Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b20c5d87-769b-3e5b-a67d-99594d32fb16.roa
File:                     b20c5d87-769b-3e5b-a67d-99594d32fb16.roa (raw, json)
Hash identifier:          OoboaULEke07hIwd3LjMIgcL4GlLD3eIrVTdiLnO5mA=
Subject key identifier:   87:45:9C:98:D5:4B:39:34:C7:C9:0A:CA:56:AB:07:BC:02:C9:3D:12
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C264FFD346481004ABCFB880
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b20c5d87-769b-3e5b-a67d-99594d32fb16.roa
Signing time:             Mon 03 Feb 2025 11:17:12 +0000
ROA not before:           Mon 03 Feb 2025 11:17:12 +0000
ROA not after:            Sun 04 May 2025 10:17:12 +0000
asID:                     30036
IP address blocks:        2604:2e8c:3000::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:64:ff:d3:46:48:10:04:ab:cf:b8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  3 11:17:12 2025 GMT
            Not After : May  4 10:17:12 2025 GMT
        Subject: CN=50aece04-2feb-4762-aa9c-e9e606ec322f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c6:cc:2b:1a:1e:a1:f1:95:ce:02:e2:bd:10:
                    bc:d3:f7:91:cd:5a:81:b1:9f:76:95:a4:57:23:d2:
                    b2:78:79:9d:4a:96:3a:ba:df:52:01:b2:19:e2:c7:
                    c2:01:d6:06:12:bb:bf:9e:4a:29:e1:f7:ac:be:68:
                    76:05:f9:14:52:a9:8e:84:c4:7f:d7:39:dc:dd:ff:
                    fb:ce:27:f0:68:aa:ab:79:66:2e:e2:9a:82:7f:7b:
                    a2:36:2f:34:da:ee:66:9a:e1:81:61:f4:0b:1a:77:
                    e8:e3:1a:86:25:59:11:0c:0d:98:79:8a:4f:06:b4:
                    ec:e5:c9:87:78:5c:dc:ac:64:2e:c3:b2:be:d3:00:
                    ef:a9:be:76:19:40:83:b4:90:88:44:a1:e3:39:a6:
                    88:fb:d5:aa:66:4e:2f:cf:e2:7d:de:ff:92:e3:9c:
                    b4:ed:36:5e:f2:44:34:2f:b3:ee:58:84:41:10:94:
                    3d:8b:8a:3a:d8:42:d9:0f:88:cf:37:d6:48:2a:67:
                    09:82:4c:dc:bd:dc:d2:cd:96:0e:c3:46:1f:37:b8:
                    51:96:86:1b:0a:bf:64:ce:6e:d5:10:89:54:44:26:
                    a1:de:8c:8b:18:de:48:a0:3d:0a:1f:e6:a9:a0:7f:
                    ca:df:d3:52:63:fb:1d:c4:72:20:0a:47:00:57:51:
                    02:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:45:9C:98:D5:4B:39:34:C7:C9:0A:CA:56:AB:07:BC:02:C9:3D:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/b20c5d87-769b-3e5b-a67d-99594d32fb16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:3000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:9c:1d:6a:00:ba:64:9b:d1:b4:17:1c:db:a0:1b:67:50:c8:
         06:f1:f1:11:ef:77:a1:01:30:bb:a7:18:91:d7:29:7d:83:cc:
         3c:f8:f3:ee:58:ed:56:f7:06:b1:c2:38:0e:aa:7c:00:54:8b:
         c4:13:49:18:16:c0:b0:0b:17:2e:94:f1:a3:50:93:dd:c4:64:
         3a:fa:27:05:e3:c1:ad:6f:88:d1:42:7a:fb:ac:bc:b1:33:ec:
         c5:5a:7a:32:a6:6e:7e:21:5c:68:be:29:10:68:d1:4a:85:09:
         23:52:9b:d7:62:ec:2a:a2:9f:85:0c:2f:db:6f:48:95:c1:7a:
         0e:72:d2:7b:7a:8d:76:1d:2b:1e:a1:5e:54:f5:99:a3:6c:d6:
         59:99:74:41:60:17:66:00:a5:b3:3c:66:23:0d:06:0c:3c:ea:
         50:32:27:e6:78:ac:85:71:f1:0c:f5:64:87:da:f1:2f:3f:ff:
         69:d7:c8:3c:42:4b:3c:27:62:6b:39:62:1d:d9:c5:34:6e:e9:
         f7:6b:43:b9:f3:68:7e:5f:1d:47:8c:35:2a:ea:1a:32:86:a8:
         32:2f:eb:d3:c5:c6:6e:5b:6b:2e:88:52:28:a7:76:f9:14:e6:
         1b:a3:d2:fb:e7:08:ac:9e:82:26:e7:25:f1:c6:15:fd:51:a8:
         18:17:92:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:09:04 2025 by rpki-client