Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d7443743-bbf4-3fc3-82f4-f17b587960e1.roa
File:                     d7443743-bbf4-3fc3-82f4-f17b587960e1.roa (raw, json)
Hash identifier:          Yfcf27lCy/NQa69X2ZaXynEcTWrZJsg+CTxD4nvIzTM=
Subject key identifier:   E1:44:4F:E1:81:9D:F7:B3:6C:D1:FC:6F:7F:91:A4:F5:1C:9F:85:92
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C534996662ABE5874E37D400
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d7443743-bbf4-3fc3-82f4-f17b587960e1.roa
Signing time:             Tue 04 Feb 2025 11:27:07 +0000
ROA not before:           Tue 04 Feb 2025 11:27:07 +0000
ROA not after:            Mon 05 May 2025 10:27:07 +0000
asID:                     30036
IP address blocks:        2604:2e8e:b800::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:34:99:66:62:ab:e5:87:4e:37:d4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  4 11:27:07 2025 GMT
            Not After : May  5 10:27:07 2025 GMT
        Subject: CN=949ca802-5610-455b-90ce-4442a9a3b0d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9a:c5:37:df:5a:3d:74:03:e6:3f:91:bf:b6:
                    3a:dd:64:49:68:69:06:ba:67:21:b3:5b:0c:af:b5:
                    a6:66:84:52:dd:8d:0c:09:30:65:e1:fd:74:aa:95:
                    0c:7a:e0:ac:ae:58:f4:3b:5c:b4:1b:1e:89:58:e1:
                    e8:1b:ed:b2:d6:c9:76:55:35:7e:f7:ea:5e:ba:f0:
                    9e:cb:e5:9c:21:e8:b4:be:7f:3b:3d:33:4a:9b:9e:
                    bb:bb:29:73:9a:d1:df:b6:22:95:d2:01:ee:66:16:
                    61:42:7b:7a:4f:35:37:d5:32:44:d8:ff:6f:b9:d1:
                    6a:30:e0:54:5d:e9:83:1b:c8:fc:04:3e:42:68:36:
                    bc:79:97:c6:83:81:2b:e7:65:12:31:8f:36:a5:50:
                    60:47:17:ad:b6:5c:86:89:95:90:87:df:80:ca:f6:
                    0e:4d:4a:fe:19:a3:b5:dc:5b:e4:eb:3d:f5:b7:67:
                    84:15:77:06:dd:2c:52:cd:7a:3b:70:fb:7f:dc:68:
                    33:18:ac:7c:59:e4:23:ef:fa:a6:8c:4e:76:fe:64:
                    88:c1:20:a7:81:03:ff:80:ba:67:92:ba:52:f0:df:
                    6e:3c:cf:19:cb:a9:62:3d:85:29:4d:e7:99:1c:7a:
                    10:7a:69:55:fc:43:92:f2:66:1d:6f:1a:fb:a1:ee:
                    80:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:44:4F:E1:81:9D:F7:B3:6C:D1:FC:6F:7F:91:A4:F5:1C:9F:85:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d7443743-bbf4-3fc3-82f4-f17b587960e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8e:b800::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:0b:98:93:ed:49:60:c6:77:19:d4:8d:bc:bb:9f:7e:b2:2e:
         f9:a0:45:2c:34:4b:e2:31:f7:5b:cd:b4:92:0a:7b:e9:74:03:
         a3:29:d9:04:88:dd:e9:d3:68:ab:4c:db:42:3a:e9:59:8a:9c:
         11:46:ea:21:13:b5:7f:42:65:5e:93:08:e2:31:4f:14:ce:f3:
         45:98:9e:9a:66:b9:30:56:77:6c:d9:e8:85:eb:2b:80:fe:68:
         6c:48:a1:32:bd:70:30:21:50:ea:3d:0b:7d:e5:b2:cc:b1:b3:
         1a:f7:9d:ce:dc:eb:79:a0:b4:aa:11:28:4d:db:1a:b4:8b:3e:
         4f:23:ea:65:a7:46:cc:03:2b:40:60:e0:5e:7c:df:aa:73:d1:
         06:d5:b7:a4:e7:df:6b:61:59:e3:4f:2a:48:95:57:99:4d:9e:
         77:8e:b0:4e:f6:ec:b5:8a:69:37:ce:1c:78:fb:02:46:08:06:
         61:ab:c6:1b:6f:6b:2a:21:43:79:2f:07:53:17:34:f2:6c:21:
         89:69:86:29:6d:09:57:c1:f7:b7:bc:09:23:63:19:78:5a:bb:
         98:66:af:04:f7:5a:92:30:a2:1b:9c:e0:bb:99:a6:43:55:a4:
         d8:4f:ae:68:4d:47:75:57:21:2c:34:a7:ee:bc:e7:10:c9:a5:
         09:8c:60:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:06:30 2025 by rpki-client