Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab85ab0f-eccb-3ad8-b9bd-5fe3d05d462c.roa
File:                     ab85ab0f-eccb-3ad8-b9bd-5fe3d05d462c.roa (raw, json)
Hash identifier:          ryfPy6A6OCIpKyUaCBMso4RwT/BR9twcpb5vhm1jyF4=
Subject key identifier:   52:A2:4A:1C:EA:9D:9D:71:1E:20:0D:72:11:D2:97:2E:43:5E:0C:5E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C559153E15141D2235EA4260
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab85ab0f-eccb-3ad8-b9bd-5fe3d05d462c.roa
Signing time:             Tue 04 Feb 2025 12:40:37 +0000
ROA not before:           Tue 04 Feb 2025 12:40:37 +0000
ROA not after:            Mon 05 May 2025 11:40:37 +0000
asID:                     30036
IP address blocks:        2604:2e8e:d400::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:59:15:3e:15:14:1d:22:35:ea:42:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  4 12:40:37 2025 GMT
            Not After : May  5 11:40:37 2025 GMT
        Subject: CN=61ba399d-4877-418a-820c-95ab76c185fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e5:f4:d5:38:0b:c2:0c:fd:7c:46:81:c2:c2:
                    ab:17:35:57:41:a5:1e:a7:29:57:80:d9:f5:25:8c:
                    71:f1:92:df:eb:a5:11:e4:2a:6e:91:0f:e9:17:b5:
                    50:a4:2f:52:bc:d6:ef:86:1f:d0:80:42:35:b6:01:
                    f0:a1:66:00:4d:7d:d9:5c:6a:1e:6b:87:88:a7:47:
                    fe:77:44:a6:7f:a0:db:2b:ee:e6:4f:18:32:fe:c2:
                    cb:c2:25:11:5f:34:c8:44:19:3f:0e:24:59:b9:ee:
                    96:fe:59:e3:50:53:3d:e1:62:48:2a:fa:44:8a:c9:
                    5e:9b:5e:76:1c:07:e3:a6:15:15:66:0c:b3:29:8e:
                    83:61:bd:e3:c8:16:d1:8b:5f:7e:fc:c8:b4:63:70:
                    36:d4:fb:85:91:d4:17:15:7a:e3:f3:b5:a1:d9:4b:
                    bc:87:20:de:de:5e:1f:54:d8:b3:94:b6:8a:b8:5d:
                    a1:51:de:c1:3b:32:1c:ad:3f:ff:b1:24:a9:1d:b9:
                    dc:73:ff:91:88:a0:e0:19:59:4e:06:ab:86:80:3b:
                    28:a8:e6:41:b2:e6:a9:77:71:c6:5e:26:65:f5:a0:
                    10:27:fa:03:80:15:57:b9:ff:8b:80:65:12:8e:ad:
                    81:1a:9b:91:f8:aa:8b:64:56:5b:14:d2:58:2e:53:
                    09:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A2:4A:1C:EA:9D:9D:71:1E:20:0D:72:11:D2:97:2E:43:5E:0C:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/ab85ab0f-eccb-3ad8-b9bd-5fe3d05d462c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:d400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:61:33:84:86:63:47:1f:be:ad:9b:e0:0a:76:0f:57:5e:ac:
         de:34:d3:2a:9e:a2:01:b8:f8:10:5c:58:ba:a6:f9:ab:6e:c0:
         1e:26:38:bf:c2:e6:f9:dc:d2:01:b8:74:29:00:81:ec:98:8a:
         dc:2d:9d:4a:19:0f:4f:e7:ea:57:57:8b:e9:e4:91:b3:22:c0:
         10:91:ea:c7:eb:21:7d:f0:0d:bf:04:76:ed:ef:0a:a1:44:1e:
         8b:19:5e:06:fb:80:c8:48:c4:48:c6:d2:b9:d8:8b:72:42:80:
         ad:76:90:c8:2e:d9:4b:d1:cf:ba:59:b1:9f:2e:fa:c4:08:68:
         38:31:ea:f0:8f:3f:0a:54:a9:54:6a:c8:79:01:a6:3d:1e:31:
         17:2e:d3:84:a9:67:75:58:e5:13:3f:43:e6:76:64:4b:7c:a3:
         d9:8a:19:41:d1:0a:f8:dd:9c:04:76:6e:68:17:a0:0b:ef:fd:
         ab:ed:4e:ac:6d:dd:82:49:c6:b7:10:95:20:77:86:46:9d:9e:
         90:26:a0:85:16:bb:29:4e:c5:7c:d4:28:f9:bd:89:c2:8b:2b:
         62:03:2e:54:86:d3:25:a7:34:5c:d0:ea:fa:d1:c8:6f:8a:68:
         cc:20:9e:a4:fb:cd:dc:53:85:09:81:4e:d4:30:ce:a7:ff:1f:
         ad:19:fc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:51:17 2025 by rpki-client