1a:c1:cc:47:ba:3c:5b:32:11:f3:5b:31:
         54:6b:c7:c3:b8:84:e4:14:7d:a8:50:6f:e6:df:2d:30:aa:ce:
         12:b6:ae:b3:86:e6:57:06:45:67:57:43:74:65:57:2f:f5:80:
         e3:a2:53:d7:1c:91:25:0a:e6:ca:f3:32:14:9d:14:25:3b:28:
         64:e8:c7:cd:14:2c:35:1e:70:c0:16:69:b1:30:83:13:c4:ba:
         95:95:03:3f:eb:85:ee:96:28:49:3a:8c:70:ee:1f:55:0a:da:
         07:b5:b3:fd:ce:2c:ab:d8:33:16:d5:b4:fc:41:a1:6c:4a:3b:
         06:b1:4b:ed:84:43:4c:cd:8e:1f:d9:1c:e8:7e:87:26:22:ae:
         a1:f7:9d:cb:f1:48:7e:51:ea:5f:2f:b3:85:38:31:de:dc:60:
         e7:7d:d8:bb:4e:2f:4b:9e:52:d1:bb:37:2b:67:50:10:1f:29:
         97:cd:ab:c4:f9:39:a7:ee:5c:69:95:f1:da:da:67:04:6c:13:
         c7:aa:1d:1f:4d:f9:f1:6b:3e:2b:9c:30:bd:ed:6c:12:70:3e:
         a6:fd:c6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:58:46 2025 by rpki-client