Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06543ae8-3f5d-3b88-a4c9-eba0c6d5556f.roa
File:                     06543ae8-3f5d-3b88-a4c9-eba0c6d5556f.roa (raw, json)
Hash identifier:          UEsLhGsPeFSwhAEEkzGGlQtQQiJ25UjZLEO5HBEjk9Q=
Subject key identifier:   21:CF:15:82:8B:14:58:B8:99:74:96:C1:56:AC:52:2E:65:A6:44:75
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BFF177FB040F7BE410110
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06543ae8-3f5d-3b88-a4c9-eba0c6d5556f.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.65.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:ff:17:7f:b0:40:f7:be:41:01:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=285bab1e-8b49-4f32-96da-572ebfe335f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:39:18:38:56:1e:02:00:0d:35:33:c9:ac:3e:
                    db:93:09:ed:00:a6:f7:28:94:cb:a0:23:1f:df:05:
                    f5:06:38:1e:e8:69:e9:ae:ba:27:c8:1a:d8:4e:e0:
                    41:f5:cc:67:4d:33:03:fb:b2:be:d1:ea:e5:51:29:
                    61:3f:76:cf:09:09:cd:17:72:88:d4:98:e9:48:b5:
                    62:9f:ab:33:a8:0e:21:fc:f0:cc:35:2c:8d:23:dd:
                    48:05:19:31:30:1d:37:45:5f:fb:97:a2:f9:dd:6f:
                    c1:3d:10:f4:2e:3b:f8:c6:ad:3c:f4:87:5b:b5:6e:
                    99:ee:a0:18:2e:b4:0e:03:81:e0:97:94:14:6b:81:
                    0a:b9:64:4a:68:71:3a:dc:fd:63:bb:fe:56:ad:2f:
                    47:a9:de:d0:59:d4:28:0d:43:1a:9e:41:0a:6e:cc:
                    d8:9c:cb:95:13:2f:02:dc:f5:20:0e:55:dc:4d:42:
                    67:3e:48:7a:23:44:ce:7e:f1:aa:aa:b5:ea:a2:f3:
                    53:3c:f9:78:3b:15:a5:3c:d4:37:a7:2f:53:1a:45:
                    d3:96:9c:fa:3f:b1:e8:d4:d2:85:3e:63:70:b1:b6:
                    a7:6e:5a:b1:15:f4:22:a2:2d:d2:ef:a7:4b:56:a6:
                    ca:ec:d9:2a:91:3d:eb:3c:01:7a:b8:4f:cb:57:1a:
                    73:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CF:15:82:8B:14:58:B8:99:74:96:C1:56:AC:52:2E:65:A6:44:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/06543ae8-3f5d-3b88-a4c9-eba0c6d5556f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.65.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ad:63:ec:34:36:9b:d4:3e:b7:ca:76:df:c8:77:a1:7e:37:
         8e:8f:5d:47:b3:af:9e:ca:74:19:af:37:c1:31:af:63:93:df:
         97:f1:77:53:ce:5c:4f:0f:fe:73:b8:92:17:6b:1d:27:23:c3:
         77:2e:d5:2c:63:07:94:18:aa:16:9a:0d:35:b0:09:04:a7:ed:
         a8:1c:92:db:c2:91:93:50:60:e3:4a:38:de:a7:d5:d3:bc:49:
         16:9f:b2:dc:4d:b4:61:57:db:13:51:e8:7f:7c:16:90:be:79:
         9b:35:9a:55:c1:0f:83:fa:72:b9:61:7b:2e:3a:7d:63:59:a9:
         f0:b0:8e:10:e3:b0:57:89:c3:70:bc:2a:09:8e:af:8e:01:b4:
         9c:5c:a8:f8:67:46:e3:7b:9b:21:6b:e2:cf:a3:da:9c:9b:68:
         26:bc:e4:a8:d7:53:34:19:92:1f:1d:bd:0f:a8:ac:4d:37:d1:
         e9:d1:61:f2:95:73:0b:72:8e:a8:3f:82:da:54:e7:cc:9f:70:
         cd:8b:70:6b:aa:3f:d7:ce:7a:f7:d0:83:07:8a:13:27:8f:1b:
         dc:cc:09:70:5a:6d:51:03:32:a8:0f:9e:7a:c5:94:dd:e9:7d:
         36:98:9c:c7:5b:4d:f2:88:c1:4b:cf:55:e1:ff:b0:0e:96:4b:
         11:66:ca:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:17 2025 by rpki-client