Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0574ea10-fc15-393f-ac15-b963e4e38d2e.roa
File:                     0574ea10-fc15-393f-ac15-b963e4e38d2e.roa (raw, json)
Hash identifier:          nLLz09U72vJM4hj/4/oYIVR6f7QakaXr0BFXYEeyvuI=
Subject key identifier:   6C:F1:23:2D:D0:FA:BF:38:00:B7:FF:36:0F:F6:FE:F4:DC:C0:F5:20
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858492D91FC47A35F973CD79748C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0574ea10-fc15-393f-ac15-b963e4e38d2e.roa
Signing time:             Thu 13 Mar 2025 20:39:21 +0000
ROA not before:           Thu 13 Mar 2025 20:39:21 +0000
ROA not after:            Wed 11 Jun 2025 20:39:21 +0000
asID:                     214609
IP address blocks:        34.3.192.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2d:91:fc:47:a3:5f:97:3c:d7:97:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Mar 13 20:39:21 2025 GMT
            Not After : Jun 11 20:39:21 2025 GMT
        Subject: CN=b9d1f289-2bdd-481c-b22c-e99ac9d91e51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:71:0a:f8:ee:e8:88:21:23:b2:2f:10:41:21:
                    30:59:12:d2:db:64:81:91:1b:fe:c7:b1:8a:e0:7a:
                    a6:2f:e8:59:b4:a5:11:19:a1:ce:86:58:ec:bf:aa:
                    99:bc:de:91:35:86:a2:88:b8:fe:55:61:72:df:08:
                    cf:a6:86:95:07:2a:0e:6a:7e:93:ac:de:4b:4a:a4:
                    27:bf:99:2f:22:4b:13:6e:cd:93:01:b0:b3:1a:14:
                    f3:51:da:73:83:8a:65:10:8b:68:f5:7a:25:02:c7:
                    3a:66:37:7c:42:e3:23:ba:4b:17:9a:69:fc:a1:68:
                    89:04:85:56:b9:f6:10:5c:af:dc:9a:1b:04:2f:b7:
                    61:78:87:fd:61:61:1e:cc:c5:ae:1d:8e:17:88:54:
                    a2:78:67:ad:d8:c2:51:15:c8:68:08:14:18:97:30:
                    cc:ed:df:06:20:12:a7:61:17:f9:f2:67:26:98:aa:
                    80:f5:2a:3f:73:aa:0a:40:78:2a:14:a5:da:39:d3:
                    0f:15:47:bd:85:42:d9:26:cf:64:80:d8:ea:bb:42:
                    cc:11:f4:bc:45:50:81:b6:93:6f:17:40:1f:eb:42:
                    87:f7:cd:47:dd:e3:82:34:79:7b:3a:f4:e8:5f:fd:
                    cb:71:9d:e4:7d:35:0f:18:d8:72:ba:25:f0:8b:ad:
                    ae:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F1:23:2D:D0:FA:BF:38:00:B7:FF:36:0F:F6:FE:F4:DC:C0:F5:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0574ea10-fc15-393f-ac15-b963e4e38d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.3.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:cf:a3:b9:2d:58:d1:3c:a4:69:fe:86:18:6d:ad:41:2c:04:
         f7:b9:de:43:39:47:a1:c3:d1:ea:46:96:61:9a:e4:11:75:89:
         32:08:3d:02:fd:59:18:aa:d4:26:76:ee:04:45:c6:c5:d1:83:
         41:21:db:33:f3:88:69:71:b4:7d:cb:98:11:bc:ea:82:cc:18:
         3a:34:58:1f:be:e2:46:bd:a1:08:c2:38:96:a3:cb:d6:f7:fd:
         e1:76:16:60:9f:e7:ef:cd:00:b1:51:99:59:a8:d6:7e:d7:58:
         16:f9:91:ef:a7:58:b0:08:07:1d:97:74:d5:7a:4f:6c:e7:23:
         73:1f:ed:42:22:32:2b:06:75:55:e0:19:d2:3e:24:ab:30:08:
         13:4a:f6:e0:36:8e:5a:5c:a6:c1:e2:76:de:84:36:b3:5a:98:
         ee:ac:a4:39:83:d8:47:cc:71:2d:33:d0:2e:3d:9c:db:58:95:
         8d:1e:69:e4:a5:2a:f4:b5:af:4f:c5:5f:1a:54:af:b6:e5:b2:
         16:69:ef:bc:2e:9d:a5:58:c6:72:8e:db:b3:76:c6:98:bb:90:
         f1:99:59:20:33:c8:6a:8f:95:58:17:fd:78:49:59:60:6f:ec:
         8a:47:82:1a:40:c0:15:12:63:e4:e8:f8:75:25:e7:de:6e:a4:
         16:e6:c1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----