Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50ce66c1-c126-3ced-b460-fe46ff156087.roa
File:                     50ce66c1-c126-3ced-b460-fe46ff156087.roa (raw, json)
Hash identifier:          yn/Ey2vnU9r7R0TUXBuME+Y8oEilnOE+Am6TWdmrQ3c=
Subject key identifier:   7B:11:4B:84:B0:0B:A6:FB:BF:FF:E6:38:CA:B8:76:0B:AE:36:E9:3C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C5822740BF3999D710CB40C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50ce66c1-c126-3ced-b460-fe46ff156087.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     396982
IP address blocks:        34.107.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:27:40:bf:39:99:d7:10:cb:40:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=69d69aae-7138-4d1f-8c6f-10eaf97b8118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4d:86:bb:84:70:36:c9:62:3a:34:0a:8b:c5:
                    bd:1f:fb:10:33:d1:bc:e1:d5:03:f0:0e:77:24:15:
                    e8:4b:ce:c4:2c:90:fa:31:2b:78:8c:39:79:4e:a5:
                    49:19:b2:5e:79:0c:30:4b:bb:f3:57:e3:43:29:05:
                    d1:44:49:29:bb:81:c4:58:44:05:8a:9d:4e:44:a6:
                    ce:4c:7b:68:8f:6b:a0:6c:01:67:43:42:2b:cf:9e:
                    e7:76:3b:87:63:d3:3f:f9:65:a5:7d:b1:26:64:82:
                    b2:93:37:3d:e2:55:f2:ea:06:65:6b:5c:55:a4:d8:
                    57:0f:36:84:44:45:ef:7d:ca:2e:85:47:a4:dd:72:
                    2d:d9:e7:87:ca:94:f0:f6:54:46:8a:fb:9a:4f:36:
                    90:7c:a5:30:12:e1:80:32:9a:ff:f1:1c:ea:c1:60:
                    50:c5:ed:de:a5:1e:a1:24:97:b9:b8:62:c7:42:04:
                    aa:5a:f5:c0:14:fd:ee:cf:72:5b:61:63:47:cc:38:
                    f6:c6:83:84:eb:6b:51:92:07:38:6b:e5:be:4d:df:
                    42:dc:a2:35:73:eb:a7:7c:93:43:ad:17:a6:9b:63:
                    0a:95:71:de:bb:c8:fc:bb:37:ad:af:cd:59:be:02:
                    71:fc:77:4b:dd:fc:ef:df:52:39:6b:bf:34:87:04:
                    d9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:11:4B:84:B0:0B:A6:FB:BF:FF:E6:38:CA:B8:76:0B:AE:36:E9:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/50ce66c1-c126-3ced-b460-fe46ff156087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.107.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:88:54:7e:46:4a:6b:83:8f:24:f2:c1:c1:4b:2d:6b:3c:12:
         d3:2e:e0:61:d1:48:db:d5:26:4a:b8:b3:08:42:ce:4c:42:9e:
         8b:b2:68:92:18:13:bb:e9:7d:f0:75:c3:22:68:01:81:d3:f6:
         13:c6:6c:db:a8:de:e1:b4:90:67:33:c8:72:2d:0b:95:6f:07:
         2a:62:a4:57:60:79:a2:f7:8f:35:04:97:6a:86:7c:c5:13:23:
         39:ec:af:fa:81:10:5f:7e:79:8f:d3:79:60:fd:88:65:54:f7:
         c6:16:40:29:bf:be:f2:bc:10:16:37:ca:df:97:92:86:5d:89:
         69:31:03:5e:a7:60:1d:b5:24:18:19:97:65:7f:f4:7b:48:6c:
         d1:c6:c4:bb:81:20:72:2e:dc:d7:f6:d9:5d:f7:f9:1a:4b:31:
         ce:1c:b9:76:e2:41:ce:cb:6a:74:b6:1a:0d:28:05:af:f2:73:
         40:f7:72:9d:25:35:92:47:a3:6a:7f:f6:d6:42:62:5c:0c:ba:
         59:d2:55:e0:05:ba:ab:0f:07:f9:d9:ee:8c:24:e5:ba:78:85:
         ea:f4:fb:93:dd:2e:ab:6c:af:0d:29:ea:06:9c:27:03:46:48:
         f1:af:b0:d4:cf:45:d1:47:b0:09:99:a1:76:b5:d4:f0:6c:9e:
         42:55:bc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:40 2025 by rpki-client