Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32151873-ec7e-3099-929c-8e5875f9a843.roa
File:                     32151873-ec7e-3099-929c-8e5875f9a843.roa (raw, json)
Hash identifier:          cwqK6sdzyiX8urW0Gy0Hto0coDCk6WmCmq2CmEI6iIs=
Subject key identifier:   E9:E7:14:75:E7:DD:94:96:7F:9D:D4:8C:11:56:6D:FD:87:30:8A:3C
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849107D839FDB1B091852663120
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32151873-ec7e-3099-929c-8e5875f9a843.roa
Signing time:             Mon 03 Mar 2025 10:39:39 +0000
ROA not before:           Mon 03 Mar 2025 10:39:39 +0000
ROA not after:            Sun 01 Jun 2025 09:39:39 +0000
asID:                     30036
IP address blocks:        2604:2e8f:8080::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:7d:83:9f:db:1b:09:18:52:66:31:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar  3 10:39:39 2025 GMT
            Not After : Jun  1 09:39:39 2025 GMT
        Subject: CN=63f8fb41-ee07-4dd6-b448-99ea98b2bd1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9a:bd:c3:6e:90:0a:f2:97:51:30:3c:be:51:
                    4d:fd:37:71:d6:b6:e5:c5:32:c9:84:b0:93:92:e1:
                    cb:83:1d:d8:87:0b:1a:89:39:85:9b:de:22:3e:4a:
                    95:dd:80:92:8c:ee:85:98:d5:cd:96:79:8f:4a:04:
                    5e:45:3a:c2:4a:74:b4:0e:c8:c2:16:08:6a:ca:21:
                    0c:4d:5d:32:a1:ac:0a:a4:81:d5:f9:64:a6:29:6a:
                    80:12:b1:57:df:89:45:e9:db:58:11:20:14:4b:b0:
                    04:bc:76:66:56:25:50:ec:0d:07:6a:df:35:ad:23:
                    25:0f:36:9f:31:f7:5b:11:35:a0:4d:09:7e:d4:47:
                    7a:17:31:01:f6:db:98:8e:d6:3b:5c:fc:77:26:2f:
                    b2:0e:75:e8:23:fa:4d:d6:65:f6:f8:fc:a9:f4:4c:
                    25:5a:78:ab:f9:a7:03:c6:54:e4:15:27:d4:b7:2d:
                    52:36:35:d6:00:19:e5:8a:b6:81:19:80:36:ba:39:
                    11:1d:73:4b:ed:3a:c2:f2:15:9b:df:6b:80:ed:7a:
                    be:9f:49:b5:c0:9f:50:3b:90:fc:5d:91:92:ec:2c:
                    54:67:f0:7f:62:cf:fc:ec:c9:85:2d:20:ff:0f:4a:
                    9a:6a:50:70:84:9f:76:0d:ea:1d:e2:ea:f6:6e:ae:
                    1f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E7:14:75:E7:DD:94:96:7F:9D:D4:8C:11:56:6D:FD:87:30:8A:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/32151873-ec7e-3099-929c-8e5875f9a843.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8f:8080::/41

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:4b:5e:f1:b0:3a:c1:82:06:21:08:82:7f:b2:e6:07:85:3a:
         bd:42:32:f0:b5:a9:d7:32:5a:3d:b8:0d:75:02:40:80:d7:95:
         67:fc:48:41:87:ae:c3:ad:4d:d0:9b:ec:4a:4c:b4:be:4c:8c:
         28:7e:96:50:28:ba:3f:a5:10:1d:84:df:6c:1f:e5:9f:a7:b2:
         0d:7e:8f:8a:35:a4:2b:56:f7:f5:f6:81:45:81:aa:eb:80:e6:
         4e:d6:55:0f:1a:fd:cf:ce:2f:88:9e:f2:6c:bd:a6:34:6d:f0:
         aa:4f:d3:26:1a:ac:63:36:af:87:e2:3c:aa:b2:20:f9:ba:37:
         d8:3d:ef:1c:52:b3:9c:7d:60:94:8b:d9:45:00:e8:66:1c:1c:
         fa:f9:e2:6d:77:8e:15:e5:37:45:0e:83:49:d6:3b:46:a5:bb:
         5e:6a:d9:e8:9e:74:67:9a:9b:2b:ba:f4:b4:ca:ae:b3:88:14:
         ec:97:93:94:3e:11:3f:9b:98:9f:f8:f1:3f:e7:5c:e8:c3:de:
         da:f5:10:eb:13:85:7b:0a:73:d8:d4:70:27:7d:8a:e4:cc:0a:
         dc:5e:e2:cd:09:65:9e:b4:03:8c:f1:ce:b8:a8:a5:92:95:ea:
         18:f5:ab:9e:05:95:78:6e:da:65:d6:81:dd:e4:f5:cf:83:26:
         ca:39:6b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:58:21 2025 by rpki-client