Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cc30649c-b251-3139-b62a-29c20d83ee27.roa
File:                     cc30649c-b251-3139-b62a-29c20d83ee27.roa (raw, json)
Hash identifier:          BOyw4bxLGd5D798gGjxX/MpLBJAmoi5omQt7vXsS/Uk=
Subject key identifier:   56:C7:36:CD:2E:17:C1:C7:19:75:DA:92:41:4C:34:48:37:2E:B4:30
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848D9D7F496A1E23056E5865500
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cc30649c-b251-3139-b62a-29c20d83ee27.roa
Signing time:             Tue 11 Feb 2025 20:52:25 +0000
ROA not before:           Tue 11 Feb 2025 20:52:25 +0000
ROA not after:            Mon 12 May 2025 19:52:25 +0000
asID:                     30036
IP address blocks:        2604:2e8d:c000::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d9:d7:f4:96:a1:e2:30:56:e5:86:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 11 20:52:25 2025 GMT
            Not After : May 12 19:52:25 2025 GMT
        Subject: CN=008ec0a7-bcd5-42cd-954b-93d25bfe0a8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3a:d1:e1:4a:a0:a6:aa:97:2a:a8:e1:66:82:
                    80:09:f7:ef:29:13:81:f3:c4:af:fc:72:a8:75:c7:
                    f0:f9:4a:1b:bc:27:d0:4a:ad:7b:6e:40:11:72:fe:
                    53:ed:67:c8:d6:15:e0:33:f6:9a:0c:32:65:61:9a:
                    fd:8c:8e:55:64:7e:00:50:bf:c6:48:46:a4:bb:35:
                    50:2c:70:3e:4b:20:22:1b:4e:84:e1:06:c4:68:e1:
                    9a:3f:5d:7b:7f:7d:27:38:a1:b4:09:73:4b:1e:c5:
                    d2:9e:d5:e1:87:20:65:66:d0:5b:11:38:2c:78:d5:
                    b5:d0:9c:3b:6e:9a:6e:49:e5:58:93:7a:78:19:62:
                    87:90:97:43:dc:09:db:34:1e:92:f1:cd:d9:c8:13:
                    29:80:7f:de:3c:60:d5:d2:38:ce:46:e7:10:d7:52:
                    a5:ef:2f:ea:aa:6e:e4:ba:20:b1:5f:58:fc:93:d4:
                    25:8e:e3:3f:7e:e9:9e:01:14:46:80:ac:24:c0:97:
                    46:7a:09:08:75:e0:cf:8d:7e:f2:19:fb:04:18:1b:
                    41:d5:41:1b:0b:50:78:45:68:2a:d6:87:72:5d:c8:
                    82:20:eb:be:2e:b7:61:11:60:05:35:5c:1f:19:81:
                    84:b0:c9:a2:29:30:c3:6e:2e:bf:2d:84:6c:7b:2b:
                    30:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C7:36:CD:2E:17:C1:C7:19:75:DA:92:41:4C:34:48:37:2E:B4:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cc30649c-b251-3139-b62a-29c20d83ee27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8d:c000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:73:d0:47:c5:ec:91:ec:91:4c:82:b8:23:b6:5a:d9:ed:f6:
         88:84:fc:87:dd:f4:64:a0:f5:56:d0:aa:bf:64:97:ba:a4:a9:
         72:7d:ed:c5:3f:18:df:48:c0:3e:9a:fe:44:23:6a:cd:17:bc:
         91:14:13:71:10:a7:6b:a0:15:ee:6e:74:1c:a2:da:7e:77:b3:
         5b:17:a9:4a:ba:fe:b4:eb:cc:9c:b1:8f:d1:bf:10:ab:52:79:
         d2:b2:ef:8f:7d:be:6d:e1:4a:b9:be:b5:ce:ae:dc:5f:9a:90:
         21:f8:3f:1e:bf:33:35:1c:c6:50:ef:b7:08:a7:ad:0a:63:32:
         0b:23:e5:83:be:37:c0:34:a3:4f:26:eb:23:e5:7e:51:88:55:
         d6:ad:59:d2:8c:ab:b4:43:6d:01:f3:0d:4f:2b:92:cb:45:d1:
         25:5b:86:98:af:65:f7:f0:8a:95:ec:8d:cf:63:75:43:17:69:
         94:95:38:7f:24:1c:de:af:62:31:6f:7a:7d:c1:ed:1e:ec:25:
         4c:80:64:c2:2b:ea:54:99:b3:d2:c5:e5:39:35:f3:c6:38:22:
         5c:ef:50:e5:58:f9:77:17:42:8a:44:aa:7f:a9:1c:e3:84:2b:
         6b:99:70:2a:97:36:d1:62:2c:c7:dc:7f:0a:10:b9:2e:3a:08:
         38:3c:80:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:01:17 2025 by rpki-client