Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fcd0f538-be21-3f37-8b95-da810b4284fb.roa
File:                     fcd0f538-be21-3f37-8b95-da810b4284fb.roa (raw, json)
Hash identifier:          i8XXAWVwyb54lArFDSNUJB9rkpZRs//0h8YjiUynXwg=
Subject key identifier:   D5:47:FD:59:B0:CC:9F:15:11:DD:97:0F:46:22:D0:8F:9B:1D:79:AB
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848C58005A6C60D7893DE5E23C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fcd0f538-be21-3f37-8b95-da810b4284fb.roa
Signing time:             Tue 04 Feb 2025 13:59:05 +0000
ROA not before:           Tue 04 Feb 2025 13:59:05 +0000
ROA not after:            Mon 05 May 2025 12:59:05 +0000
asID:                     30036
IP address blocks:        2604:2e89:9400::/38 maxlen: 38
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:05:a6:c6:0d:78:93:de:5e:23:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb  4 13:59:05 2025 GMT
            Not After : May  5 12:59:05 2025 GMT
        Subject: CN=58284f82-ba26-40c6-92b1-937f23d3c893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:8f:4d:b9:14:3b:76:99:10:16:3f:08:09:40:
                    3a:da:26:83:59:af:4a:f6:b3:ee:2c:4c:92:e1:62:
                    b4:f5:e3:51:d1:45:cc:e4:31:e5:89:1c:84:3f:34:
                    aa:bc:36:17:79:cf:9b:8f:f6:c9:59:2b:c6:82:8d:
                    bc:26:d4:32:99:91:04:ee:ca:1c:73:0a:51:33:ef:
                    fd:cd:69:92:8b:96:8f:1c:a5:88:99:7f:bd:e1:c4:
                    52:51:43:cb:f2:86:fd:c3:1c:11:4b:f7:4c:f2:93:
                    02:68:e9:a1:82:72:b4:1f:32:61:27:69:60:f7:d0:
                    03:56:cf:ef:53:52:a8:d1:29:d4:72:7c:43:85:8c:
                    0a:ea:09:65:dd:5e:82:11:cf:a6:f8:e1:a4:08:76:
                    0f:6b:32:c8:5d:57:b6:ac:3e:fa:7b:1e:7a:f2:27:
                    c2:5d:05:e7:41:94:34:a4:b5:4f:d5:d5:91:2c:55:
                    e0:ec:0c:bb:3a:6c:e8:d4:bc:78:0f:fe:9b:a1:34:
                    7e:8b:80:e8:e2:bc:e7:29:de:b5:0e:a4:b1:c1:68:
                    56:b9:0d:58:eb:e3:34:44:ed:15:53:e1:9e:09:de:
                    5a:e1:27:80:7b:e7:38:43:17:10:32:70:c5:69:c3:
                    bc:fc:b2:61:8d:cf:8d:70:a1:50:dd:ce:78:5a:57:
                    62:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:47:FD:59:B0:CC:9F:15:11:DD:97:0F:46:22:D0:8F:9B:1D:79:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/fcd0f538-be21-3f37-8b95-da810b4284fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e89:9400::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:4f:ee:f9:e8:c2:d2:38:20:c4:6c:0b:0a:c8:d2:74:cb:db:
         49:59:3d:c1:b5:bb:80:d2:63:1b:6e:d1:7d:46:fa:93:8a:31:
         ff:e8:42:e4:c6:3f:6d:3f:b9:a3:6e:bd:3e:fa:79:bc:95:0a:
         9b:ac:58:e5:0c:a6:ba:36:96:31:14:ef:55:19:37:a9:4d:31:
         39:65:b2:a7:3c:82:dc:20:38:60:70:6a:5d:a9:75:d3:4e:4c:
         ce:8d:0c:2f:53:92:dd:85:ae:ca:59:90:f2:56:ed:e0:fc:e4:
         e8:81:c9:56:be:e4:d8:10:e3:ee:ff:0f:74:6f:80:1c:93:d2:
         2f:d8:65:7b:eb:c4:ce:57:f0:23:a2:5f:5c:c9:b7:fa:d5:a8:
         8b:83:ba:16:c6:1b:62:59:e4:0b:b7:1a:30:24:93:8a:7c:b3:
         d4:85:e4:16:c3:7a:3d:ee:41:fb:65:33:37:04:7b:34:5e:8b:
         ba:70:1b:5b:16:59:61:45:f5:aa:f3:e3:76:7e:d4:35:4b:0a:
         a4:2e:c4:ea:d9:4e:91:8e:cf:93:e2:52:39:d7:18:72:2f:ea:
         ef:d9:ee:4f:ab:05:19:59:36:bd:eb:cb:5d:ea:5d:72:03:d7:
         60:2a:61:6d:d6:90:72:ba:9f:bd:36:10:c1:4d:1b:ed:4f:12:
         51:1f:a1:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:16:51 2025 by rpki-client