Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0dad5b8e-2b6b-31fb-8d81-62875ac5a953.roa
File:                     0dad5b8e-2b6b-31fb-8d81-62875ac5a953.roa (raw, json)
Hash identifier:          KdGoSaNq2EuncGh1dFRbhcI5hFFF3RjkiEkpJm4kTxM=
Subject key identifier:   A3:4C:25:69:E7:5F:D9:6F:AE:08:A8:2F:54:2B:3F:CB:C7:4B:06:39
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84C10DA20C299FDD3EB8E80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0dad5b8e-2b6b-31fb-8d81-62875ac5a953.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        35.228.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4c:10:da:20:c2:99:fd:d3:eb:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=26197e03-c15e-4279-a2df-027a6b9d95e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b0:9f:b7:ed:6d:2b:33:7e:be:5f:30:c4:b5:
                    90:2d:05:b4:83:30:0a:16:2f:c2:7d:d4:cd:78:00:
                    06:f1:bc:d7:39:8d:e4:a7:53:8b:43:c9:95:e4:7f:
                    fb:cd:16:87:c0:e9:aa:29:f0:32:76:eb:49:52:d3:
                    01:da:32:4e:c2:c0:13:0b:99:ba:88:3a:b5:89:97:
                    90:f3:97:76:6e:95:59:97:07:7c:7d:14:e5:62:31:
                    0c:c7:87:f0:7f:26:3c:56:a7:7a:17:88:f8:cc:a1:
                    d2:58:7a:29:1a:6d:09:01:0d:f5:e1:a4:0e:0a:d2:
                    fb:58:3f:fa:8f:9a:94:b6:f3:91:4f:07:26:e2:2d:
                    6a:37:c1:ef:fa:93:99:96:e7:ad:96:ab:69:0e:da:
                    a7:c9:8e:ac:cf:14:6f:6f:eb:04:b3:70:07:f5:47:
                    24:36:b7:4b:2f:3a:3e:72:f0:88:40:46:24:46:f1:
                    27:96:6c:65:8a:de:5d:25:df:98:0c:cd:af:f2:01:
                    5f:3a:6d:a7:1b:6c:6d:98:4a:e3:46:52:8a:e7:41:
                    eb:8c:8d:f5:85:1a:1c:85:fc:a0:dc:fc:89:58:d9:
                    35:a9:12:d0:14:e0:02:0d:78:00:c2:20:a8:d4:b8:
                    86:1c:c2:e2:f4:24:0c:a4:7b:71:5b:7b:7e:8f:8d:
                    fc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:4C:25:69:E7:5F:D9:6F:AE:08:A8:2F:54:2B:3F:CB:C7:4B:06:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/0dad5b8e-2b6b-31fb-8d81-62875ac5a953.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.228.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:41:56:64:00:36:0f:e3:3c:a2:d0:77:46:94:4e:29:7f:99:
         93:0f:0b:4e:cd:90:21:9b:5b:5d:87:93:98:16:3d:bd:db:d3:
         7d:0b:d8:20:39:ac:fe:ef:2e:b8:d4:22:6d:74:de:71:6f:1b:
         a4:07:32:ef:59:e8:31:6f:8d:6b:46:9e:d1:1e:bb:b9:2a:1a:
         aa:a3:50:01:64:d3:0c:58:23:9d:34:16:71:9c:82:24:03:4b:
         ab:b8:08:5e:9f:e4:a3:13:5b:5b:cb:16:73:9f:52:5e:02:16:
         40:3a:20:28:b5:4b:29:93:fb:91:3e:64:12:cd:c8:06:0e:40:
         3a:00:2d:06:b4:6e:b1:a3:9f:fb:39:62:bf:1a:4d:c6:6b:6c:
         3a:3a:4b:4b:f0:60:db:97:c8:28:c5:36:c9:36:f9:01:4d:ec:
         b1:81:b6:b4:b6:0a:a5:22:1e:29:82:68:84:a5:3b:78:b1:4c:
         fc:e0:70:dc:5b:1a:92:c2:33:00:e4:f1:cc:1b:65:ce:ee:79:
         a6:cd:d2:4e:29:73:ee:b8:10:a6:97:93:c0:87:e4:a9:d6:ed:
         27:4b:ac:b5:0d:2c:58:c0:6d:61:ad:81:c2:e8:53:ff:c5:c5:
         d7:52:da:90:fb:bb:c2:ef:d3:c0:32:3e:0f:c1:f7:50:f0:5f:
         5a:20:e8:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:23 2025 by rpki-client