Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb075658-cb9a-35ee-a8cc-6daa1b8f5193.roa
File:                     cb075658-cb9a-35ee-a8cc-6daa1b8f5193.roa (raw, json)
Hash identifier:          QuNhc7WyElRlVyxF+nN4b+Ze5RIuylXqBEygSz0H758=
Subject key identifier:   AD:32:3C:33:4D:62:23:4D:0C:AD:65:B7:D2:04:10:6E:2F:09:E6:73
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848E1D58AC68A60B8A922DBC980
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb075658-cb9a-35ee-a8cc-6daa1b8f5193.roa
Signing time:             Fri 14 Feb 2025 17:34:02 +0000
ROA not before:           Fri 14 Feb 2025 17:34:02 +0000
ROA not after:            Thu 15 May 2025 16:34:02 +0000
asID:                     30036
IP address blocks:        2604:2e8d:d400::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:d5:8a:c6:8a:60:b8:a9:22:db:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 14 17:34:02 2025 GMT
            Not After : May 15 16:34:02 2025 GMT
        Subject: CN=7770891f-c087-487a-99f7-635d8e208733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:28:06:0b:66:1c:44:ce:ea:fa:f9:53:2f:ff:
                    e1:13:c3:95:68:d0:83:9b:c7:f1:1a:f7:ca:16:d6:
                    76:16:a5:89:a4:57:91:e6:62:e4:c4:0f:62:46:c0:
                    17:c3:68:69:ce:1e:1c:e7:0e:fa:1a:2f:d3:4b:08:
                    01:44:e8:6c:e7:65:20:e3:c9:57:d4:b3:66:51:47:
                    f4:b7:97:c6:b5:c1:2e:02:d1:66:98:2d:24:38:3a:
                    03:5b:37:4b:59:eb:e2:7d:cb:5b:9f:fd:2d:16:6b:
                    84:b4:84:9e:04:8d:b3:f6:fe:90:b2:10:f2:3d:b9:
                    0f:27:7d:90:dd:24:70:30:75:3c:b6:66:b7:a9:2c:
                    0b:c1:c3:26:17:df:3e:1f:c1:42:1c:cc:b0:b2:21:
                    ca:a2:1a:39:d5:76:b4:83:bc:e9:7d:2c:44:b8:71:
                    6d:86:60:87:82:39:7d:47:7c:7e:72:17:a5:b5:75:
                    d5:98:54:f4:52:5f:56:87:4c:fe:f8:e2:3b:62:74:
                    f2:9d:00:50:f5:b1:c1:23:1e:32:55:07:58:7f:53:
                    87:75:93:24:00:f2:a3:65:b9:31:a0:65:35:ca:a6:
                    f1:d1:e0:e1:93:60:3a:bf:79:06:ce:50:a7:b7:cc:
                    43:25:bc:69:5c:d8:00:39:29:98:3a:ee:a7:93:9f:
                    93:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:32:3C:33:4D:62:23:4D:0C:AD:65:B7:D2:04:10:6E:2F:09:E6:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cb075658-cb9a-35ee-a8cc-6daa1b8f5193.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:d400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:0d:a2:6d:21:a4:ed:de:1d:57:a4:49:36:6a:68:85:ee:b5:
         b9:54:c6:9d:7d:b9:03:05:cd:09:22:54:b5:d0:2d:be:33:e6:
         3a:8a:5d:9c:4a:23:6d:b7:69:f5:64:6f:75:89:9c:86:23:48:
         a4:27:b1:4c:85:95:f6:b0:d5:1a:4a:50:20:9f:50:06:e8:ac:
         f0:a3:df:a3:9a:40:06:ca:ce:3c:1a:20:84:60:1c:ea:21:d4:
         25:64:ff:96:7a:4d:ce:d5:90:89:37:e4:43:83:be:1c:2f:49:
         70:d8:4f:b0:6d:3b:b1:b1:41:05:ae:91:1d:25:b1:87:a3:1f:
         a8:58:4d:c1:bc:73:b3:76:12:33:e1:18:35:62:e2:13:e9:de:
         30:4e:5d:98:76:3f:62:ec:2a:2f:07:8b:7d:13:69:fd:d7:3f:
         ca:d2:31:91:b9:9b:ac:46:a8:f3:11:26:29:b2:cd:7c:24:44:
         08:f8:8e:bd:59:d8:0a:30:c6:94:72:54:db:70:13:87:d6:03:
         c3:ae:36:43:45:65:e4:5e:a5:37:45:1e:87:6c:bd:bf:e4:2c:
         7e:8a:30:37:92:80:77:46:7c:b1:d9:17:85:0f:e8:f7:93:90:
         13:bd:5b:e0:7e:12:c2:07:a8:bc:b3:24:60:b3:80:10:cf:f9:
         bf:db:7d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:01:10 2025 by rpki-client