Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1041cbe4-4f27-33a8-b3db-9218c3f6ffc6.roa
File:                     1041cbe4-4f27-33a8-b3db-9218c3f6ffc6.roa (raw, json)
Hash identifier:          hEPUDvzm37gOliZ+ze0g9GIUOY5dX5vAXujP3aZ9xTs=
Subject key identifier:   F9:D4:3A:9A:4F:F4:5E:AF:40:95:41:CF:36:32:7C:0B:EF:30:9A:9F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BD6C6FF9FFD041BF428C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1041cbe4-4f27-33a8-b3db-9218c3f6ffc6.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        34.98.148.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:d6:c6:ff:9f:fd:04:1b:f4:28:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=59ff3281-1acf-4874-901c-701145532bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:4c:d2:9f:33:68:20:d7:0d:94:24:e3:fd:63:
                    c0:a2:cc:97:83:1e:8a:06:3c:94:b7:e7:4b:3f:40:
                    d7:96:61:54:40:7e:77:b5:aa:da:2e:57:b5:1a:a7:
                    c9:76:8a:da:a1:01:89:64:63:28:90:b9:bc:9a:71:
                    00:9a:b8:21:f8:8e:40:9e:16:c2:b3:d4:2d:f1:3f:
                    25:36:07:00:a4:01:1b:5f:ef:c9:08:a6:92:0c:1e:
                    c0:f7:6e:7d:31:61:a2:f2:a1:d1:d1:d9:b5:4f:55:
                    ec:aa:41:22:0a:c3:5e:c7:05:fe:a9:2c:e8:fb:73:
                    06:7f:65:6a:dc:6c:93:0d:06:ac:82:c0:12:18:6d:
                    e8:f6:81:97:d8:c5:ba:08:6e:b0:33:f8:07:4b:f2:
                    33:82:0f:f7:aa:83:79:81:3a:84:85:a0:5a:2a:87:
                    31:d0:ef:d6:85:c7:d8:e4:ec:2f:ce:04:38:b9:d0:
                    e4:19:ff:44:5a:32:34:b4:66:f0:ba:d6:a8:04:4c:
                    79:51:62:90:ff:c6:e7:97:ff:6e:23:38:9b:bc:99:
                    fd:d1:8b:f5:78:c1:1b:ab:bd:1f:73:19:2b:bc:45:
                    d5:85:43:71:e3:72:2a:5f:97:79:e1:15:d0:92:9b:
                    d9:a1:f4:c8:a2:2d:bf:8b:76:d3:b6:c3:0e:7f:a6:
                    75:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D4:3A:9A:4F:F4:5E:AF:40:95:41:CF:36:32:7C:0B:EF:30:9A:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1041cbe4-4f27-33a8-b3db-9218c3f6ffc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.98.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:85:56:b9:15:a9:17:98:54:53:cc:5d:bb:4a:3f:4f:66:36:
         ee:46:cd:69:69:06:54:4b:f2:2e:59:0e:06:28:3f:bb:0c:cf:
         4f:78:67:fa:dd:3b:29:78:8f:57:f5:7f:30:b1:84:64:d5:ee:
         8c:d5:0a:27:51:a4:0a:6c:0e:54:3a:d3:27:fe:89:68:5e:f9:
         e7:4e:31:c6:98:65:32:c7:df:cf:41:c8:29:c6:67:66:65:d7:
         8f:cc:57:a0:10:52:c6:e3:b3:1d:4c:f1:82:1b:fb:81:2d:19:
         d5:3c:21:f7:6c:85:8b:fc:ff:59:98:69:b5:85:c4:bb:56:b4:
         80:69:f6:c7:4c:ec:c7:41:09:62:e5:b0:fb:6e:9e:a2:55:50:
         4a:e4:94:af:67:f6:07:40:db:14:3e:04:3d:74:07:cc:90:0f:
         c3:47:8a:30:29:7c:14:48:5b:7e:f9:62:85:3b:ae:7c:91:55:
         8e:91:9b:6b:48:b8:72:06:d5:19:28:fa:ac:1b:38:3b:c8:87:
         91:9a:b8:54:9e:99:4c:df:f3:2c:83:0a:f2:4d:3e:08:ab:59:
         ea:b2:f3:19:bb:25:60:be:8c:8d:d9:81:54:de:5a:ef:25:76:
         64:0d:4b:35:aa:07:3f:65:9c:b6:af:79:ad:31:ed:a2:ff:53:
         c7:89:b9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:13:33 2025 by rpki-client