Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4419fb65-2457-3093-8790-33acd058af32.roa
File:                     4419fb65-2457-3093-8790-33acd058af32.roa (raw, json)
Hash identifier:          L22hR8ZIH0MY0dkSH4EDNTATVPPmg87aFbKLPYY1tzM=
Subject key identifier:   5B:B7:DA:3C:9C:67:FD:83:65:F7:CC:D9:EF:1C:BB:FB:12:78:87:7A
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C53445406035584DF5920480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4419fb65-2457-3093-8790-33acd058af32.roa
Signing time:             Tue 04 Feb 2025 11:26:27 +0000
ROA not before:           Tue 04 Feb 2025 11:26:27 +0000
ROA not after:            Mon 05 May 2025 10:26:27 +0000
asID:                     30036
IP address blocks:        2604:2e8a:bc00::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:34:45:40:60:35:58:4d:f5:92:04:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  4 11:26:27 2025 GMT
            Not After : May  5 10:26:27 2025 GMT
        Subject: CN=82fe251e-bc02-4e2f-b932-f20f4ea32ed6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:9c:9b:a6:d8:17:d0:3e:99:8f:ad:11:9e:c1:
                    c5:0b:79:00:10:8d:00:14:c4:29:40:07:27:36:0b:
                    12:41:03:a2:03:81:8d:80:74:c3:56:93:44:7c:42:
                    0a:a9:81:a7:78:1b:03:1f:7e:70:26:7a:79:d6:da:
                    df:53:5e:dc:92:57:07:d7:12:a8:a7:15:45:db:f9:
                    d4:81:d9:81:4d:ec:61:4d:90:0f:33:44:d4:22:9e:
                    e1:69:e3:bd:41:3e:f4:60:99:9e:a4:0c:55:38:f3:
                    eb:8e:b7:ce:f7:17:e1:94:70:80:05:56:1d:85:d0:
                    49:f8:c9:8f:91:39:12:00:8e:d9:ab:d6:df:92:2b:
                    ba:28:25:ff:7f:77:9f:ec:a7:6e:c5:6d:d8:e4:37:
                    5f:42:b0:c4:8a:8b:23:1c:a0:df:0f:89:0d:f4:90:
                    6a:43:7f:4c:de:60:b6:81:3d:1f:b7:6c:e4:5d:f7:
                    96:54:3c:db:99:2a:e0:67:3f:b0:3d:15:96:c0:d5:
                    2b:77:db:2a:02:d4:e0:dc:62:04:41:72:6e:92:35:
                    25:00:72:28:9c:88:6b:30:99:8c:85:ca:e3:17:af:
                    ce:7f:95:3d:88:85:42:50:76:55:4e:33:b7:7f:d1:
                    66:77:ce:7e:7e:30:b3:91:4e:65:a9:f0:d5:99:dd:
                    25:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B7:DA:3C:9C:67:FD:83:65:F7:CC:D9:EF:1C:BB:FB:12:78:87:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/4419fb65-2457-3093-8790-33acd058af32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:bc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:0f:d1:6b:af:62:c2:ca:9e:19:f2:15:dd:67:50:1b:d1:3c:
         11:b2:3d:26:46:34:bf:e9:67:c9:97:09:1a:c5:0a:ff:b3:ba:
         8d:d2:49:f7:61:47:3f:ed:f9:fb:7f:97:b7:1e:f7:4b:9c:77:
         fa:a8:56:02:16:e7:59:22:fe:5b:a1:ed:2d:4c:70:89:67:5f:
         04:c2:30:82:4d:eb:8e:dc:d2:3f:03:0d:24:8c:72:7f:a5:96:
         18:11:43:69:56:1a:83:85:5f:57:ac:55:53:b9:db:1b:ae:60:
         9b:93:7a:52:56:9c:9d:99:ba:33:14:fd:3f:e0:0f:4f:bb:e8:
         e3:ac:92:52:c6:ec:1f:74:21:26:10:74:86:c6:1b:3d:8d:0c:
         fe:e6:84:0a:d9:2f:1d:eb:a6:f9:80:3f:db:a3:04:83:e2:71:
         ec:aa:f0:a8:3b:26:0e:67:1c:72:55:33:0f:55:5a:80:ea:7e:
         28:f1:3f:2e:19:d2:6f:ee:e9:7d:70:0b:12:43:bc:6e:68:c6:
         fe:d3:a9:52:7d:65:47:a4:e0:01:93:51:2c:08:9c:bc:7b:02:
         51:4a:2d:d2:e5:80:ee:ff:5e:05:ed:43:03:21:48:03:e9:55:
         11:87:4f:f9:e6:b2:ec:2f:80:5e:a9:1d:26:7d:4e:c6:d5:6b:
         4b:a2:b8:b2
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjFNEVAYDVYTfWSBIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwNDExMjYyN1oXDTI1MDUwNTEwMjYyN1owLzEtMCsGA1UEAxMk
ODJmZTI1MWUtYmMwMi00ZTJmLWI5MzItZjIwZjRlYTMyZWQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZybptgX0D6Zj60RnsHFC3kAEI0AFMQpQAcn
NgsSQQOiA4GNgHTDVpNEfEIKqYGneBsDH35wJnp51trfU17cklcH1xKopxVF2/nU
gdmBTexhTZAPM0TUIp7haeO9QT70YJmepAxVOPPrjrfO9xfhlHCABVYdhdBJ+MmP
kTkSAI7Zq9bfkiu6KCX/f3ef7KduxW3Y5DdfQrDEiosjHKDfD4kN9JBqQ39M3mC2
gT0ft2zkXfeWVDzbmSrgZz+wPRWWwNUrd9sqAtTg3GIEQXJukjUlAHIonIhrMJmM
hcrjF6/Of5U9iIVCUHZVTjO3f9Fmd85+fjCzkU5lqfDVmd0lPQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFu32jycZ/2DZffM2e8cu/sSeId6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNDQxOWZiNjUtMjQ1Ny0z
MDkzLTg3OTAtMzNhY2QwNThhZjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuirww
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAoA/Ra69iwsqeGfIV3WdQG9E8EbI9JkY0v+lnyZcJGsUK/7O6jdJJ
92FHP+35+3+Xtx73S5x3+qhWAhbnWSL+W6HtLUxwiWdfBMIwgk3rjtzSPwMNJIxy
f6WWGBFDaVYag4VfV6xVU7nbG65gm5N6UlacnZm6MxT9P+APT7vo46ySUsbsH3Qh
JhB0hsYbPY0M/uaECtkvHeum+YA/26MEg+Jx7KrwqDsmDmccclUzD1VagOp+KPE/
LhnSb+7pfXALEkO8bmjG/tOpUn1lR6TgAZNRLAicvHsCUUot0uWA7v9eBe1DAyFI
A+lVEYdP+eay7C+AXqkdJn1OxtVrS6K4sg==
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:31:01 2025 by rpki-client