Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9bd4dd2f-a8a9-3c54-8a1c-44eacfb77803.roa
File:                     9bd4dd2f-a8a9-3c54-8a1c-44eacfb77803.roa (raw, json)
Hash identifier:          JC7wqCIPkzW1NJT+xGV/Tx9WC6yPXOBL/HangD8Mx9w=
Subject key identifier:   0E:11:B4:8D:B9:CD:F4:CD:E0:27:80:E7:05:29:DD:B4:06:F2:CE:B9
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849134FEB209B596E1C65779800
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9bd4dd2f-a8a9-3c54-8a1c-44eacfb77803.roa
Signing time:             Tue 04 Mar 2025 10:55:13 +0000
ROA not before:           Tue 04 Mar 2025 10:55:13 +0000
ROA not after:            Mon 02 Jun 2025 09:55:13 +0000
asID:                     30036
IP address blocks:        2604:2e8e:5800::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:4f:eb:20:9b:59:6e:1c:65:77:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Mar  4 10:55:13 2025 GMT
            Not After : Jun  2 09:55:13 2025 GMT
        Subject: CN=487cc805-33cb-4dce-8553-d2c8aef7fb99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2b:b8:59:38:40:97:07:be:b6:bb:c6:b9:1a:
                    ad:6d:1a:1e:66:98:b3:52:3d:8d:0e:ed:de:a9:01:
                    7c:6b:46:0d:0d:76:af:90:32:d3:e0:28:d8:39:6d:
                    6a:bc:a4:f7:cb:92:bf:05:75:e2:90:94:11:6d:23:
                    37:3f:5c:58:6f:95:78:88:8e:e6:4e:26:d5:ab:ae:
                    46:59:47:dd:31:dc:de:0d:3c:1d:64:7f:3a:05:e4:
                    25:46:13:6a:2a:c7:61:8e:28:99:dd:3d:84:df:1f:
                    db:ce:d8:1a:69:1c:6e:0a:e2:51:9c:2c:89:70:e5:
                    98:b3:6b:de:da:d5:cc:c5:94:d1:9d:d6:e0:a9:7e:
                    cf:71:45:22:ca:2a:6c:22:74:4d:07:9a:81:9f:03:
                    4d:b4:8f:4c:92:00:95:55:eb:40:7f:13:ff:d5:f2:
                    c3:e0:d9:2c:21:d3:c7:d2:26:3a:ef:7c:c7:70:a1:
                    2b:9e:27:35:9a:6b:fd:e8:6b:1f:02:1e:12:94:8a:
                    c0:00:ac:f2:6a:74:f1:04:c6:67:ef:2f:68:d5:f1:
                    e9:4f:37:bb:3c:6d:0a:b0:5a:d0:1d:1b:4b:5d:30:
                    21:95:15:97:ce:2d:fe:1c:64:f7:5b:fb:f5:22:77:
                    ef:15:f7:a6:70:0a:2a:5f:ac:13:d0:82:f4:48:08:
                    df:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:11:B4:8D:B9:CD:F4:CD:E0:27:80:E7:05:29:DD:B4:06:F2:CE:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/9bd4dd2f-a8a9-3c54-8a1c-44eacfb77803.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:5800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:70:59:51:71:64:fd:9a:72:75:ba:18:3d:2e:5e:66:a4:00:
         01:11:de:bb:64:f6:f1:3d:7f:7b:1f:ae:f0:78:0c:69:42:02:
         d3:3e:ab:e3:71:9b:c1:bf:47:d3:32:e3:53:3c:09:a1:77:82:
         d1:55:9e:b4:0b:d2:e3:06:01:38:47:87:69:98:88:8d:46:74:
         4d:74:ac:6e:64:eb:2f:c6:9e:54:e3:56:47:ce:4d:5e:cc:f5:
         a8:98:30:50:6f:35:ed:df:91:b0:b1:88:d7:0c:b8:43:eb:c3:
         c9:c6:19:4a:7a:c2:3a:d9:af:fa:78:ae:da:ab:8d:2f:cf:d0:
         2b:2d:20:fd:61:7e:cd:ce:cc:7c:06:84:7d:16:cc:70:06:20:
         9d:ca:7e:70:72:2b:e7:53:a3:2a:c1:0a:ad:d0:57:a4:0b:41:
         2c:cc:cd:3b:43:21:5c:3e:d5:cb:29:35:a3:88:4c:e1:4e:71:
         69:94:f2:10:fa:41:89:08:4a:bb:70:5d:48:23:95:cc:1b:b9:
         f4:56:6f:69:90:e8:5b:93:d4:b8:54:d7:50:bb:f2:b0:9a:70:
         2f:ac:bd:3c:db:82:6d:67:c5:b2:0d:0f:a0:12:47:1a:d1:d6:
         65:69:9a:3e:82:1f:4d:11:f3:88:f4:fc:4a:96:23:b2:a3:be:
         67:1f:d1:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:56:20 2025 by rpki-client