Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ae4f00e-51fb-3b0c-affd-5cf626d42772.roa
File:                     2ae4f00e-51fb-3b0c-affd-5cf626d42772.roa (raw, json)
Hash identifier:          Y51FVOtwiFQ6vtO14dZ2fKLe59zSA+kOaqYSp/t6RMU=
Subject key identifier:   39:8D:4F:DE:D7:74:05:B8:20:71:23:3D:4C:1D:2F:1B:1B:ED:C9:D5
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848AF2BBC62E21B8C2E2DC6FB80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ae4f00e-51fb-3b0c-affd-5cf626d42772.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        34.1.99.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:bc:62:e2:1b:8c:2e:2d:c6:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=de7630a2-09be-4277-82f5-46ff3361f08f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:09:01:98:3a:66:c9:c9:7c:93:b2:8a:8d:ae:
                    eb:f6:43:09:c3:df:79:82:1d:0e:87:e5:3a:ed:1a:
                    ac:64:a8:3f:75:98:30:92:27:be:4a:9e:9d:fd:95:
                    cc:4e:ee:31:2d:ac:8a:c8:8d:0d:8e:aa:66:06:72:
                    7d:44:35:f7:c6:61:1b:72:82:5b:9c:fc:d3:22:0a:
                    70:83:6e:7e:cf:c4:dd:97:ea:73:79:ca:7c:8d:c9:
                    62:f3:64:1d:be:07:27:4e:88:5d:e0:a3:a1:a2:86:
                    42:78:78:3c:4c:7e:27:eb:ef:a3:6e:90:7d:a1:95:
                    ba:d0:73:23:50:aa:60:42:0a:9a:4a:45:6a:84:c6:
                    e6:0e:5d:c9:15:92:33:b4:4c:5c:93:27:9d:75:52:
                    d2:b3:de:8a:ce:10:83:29:21:83:7e:f1:98:1b:3c:
                    76:05:81:fa:df:f6:1f:4c:7a:f4:e4:7c:81:31:44:
                    fe:54:1c:49:e8:ac:88:c6:5e:39:98:6d:e6:81:ab:
                    55:20:e3:7d:56:7c:e3:08:07:d5:81:27:49:ea:81:
                    3a:9e:6c:fc:22:87:78:49:ff:ce:e0:ec:a0:14:48:
                    35:ab:c8:3a:79:1e:35:ae:5c:a3:06:4c:fd:20:57:
                    7e:ee:70:00:1f:a8:25:a4:a4:21:c4:41:07:eb:41:
                    cb:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8D:4F:DE:D7:74:05:B8:20:71:23:3D:4C:1D:2F:1B:1B:ED:C9:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/2ae4f00e-51fb-3b0c-affd-5cf626d42772.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:d4:a6:13:6b:58:a3:f0:01:01:4c:c2:eb:20:76:c1:e2:6b:
         4c:19:11:d6:be:9f:f4:63:82:19:50:87:d9:3a:5c:99:29:78:
         12:f7:e7:3d:0a:35:43:1f:23:40:3a:93:29:64:dc:c6:49:f2:
         fe:98:a6:cd:d8:8b:3b:05:eb:47:46:0f:77:70:eb:15:48:ca:
         49:8e:2d:3a:d0:aa:1c:b8:6b:8a:81:67:ee:b7:96:75:64:c2:
         4a:ce:b6:8b:b4:10:af:52:3c:33:ce:55:65:a3:9a:13:73:fe:
         6c:1e:47:21:e2:04:c1:37:e4:66:ac:e5:40:b4:70:18:68:30:
         2e:ef:5d:2c:e8:fb:71:99:0b:bf:95:a6:91:12:06:37:cf:ec:
         53:09:22:67:10:06:55:ba:ed:12:f9:67:c9:3d:1e:82:17:4f:
         a9:a3:ea:54:b9:6a:bb:53:e3:e2:d7:cb:4c:ea:64:c4:e8:53:
         d3:d1:0b:96:d3:9f:76:9e:12:1d:84:d9:ca:e2:27:a3:eb:4b:
         13:a2:59:a6:4d:9e:59:3c:fb:7f:d2:bd:1f:cc:48:5f:72:99:
         a6:11:71:e4:9b:ad:20:4d:55:6f:60:e4:18:35:a2:f5:1a:55:
         11:4d:65:34:89:08:2d:0f:01:24:4c:55:23:25:65:0f:cc:95:
         e0:88:96:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:31:40 2025 by rpki-client