Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6083b039-817d-33f6-bc48-b8d74bd94452.roa
File:                     6083b039-817d-33f6-bc48-b8d74bd94452.roa (raw, json)
Hash identifier:          Ol39RiTox9kpP8xZ7J6GiUGUph2zDISlcLPPwbdI0hQ=
Subject key identifier:   1E:A5:98:47:FF:A8:0C:D2:7F:69:0B:DA:E8:34:23:D6:F4:34:88:86
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C7FE300B7CF6B64CEF25D480
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6083b039-817d-33f6-bc48-b8d74bd94452.roa
Signing time:             Wed 05 Feb 2025 11:24:54 +0000
ROA not before:           Wed 05 Feb 2025 11:24:54 +0000
ROA not after:            Tue 06 May 2025 10:24:54 +0000
asID:                     30036
IP address blocks:        2604:2e8b:b000::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:fe:30:0b:7c:f6:b6:4c:ef:25:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  5 11:24:54 2025 GMT
            Not After : May  6 10:24:54 2025 GMT
        Subject: CN=353b4a8b-379b-4b4b-b50a-098a7f5b3022
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d0:af:d1:4f:29:49:2c:eb:c2:fb:9e:99:c9:
                    8e:85:46:12:56:f3:4d:00:c8:e4:d1:cb:26:1a:35:
                    15:e3:66:3d:69:58:9e:4f:06:92:45:f3:23:f8:f1:
                    6b:11:f2:d2:f8:66:6a:4d:42:33:ec:3b:8d:05:5e:
                    6a:c5:fa:ff:34:9e:a4:23:cb:d1:ea:21:07:d9:af:
                    26:88:1e:c8:e0:9a:c6:b4:1e:af:57:14:82:70:70:
                    27:fb:ae:03:f5:c2:33:59:47:ad:b6:b5:1f:82:5a:
                    6c:a1:1a:85:74:f2:54:83:75:d2:16:1a:ef:ae:be:
                    bf:33:0f:a1:cc:b7:7f:37:ef:64:9d:8c:6f:8c:19:
                    1c:49:cb:d6:10:c4:6b:73:67:ce:ed:e5:37:c1:7e:
                    05:24:84:79:31:d0:b8:26:b5:2b:68:ee:7d:ea:c1:
                    a0:db:8b:87:dc:e7:6e:c5:bf:e4:37:d4:9f:1a:02:
                    b9:63:c9:4f:49:3b:ae:99:30:23:e0:1f:34:f9:8f:
                    35:b5:1e:19:28:4b:23:32:03:12:f4:1d:c6:bc:c1:
                    1a:2a:d6:b8:55:97:0a:90:9a:8c:ba:03:65:4f:37:
                    fb:ad:3c:50:7a:2d:5d:e1:b2:57:b5:1b:f1:33:2d:
                    52:92:ca:33:51:be:ae:c3:4e:60:bb:76:0e:83:3e:
                    09:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:A5:98:47:FF:A8:0C:D2:7F:69:0B:DA:E8:34:23:D6:F4:34:88:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/6083b039-817d-33f6-bc48-b8d74bd94452.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:b000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:08:72:94:f5:62:0b:d8:94:43:15:db:05:93:0c:dc:fe:9b:
         8e:81:c8:91:a0:07:8a:f4:7e:aa:66:33:b5:87:a9:07:7a:65:
         05:a6:3e:1b:03:81:4b:de:fe:2d:b7:2f:a9:0c:c6:a3:d2:8a:
         49:96:3d:bd:b0:d7:12:3b:cd:99:05:6c:e4:38:9d:3e:a9:2b:
         d8:7a:93:21:36:e8:64:a1:e4:1d:f1:04:af:f2:7d:c5:5d:fc:
         04:92:bb:8c:03:d8:c0:21:58:ee:84:e3:e2:74:5d:95:d6:e0:
         2e:be:11:40:dd:91:91:00:37:30:52:f6:9f:9a:8e:c7:dd:85:
         0d:ce:63:bb:49:a5:be:23:5f:06:75:31:6e:94:ab:2b:44:5a:
         e8:9b:b7:c9:14:d9:2b:97:91:6e:60:1a:08:b1:ac:92:fe:91:
         e7:0b:e4:04:17:a1:22:0a:87:f9:a5:25:10:15:1b:72:3e:a6:
         04:e0:22:c6:26:20:96:7c:17:09:6b:bd:5c:af:c3:45:69:40:
         f0:38:b2:d4:54:4c:5e:f7:47:52:ac:02:d7:7c:2d:16:a0:e5:
         5b:0e:94:87:f2:b2:c1:51:09:40:5e:4f:38:0b:26:0b:ab:c6:
         3a:ea:99:a9:1c:9c:a3:13:de:9b:9f:5f:1e:70:0c:fd:88:74:
         6a:ec:06:80
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjH/jALfPa2TO8l1IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwNTExMjQ1NFoXDTI1MDUwNjEwMjQ1NFowLzEtMCsGA1UEAxMk
MzUzYjRhOGItMzc5Yi00YjRiLWI1MGEtMDk4YTdmNWIzMDIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytCv0U8pSSzrwvuemcmOhUYSVvNNAMjk0csm
GjUV42Y9aVieTwaSRfMj+PFrEfLS+GZqTUIz7DuNBV5qxfr/NJ6kI8vR6iEH2a8m
iB7I4JrGtB6vVxSCcHAn+64D9cIzWUettrUfglpsoRqFdPJUg3XSFhrvrr6/Mw+h
zLd/N+9knYxvjBkcScvWEMRrc2fO7eU3wX4FJIR5MdC4JrUraO596sGg24uH3Odu
xb/kN9SfGgK5Y8lPSTuumTAj4B80+Y81tR4ZKEsjMgMS9B3GvMEaKta4VZcKkJqM
ugNlTzf7rTxQei1d4bJXtRvxMy1SksozUb6uw05gu3YOgz4JGQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFB6lmEf/qAzSf2kL2ug0I9b0NIiGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvNjA4M2IwMzktODE3ZC0z
M2Y2LWJjNDgtYjhkNzRiZDk0NDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQui7Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAUQhylPViC9iUQxXbBZMM3P6bjoHIkaAHivR+qmYztYepB3plBaY+
GwOBS97+LbcvqQzGo9KKSZY9vbDXEjvNmQVs5DidPqkr2HqTITboZKHkHfEEr/J9
xV38BJK7jAPYwCFY7oTj4nRdldbgLr4RQN2RkQA3MFL2n5qOx92FDc5ju0mlviNf
BnUxbpSrK0Ra6Ju3yRTZK5eRbmAaCLGskv6R5wvkBBehIgqH+aUlEBUbcj6mBOAi
xiYglnwXCWu9XK/DRWlA8Diy1FRMXvdHUqwC13wtFqDlWw6Uh/KywVEJQF5POAsm
C6vGOuqZqRycoxPem59fHnAM/Yh0auwGgA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:46 2025 by rpki-client