Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cee78e46-3d20-3bd6-9fc5-659b765a7e59.roa
File:                     cee78e46-3d20-3bd6-9fc5-659b765a7e59.roa (raw, json)
Hash identifier:          EElBRgdKXkPkTf0YgqWfSNJbXgDllPz4UgYfcVZJIzA=
Subject key identifier:   20:8C:E1:4B:DC:07:B7:FF:15:90:72:89:48:02:7E:6E:40:19:74:87
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C534780AA371D8326EB5C310
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cee78e46-3d20-3bd6-9fc5-659b765a7e59.roa
Signing time:             Tue 04 Feb 2025 11:26:51 +0000
ROA not before:           Tue 04 Feb 2025 11:26:51 +0000
ROA not after:            Mon 05 May 2025 10:26:51 +0000
asID:                     30036
IP address blocks:        2604:2e8b:7800::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:34:78:0a:a3:71:d8:32:6e:b5:c3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  4 11:26:51 2025 GMT
            Not After : May  5 10:26:51 2025 GMT
        Subject: CN=ba66d848-3944-4a7e-817f-0bcf280329b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:e1:9a:a1:d1:b5:8c:9e:6c:df:3c:80:82:b5:
                    2f:11:22:64:d0:1b:3f:60:2e:99:48:67:aa:24:e3:
                    b0:19:c6:b0:a2:2e:1b:f0:17:1c:97:89:54:6f:91:
                    bc:b2:55:3a:ae:cc:ba:1b:cb:a9:4c:8f:d2:fe:c8:
                    c1:5d:a0:70:ba:3d:a2:e5:2c:b7:57:da:58:77:9e:
                    37:48:73:ea:26:40:29:5a:eb:fc:f2:72:7c:b4:b4:
                    0f:7d:e5:00:19:52:03:fe:76:02:75:a7:0d:82:d3:
                    23:e7:22:05:42:a0:53:06:57:a4:bd:ad:f3:42:a7:
                    da:70:5a:9a:45:53:8c:3b:b7:56:f8:e4:69:1d:55:
                    f2:49:74:66:ca:62:1a:b0:b6:52:23:bb:fd:e7:0d:
                    b7:b3:ec:b6:80:ce:5b:94:02:26:e7:9f:44:4c:90:
                    6e:e4:6d:1e:52:d5:85:7d:18:b9:0a:3a:eb:c9:52:
                    f8:83:20:4f:35:11:49:fa:5f:84:ce:4c:75:de:d0:
                    2b:cf:ef:9f:e8:dd:d6:42:9a:4e:eb:d1:55:61:50:
                    7c:b1:5c:56:31:2b:dc:c0:c2:40:fc:1f:28:73:40:
                    6c:8a:97:2a:22:45:37:91:3c:50:a3:1b:72:25:84:
                    e4:81:36:b0:c9:9a:21:fb:b2:44:b6:cb:c8:ed:82:
                    76:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8C:E1:4B:DC:07:B7:FF:15:90:72:89:48:02:7E:6E:40:19:74:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cee78e46-3d20-3bd6-9fc5-659b765a7e59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8b:7800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:07:c5:5e:cb:ca:61:5e:0a:be:94:51:1b:94:bf:fa:0b:fc:
         b6:b0:fe:ac:7c:df:78:3f:88:97:d3:43:29:33:fb:3b:90:3e:
         60:ce:7d:24:99:d6:de:f2:ca:93:51:31:78:00:d3:00:ec:e9:
         2b:8a:c9:53:64:20:a9:ce:1e:ca:45:8c:69:12:18:70:82:55:
         19:ce:30:24:4e:c7:43:5b:92:aa:cc:6b:0a:cf:74:5a:11:48:
         70:f7:50:4e:71:48:7f:d4:2b:17:8b:33:92:59:fe:9f:05:09:
         ac:9a:73:a6:85:61:e1:4a:56:82:2f:7d:f0:11:32:02:18:28:
         26:0e:f5:e2:df:a8:73:1b:dd:f8:fa:d0:b3:81:72:fa:ab:a9:
         30:93:e7:2c:27:d6:22:3a:28:81:94:ba:b2:74:ad:83:8e:2c:
         12:39:50:d8:43:ae:7a:88:05:3d:36:da:fb:1c:fb:bd:15:13:
         60:80:b5:28:fd:ec:e3:86:3e:16:44:95:53:82:0e:82:7c:25:
         7d:dd:a3:7b:14:ef:ca:56:6b:56:c4:15:e7:de:32:7d:db:34:
         d1:fc:b3:57:4c:de:57:17:9c:95:a3:18:5a:8e:f6:eb:4d:2a:
         e9:5b:a5:7f:2d:f8:8c:97:37:06:47:46:b8:1a:cb:0d:bf:50:
         3c:de:57:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:01:14 2025 by rpki-client