Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e087ae6d-bea9-3154-8b5b-8047d1bc5073.roa
File:                     e087ae6d-bea9-3154-8b5b-8047d1bc5073.roa (raw, json)
Hash identifier:          uFvcD+5N5pOYh/+mYPxXr64jH5CgtuiEGnTI2quH89U=
Subject key identifier:   39:0E:7D:BE:AD:F3:6E:B3:45:9F:C0:5A:8D:A9:ED:F2:1D:B1:8F:C6
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C7F7E98FF0D5F53F7A530B80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e087ae6d-bea9-3154-8b5b-8047d1bc5073.roa
Signing time:             Wed 05 Feb 2025 11:12:16 +0000
ROA not before:           Wed 05 Feb 2025 11:12:16 +0000
ROA not after:            Tue 06 May 2025 10:12:16 +0000
asID:                     30036
IP address blocks:        2604:2e8a:9000::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c7:f7:e9:8f:f0:d5:f5:3f:7a:53:0b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  5 11:12:16 2025 GMT
            Not After : May  6 10:12:16 2025 GMT
        Subject: CN=32048b83-3376-4a07-982c-51d967edf76f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ed:08:25:b3:2d:a6:c5:f4:ff:d5:44:1b:99:
                    75:d1:f9:9c:21:6d:3b:b5:18:a2:eb:b8:4a:7d:d5:
                    5a:f2:67:09:e9:0d:15:d9:26:78:26:37:93:b1:56:
                    bc:52:e8:15:42:78:df:72:0f:d2:9d:4a:ac:92:f1:
                    23:b0:a3:29:c8:26:01:44:aa:22:21:34:9b:8a:a3:
                    24:a1:5f:65:7c:ae:38:e6:d5:77:d0:d7:d4:e8:0b:
                    dd:aa:37:8b:e1:9c:be:7d:d8:b6:1b:69:49:2d:9e:
                    8d:9d:5e:64:69:2d:7c:e1:3b:cd:20:91:04:89:9c:
                    17:09:b3:c0:bb:50:41:34:a5:82:73:d1:4f:dd:77:
                    27:56:88:e4:45:dd:a2:be:29:10:46:2a:18:a1:b0:
                    f2:bb:24:c7:0e:06:c5:90:ca:96:4a:f9:d8:62:b7:
                    48:b2:8c:44:1b:ea:1b:e3:ee:9c:40:a8:81:5c:1e:
                    2a:41:fb:08:3b:08:a4:da:3e:16:a8:41:fc:4c:b6:
                    dd:b4:4e:c1:bf:ff:c0:18:28:ef:d3:d1:39:76:7b:
                    06:16:c3:20:84:ee:7b:86:7d:a1:e2:8f:46:db:37:
                    34:4b:ce:f1:c7:1d:5e:71:24:94:03:1e:b8:b8:8c:
                    8e:10:55:89:4e:43:e6:14:7c:ab:8f:86:55:65:2f:
                    3f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:0E:7D:BE:AD:F3:6E:B3:45:9F:C0:5A:8D:A9:ED:F2:1D:B1:8F:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/e087ae6d-bea9-3154-8b5b-8047d1bc5073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8a:9000::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:31:dd:a8:5e:d8:6a:92:4c:57:02:af:da:bf:5e:37:35:45:
         68:60:a5:76:2d:12:7a:4e:e4:b6:a2:73:91:74:3d:35:dc:6b:
         3f:dd:97:c9:55:9e:1e:60:b9:c5:53:61:30:7e:e2:0d:a3:cb:
         af:c5:b9:90:35:f9:37:e8:ee:f5:d5:01:8b:fd:fe:eb:36:f2:
         97:06:70:04:a3:ae:6c:1f:b4:a1:4d:42:dd:e4:5d:48:47:24:
         69:8d:92:6a:49:3c:c3:72:eb:99:b7:74:9b:00:11:51:25:46:
         33:f3:cb:11:20:08:7d:25:0c:a5:ff:27:95:8f:3d:33:86:5d:
         ae:93:96:3f:62:07:0f:d2:b2:fa:ff:b4:fb:b7:6c:a1:2d:e7:
         7a:31:59:77:8b:d5:ba:93:ca:0f:bb:a4:4a:6f:78:ba:36:14:
         ad:b4:aa:d3:a6:e5:7c:e0:b7:c9:de:53:dd:c1:9b:e7:f4:21:
         e1:28:f4:e6:db:4d:23:04:42:5b:8e:24:87:8a:25:37:4b:41:
         88:fe:cc:b2:db:e8:d4:1b:1c:52:fd:31:99:63:7d:45:3e:c2:
         3a:cb:52:69:39:3b:c2:ca:90:8f:ca:55:2d:46:ea:ec:c0:26:
         52:bf:06:d9:d9:c3:bd:a8:83:31:1e:30:2a:ec:26:8a:0c:91:
         8a:be:e7:68
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEjH9+mP8NX1P3pTC4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDIwNTExMTIxNloXDTI1MDUwNjEwMTIxNlowLzEtMCsGA1UEAxMk
MzIwNDhiODMtMzM3Ni00YTA3LTk4MmMtNTFkOTY3ZWRmNzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu0IJbMtpsX0/9VEG5l10fmcIW07tRii67hK
fdVa8mcJ6Q0V2SZ4JjeTsVa8UugVQnjfcg/SnUqskvEjsKMpyCYBRKoiITSbiqMk
oV9lfK445tV30NfU6AvdqjeL4Zy+fdi2G2lJLZ6NnV5kaS184TvNIJEEiZwXCbPA
u1BBNKWCc9FP3XcnVojkRd2ivikQRioYobDyuyTHDgbFkMqWSvnYYrdIsoxEG+ob
4+6cQKiBXB4qQfsIOwik2j4WqEH8TLbdtE7Bv//AGCjv09E5dnsGFsMghO57hn2h
4o9G2zc0S87xxx1ecSSUAx64uIyOEFWJTkPmFHyrj4ZVZS8/4QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDkOfb6t826zRZ/AWo2p7fIdsY/GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvZTA4N2FlNmQtYmVhOS0z
MTU0LThiNWItODA0N2QxYmM1MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQuipAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAKzHdqF7YapJMVwKv2r9eNzVFaGCldi0Sek7ktqJzkXQ9NdxrP92X
yVWeHmC5xVNhMH7iDaPLr8W5kDX5N+ju9dUBi/3+6zbylwZwBKOubB+0oU1C3eRd
SEckaY2Sakk8w3Lrmbd0mwARUSVGM/PLESAIfSUMpf8nlY89M4ZdrpOWP2IHD9Ky
+v+0+7dsoS3nejFZd4vVupPKD7ukSm94ujYUrbSq06blfOC3yd5T3cGb5/Qh4Sj0
5ttNIwRCW44kh4olN0tBiP7Mstvo1BscUv0xmWN9RT7COstSaTk7wsqQj8pVLUbq
7MAmUr8G2dnDvaiDMR4wKuwmigyRir7naA==
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:06:29 2025 by rpki-client