Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/018f4f3c-f4f6-3e30-8482-ac90c722eba8.roa
File:                     018f4f3c-f4f6-3e30-8482-ac90c722eba8.roa (raw, json)
Hash identifier:          YJ77CBD/DdrT62qhAr2C9N03aEUxezAXt3dfYF6tpwA=
Subject key identifier:   3D:CF:66:8E:89:1E:13:6C:C5:D0:DD:9D:1E:02:CA:F8:B3:94:DE:C1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858489405919C3D7578B7AA1C36C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/018f4f3c-f4f6-3e30-8482-ac90c722eba8.roa
Signing time:             Fri 17 Jan 2025 20:37:45 +0000
ROA not before:           Fri 17 Jan 2025 20:37:45 +0000
ROA not after:            Thu 17 Apr 2025 19:37:45 +0000
asID:                     15169
IP address blocks:        34.2.76.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:05:91:9c:3d:75:78:b7:aa:1c:36:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jan 17 20:37:45 2025 GMT
            Not After : Apr 17 19:37:45 2025 GMT
        Subject: CN=27e869df-9dab-427c-92d0-bb0bda226fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:88:89:18:1e:a5:38:7d:52:16:b5:57:7b:28:
                    1b:e8:04:86:83:cc:88:25:b5:ca:c0:a0:ae:b0:e3:
                    9b:fe:15:92:2e:f1:4d:7d:e6:23:54:92:af:e7:e4:
                    60:5a:5a:56:48:80:cf:df:a0:85:d3:cf:db:3f:30:
                    15:38:b1:15:71:c9:42:da:e1:40:8f:97:4d:e0:06:
                    5e:54:60:83:ee:c1:4b:46:59:8f:ad:34:7a:55:54:
                    94:74:26:2c:d2:6f:38:03:de:b1:a8:64:a3:59:0b:
                    e3:9e:2d:40:38:0c:e9:6b:2c:d6:8d:e7:ee:12:dc:
                    5b:39:c5:5c:79:f3:db:56:fc:e9:16:f6:b8:6a:de:
                    ac:e7:eb:d8:d2:8d:85:69:e3:a3:d0:a5:ad:00:99:
                    7e:0a:db:ed:5b:5d:23:3e:6e:1a:a7:53:5d:1f:f0:
                    82:9f:89:a9:fa:e9:af:bf:52:42:f2:84:c1:c4:a2:
                    fd:e3:e0:cb:46:93:a0:0a:32:a8:a5:fd:53:b1:3c:
                    30:9a:93:17:5d:fe:67:dd:59:3c:7b:79:72:4e:5c:
                    52:4a:3f:24:3a:25:8c:82:81:ed:1f:ab:f6:f6:5a:
                    ef:81:0e:a4:d3:08:d0:43:51:8f:1f:4f:85:c2:53:
                    33:f0:25:fa:13:ea:48:d0:bf:8e:cb:e8:38:d3:d8:
                    46:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:CF:66:8E:89:1E:13:6C:C5:D0:DD:9D:1E:02:CA:F8:B3:94:DE:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/018f4f3c-f4f6-3e30-8482-ac90c722eba8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:92:af:bf:63:b2:27:73:7c:fc:c2:5c:28:99:90:49:b0:44:
         da:ae:26:06:65:b8:5c:df:08:87:10:81:6f:26:e7:93:f2:67:
         d7:21:d3:25:1e:5b:a1:f3:47:d7:08:af:dd:9e:54:fe:b8:f2:
         01:cf:cf:ba:88:d8:8b:56:23:7a:ea:64:e7:3f:98:a4:aa:c3:
         85:8e:0c:d1:a8:be:d4:0a:02:ad:90:ba:99:20:96:13:bb:ac:
         81:68:30:4b:b2:09:c4:4e:38:43:b7:82:0d:39:94:b7:c3:86:
         80:45:70:dd:80:12:6a:5a:eb:4d:dd:b5:19:d6:5f:c9:2d:13:
         e3:e9:17:6d:56:df:d7:e9:c5:5f:4c:97:c3:00:ed:7f:73:8b:
         3b:14:19:24:fa:19:44:10:3f:18:48:ff:8d:5d:af:c8:7d:36:
         df:c5:3f:2f:52:17:7b:11:69:aa:91:a5:0a:97:e1:ba:75:1c:
         cf:ef:86:44:eb:74:23:dd:ee:14:41:47:4b:83:6d:8e:46:65:
         98:08:2a:6c:a6:1a:84:91:4a:dd:87:db:fd:41:4e:da:59:62:
         7e:5e:4b:f7:0f:03:6c:64:c8:7e:ad:b2:93:f8:81:f7:3e:1d:
         17:e7:f4:e0:4e:9d:22:32:14:52:74:ae:9c:f3:a3:ea:e2:aa:
         fe:85:28:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:43:50 2025 by rpki-client