Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/609a7fa3-affc-3a0d-bb17-c6722250efd0.roa
File:                     609a7fa3-affc-3a0d-bb17-c6722250efd0.roa (raw, json)
Hash identifier:          AW+NQNdH8uUU3kinnlyZ13F6tj4/nPVb5ukybSoqnlU=
Subject key identifier:   87:29:74:8D:AB:A7:99:DD:1D:9D:38:5E:27:48:0B:20:93:05:E4:E4
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849134FD0ED2C5D87FF19EF8780
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/609a7fa3-affc-3a0d-bb17-c6722250efd0.roa
Signing time:             Tue 04 Mar 2025 10:55:00 +0000
ROA not before:           Tue 04 Mar 2025 10:55:00 +0000
ROA not after:            Mon 02 Jun 2025 09:55:00 +0000
asID:                     30036
IP address blocks:        2604:2e8c:8800::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:4f:d0:ed:2c:5d:87:ff:19:ef:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar  4 10:55:00 2025 GMT
            Not After : Jun  2 09:55:00 2025 GMT
        Subject: CN=8f5d9771-1065-477b-95c5-bdc399b71b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:81:28:36:6b:74:c8:c6:28:1e:70:50:a4:14:
                    c6:cc:90:44:62:46:01:9a:0a:71:a9:5c:42:a9:3d:
                    52:03:12:d0:ee:e0:05:ce:80:7f:f5:d8:03:5d:74:
                    62:f3:ba:84:11:87:35:cf:10:b3:c4:97:ab:6b:80:
                    bc:19:23:f7:71:7c:0f:32:94:93:34:65:35:22:d9:
                    94:cf:ca:8d:70:33:cb:f4:c2:d5:9b:c7:43:84:0f:
                    c3:70:96:38:ab:97:40:a0:33:dd:c2:b4:b0:23:47:
                    a3:8d:9a:ae:ae:ca:4c:02:83:6d:17:7d:cc:fc:e8:
                    b6:34:c4:8d:72:ce:3e:33:17:ef:64:de:07:62:69:
                    52:32:0e:e4:51:1c:48:5e:fb:b6:1c:47:96:64:fc:
                    98:0f:7a:2b:cc:00:b0:b4:f0:dc:98:17:fb:a3:1a:
                    d2:b7:e0:df:52:bf:86:f4:7c:f0:66:29:33:a0:7d:
                    3d:5b:9f:e0:f7:e5:31:b5:2f:a6:be:17:82:41:96:
                    03:4f:6d:2b:7a:85:bb:0b:71:ee:93:1c:07:95:73:
                    82:fc:13:ed:65:64:38:85:7b:07:5d:d6:9c:40:3d:
                    c6:04:2e:b0:3b:34:c3:89:ab:09:9c:df:74:ae:e0:
                    d1:45:dd:a2:be:ef:7b:67:64:12:93:98:ae:09:cb:
                    4a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:29:74:8D:AB:A7:99:DD:1D:9D:38:5E:27:48:0B:20:93:05:E4:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/609a7fa3-affc-3a0d-bb17-c6722250efd0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:8800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:80:1c:fa:09:a5:de:57:37:01:44:d5:1c:d4:38:d3:56:89:
         8a:a4:85:35:e3:ad:c9:73:37:c4:bc:84:58:fd:94:e2:6d:ce:
         cf:b7:c4:63:a9:57:81:18:e6:ac:1f:c7:7f:d9:d4:8b:ee:34:
         24:e1:63:eb:8d:0c:7e:40:ae:c5:62:08:87:00:45:09:5c:64:
         d8:81:df:eb:64:6f:b7:09:92:c1:de:97:27:bf:59:b0:39:fe:
         13:fc:98:8b:4c:7d:f4:27:f3:77:ff:ce:4e:71:1d:2c:89:6e:
         3d:3a:c4:85:df:d6:8a:19:dd:13:d1:64:b4:76:35:b5:7b:a0:
         6b:2c:c3:fd:80:bf:5d:75:c3:6c:3f:40:0b:6e:84:f4:c8:90:
         8b:e1:8f:b7:3b:af:ba:64:9a:eb:43:40:df:ea:5e:84:4a:99:
         1f:7c:dd:6c:94:a9:e6:ef:5c:c0:89:aa:af:f7:82:94:e8:38:
         c3:d8:c7:0b:db:0b:4a:a0:53:d3:b8:08:51:ee:3a:2d:bf:5e:
         c0:1b:ef:33:0c:4f:d9:6b:36:c1:9c:71:6a:06:75:d0:2c:7c:
         12:75:8e:bd:56:f3:36:e1:52:86:2f:0c:a4:f1:ab:77:7a:c7:
         31:b3:d6:f2:44:a3:f9:3c:bb:05:1c:d4:51:ae:bd:28:cd:e1:
         f7:24:9c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:56:26 2025 by rpki-client