Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5e008c88-4df5-3bc9-99d8-14d10be04198.roa
File:                     5e008c88-4df5-3bc9-99d8-14d10be04198.roa (raw, json)
Hash identifier:          VEumv+2UOaQh4uBFEfHzyuvcvlJEes5a0hcueTikFCA=
Subject key identifier:   A4:6D:E2:86:1B:C5:ED:E7:D4:D8:C0:7D:58:1E:79:AC:CD:04:81:D1
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848E1D4698E6136DE61A228F700
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5e008c88-4df5-3bc9-99d8-14d10be04198.roa
Signing time:             Fri 14 Feb 2025 17:31:45 +0000
ROA not before:           Fri 14 Feb 2025 17:31:45 +0000
ROA not after:            Thu 15 May 2025 16:31:45 +0000
asID:                     30036
IP address blocks:        2604:2e80:c04::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:d4:69:8e:61:36:de:61:a2:28:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 14 17:31:45 2025 GMT
            Not After : May 15 16:31:45 2025 GMT
        Subject: CN=d93472df-f36a-43d2-9dec-101ebe075953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:77:60:7b:96:fc:38:74:9b:16:72:32:6f:
                    3d:23:fb:65:d1:9b:df:07:bd:81:c7:8f:f2:da:78:
                    8c:1b:da:c6:3b:b4:4c:69:30:e7:b3:11:01:d5:fd:
                    2d:07:e1:99:69:1f:8d:46:41:7b:7b:e9:20:8c:81:
                    51:39:4e:25:ed:07:d5:06:03:a3:ec:17:25:ee:32:
                    a9:6a:60:e1:fa:b4:74:20:8a:b9:2b:7a:22:b1:ef:
                    ec:a7:e1:2f:f9:2b:46:45:3a:24:79:28:27:cc:5b:
                    28:df:4f:33:2f:52:19:71:a7:aa:6d:84:45:41:0b:
                    4f:b5:7c:9b:35:3f:e3:d1:70:73:f9:6b:28:04:83:
                    e9:df:ba:a9:b2:15:c5:26:94:63:ad:1a:51:d4:89:
                    ed:18:b1:8f:49:8b:c5:40:e7:07:68:53:fc:65:44:
                    5a:4f:33:94:89:d5:93:c9:39:08:ec:dd:9b:36:4e:
                    64:8b:54:0f:e6:d2:28:d9:e2:4a:55:2f:03:5e:e6:
                    a1:a3:66:79:89:00:a8:b9:1c:41:29:d4:72:01:32:
                    c7:f8:b5:9b:21:b0:39:21:53:91:c1:ce:21:a3:82:
                    47:76:75:1f:30:bd:53:f0:4e:f2:b2:d7:fc:cc:68:
                    84:3f:0b:4f:f1:ef:4d:6d:df:e6:f9:13:ca:64:3f:
                    18:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:6D:E2:86:1B:C5:ED:E7:D4:D8:C0:7D:58:1E:79:AC:CD:04:81:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/5e008c88-4df5-3bc9-99d8-14d10be04198.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e80:c04::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:a3:df:c2:a0:b1:10:06:b6:4c:ca:df:e3:ea:ac:a5:41:fd:
         45:0f:27:e1:c2:0a:a4:0a:bd:86:65:79:23:9f:ba:de:e0:7e:
         d1:84:bb:95:aa:d1:67:25:f2:78:8c:fb:f3:29:33:93:ba:c9:
         94:75:d3:a3:98:7e:38:72:0c:b9:02:a2:bc:c0:87:47:74:b3:
         3a:f2:ad:0a:87:6f:53:56:f7:d3:b1:5e:5b:1a:64:52:19:33:
         69:c1:c4:1c:91:c5:08:f3:54:e6:e6:b4:c8:6f:70:29:c6:4a:
         af:f6:f5:79:ad:5e:9f:f1:10:04:54:8a:09:80:3d:59:6a:6d:
         f4:21:30:0d:eb:5d:0a:44:6d:a7:ef:ea:53:fd:03:ea:da:4f:
         6e:74:9a:8c:cd:39:e9:8f:e1:61:89:5b:9d:f0:89:40:92:61:
         a5:cf:e9:fe:60:47:06:9e:e9:f7:c4:b2:20:54:3e:08:2e:e9:
         bc:b0:c6:d0:64:84:1a:89:62:08:69:88:f7:45:91:b5:cb:e2:
         67:f2:5e:2a:d7:9c:42:a0:5e:69:6c:d7:f9:02:1f:00:22:84:
         3b:38:53:c8:02:c6:31:1f:48:b8:98:f1:04:24:1d:08:f4:55:
         6b:64:f8:f2:c0:cd:c0:e7:5a:20:f2:e4:61:9a:25:c1:a6:d5:
         e7:02:5e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:21:04 2025 by rpki-client