Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d158d365-25c5-36f7-94d6-88f776424110.roa
File:                     d158d365-25c5-36f7-94d6-88f776424110.roa (raw, json)
Hash identifier:          NVPt+h9GO3gAcOgV8rptgnac2z7mdD8YbNlGBT8fssc=
Subject key identifier:   51:2E:00:17:4E:26:17:E4:F2:0D:A0:1A:AE:43:3D:9D:67:89:54:6E
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848B737AED840B64F21ECD05D80
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d158d365-25c5-36f7-94d6-88f776424110.roa
Signing time:             Thu 30 Jan 2025 11:12:01 +0000
ROA not before:           Thu 30 Jan 2025 11:12:01 +0000
ROA not after:            Wed 30 Apr 2025 10:12:01 +0000
asID:                     30036
IP address blocks:        2604:2e8c:dc00::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b7:37:ae:d8:40:b6:4f:21:ec:d0:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Jan 30 11:12:01 2025 GMT
            Not After : Apr 30 10:12:01 2025 GMT
        Subject: CN=98da0e12-aed9-4f30-8716-8045a1a735ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:69:a5:9e:04:32:3f:da:b8:5d:56:8b:02:36:
                    66:9a:23:ee:85:8a:42:ab:ee:a9:a3:80:e6:09:65:
                    05:34:82:e7:80:b2:9c:a1:c4:4d:ef:c2:b8:2c:41:
                    da:c9:70:04:db:b9:40:a3:a8:a8:dc:23:ce:d0:20:
                    53:c3:f6:c4:ee:7e:98:e5:a2:09:46:89:7d:d7:cb:
                    5c:f3:19:e6:13:53:db:4e:0c:d7:52:3f:65:fb:6c:
                    86:bb:4c:45:61:c0:22:13:87:20:99:5b:bf:64:33:
                    b3:c7:93:8a:0d:1c:d1:c5:30:b6:96:29:2c:ea:0a:
                    a9:a3:68:03:b0:a1:18:d4:5f:2e:b1:69:a5:94:9f:
                    ca:b7:53:00:e4:2f:b7:41:1a:15:92:16:58:05:25:
                    1a:8d:57:74:78:ed:1d:94:0f:08:47:3b:14:3a:9a:
                    df:b1:b4:ca:66:69:10:98:00:bd:0b:7f:7e:0b:f7:
                    c8:2f:d8:64:06:a6:f6:66:ea:f7:ff:51:e3:50:7c:
                    89:f8:1e:3d:6c:67:da:bb:84:95:51:6e:3e:29:1b:
                    2b:80:54:7c:06:19:4c:b0:d9:7f:74:0a:db:07:3c:
                    18:0f:9f:19:d8:55:75:59:05:7d:85:ce:b6:cf:4c:
                    b7:9b:c7:7f:66:a3:dc:11:2e:bf:28:3d:88:c7:05:
                    c6:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2E:00:17:4E:26:17:E4:F2:0D:A0:1A:AE:43:3D:9D:67:89:54:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/d158d365-25c5-36f7-94d6-88f776424110.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:2e8c:dc00::/38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:15:84:01:41:c0:40:eb:0c:3e:38:65:58:33:89:a8:c7:0b:
         87:8e:ad:0d:88:74:e3:99:54:ca:b7:95:71:a0:da:b5:3b:c6:
         7d:ee:56:05:78:18:b6:73:48:df:b7:eb:09:ff:23:d5:24:1b:
         72:82:80:d1:65:9d:0b:c3:49:f7:78:70:6d:51:2d:77:70:52:
         1e:4b:f1:99:d7:ca:3d:31:16:07:15:c4:8b:e9:ec:59:3f:81:
         b9:bd:9e:9a:4a:2a:91:b8:70:ae:4d:84:4e:ae:74:e9:ef:b2:
         9c:8b:ee:ec:06:92:27:52:d3:fc:d4:fd:93:1d:84:46:30:b4:
         a1:88:20:4d:42:f6:b7:f9:4f:7c:7e:eb:57:bb:9f:3f:7a:31:
         68:9f:4f:34:00:3f:4b:d9:d0:cc:60:d4:ec:d9:6c:23:87:c2:
         a8:de:af:8b:df:7b:5b:20:fb:6d:43:a4:04:70:71:25:15:2b:
         3e:7d:e5:f2:c0:c7:e6:b4:79:e8:1a:d6:06:1b:84:be:a2:bb:
         e3:c7:70:31:c1:a3:fb:59:18:0a:cc:6b:af:c9:4c:94:4b:82:
         3e:21:50:3d:61:b5:5b:1f:13:77:39:48:b7:71:27:a9:d4:25:
         07:dd:55:40:1d:62:1d:d2:c1:4f:cc:07:56:3c:e0:91:78:49:
         4e:e0:0e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 03:37:07 2025 by rpki-client on console.sobornost.net