Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f2b900f-0da8-34aa-b670-9f9c649ed879.roa
File:                     5f2b900f-0da8-34aa-b670-9f9c649ed879.roa (raw, json)
Hash identifier:          dl3GH9w/cEFWv1aLuVoBwZrQ8my1bwFtA/NfneGv5eo=
Subject key identifier:   B8:66:97:30:D2:65:CA:23:67:3F:DE:86:94:E3:EA:A7:D9:85:A1:64
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848940514C538F56C634CF450C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f2b900f-0da8-34aa-b670-9f9c649ed879.roa
Signing time:             Fri 17 Jan 2025 20:36:46 +0000
ROA not before:           Fri 17 Jan 2025 20:36:46 +0000
ROA not after:            Thu 17 Apr 2025 19:36:46 +0000
asID:                     19527
IP address blocks:        34.2.76.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:05:14:c5:38:f5:6c:63:4c:f4:50:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jan 17 20:36:46 2025 GMT
            Not After : Apr 17 19:36:46 2025 GMT
        Subject: CN=9e49c364-c3c1-45a6-8a00-27d265a251f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a3:90:8f:bb:4f:da:a7:53:51:c9:69:2f:ca:
                    ee:f4:76:c4:0e:0a:ba:cd:6f:29:c8:f5:ed:4e:4d:
                    a2:6e:0e:d1:f9:1d:f6:da:28:bd:0e:69:db:dc:34:
                    ad:f3:1a:9c:73:e7:33:57:d5:5c:a0:49:3e:15:2e:
                    bc:01:10:18:9d:48:68:de:60:60:b4:14:7a:93:fe:
                    b7:c6:40:90:ca:5b:5c:f7:ea:3e:f7:01:d8:e0:c4:
                    06:0a:33:37:3e:a8:90:ce:60:8f:96:df:be:a4:26:
                    e9:b6:30:bd:ea:8d:a6:f6:8f:cb:05:50:51:ca:27:
                    09:d1:d2:34:05:62:13:bc:ff:48:26:da:01:3c:9f:
                    b0:4b:76:f3:67:32:cb:18:bb:14:09:e0:72:7e:a3:
                    40:89:1c:8d:f7:3f:e2:cf:c3:51:cb:57:f0:95:3e:
                    71:fa:a0:1b:6a:02:41:3c:8e:7b:68:7a:84:65:b1:
                    f9:57:cc:d5:24:c6:88:e1:bf:54:a1:1e:7f:0a:35:
                    07:d7:ab:4e:1c:de:1e:8c:4e:8f:31:7d:74:b4:c4:
                    70:c8:ce:4d:2a:79:0f:2e:0c:61:9e:e4:37:d0:67:
                    02:bf:e2:6a:1d:e6:fe:2b:8d:d9:9a:0d:84:cb:af:
                    8a:92:45:8f:27:97:ef:03:b6:bb:42:87:73:08:5e:
                    57:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:66:97:30:D2:65:CA:23:67:3F:DE:86:94:E3:EA:A7:D9:85:A1:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/5f2b900f-0da8-34aa-b670-9f9c649ed879.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.76.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:63:d8:79:01:77:a2:78:ef:ea:79:d0:05:11:b7:b9:e2:89:
         da:e7:ba:51:d9:29:d5:04:4f:a2:c0:c7:9a:ed:50:af:ec:3d:
         7b:5d:39:23:70:4b:87:17:8f:fc:06:0e:8e:7b:d3:38:d0:bd:
         fd:23:d3:ca:29:04:44:68:56:ca:cc:6b:9f:09:4d:90:ef:28:
         13:ed:41:c4:6f:c5:dc:9d:3e:67:e4:ba:48:7c:4b:bb:dd:de:
         a9:0a:bd:fb:18:d9:82:e1:51:57:c9:04:c3:2b:5c:2e:a1:90:
         9a:05:f2:cd:8c:49:42:eb:f7:fb:40:8e:c0:7c:be:2b:c5:91:
         3a:9e:7a:06:21:5f:3a:e2:bb:b1:59:06:41:56:03:eb:01:f3:
         62:15:73:db:90:9c:e9:04:7d:3a:06:1a:4a:d9:95:73:00:25:
         8f:41:54:ce:70:d4:49:3c:6b:1f:76:a5:f1:47:5f:c6:23:1f:
         b7:a0:de:49:e6:c4:40:9e:67:f2:4f:e1:97:bd:be:54:e4:82:
         ee:98:0b:fb:33:bb:c1:28:37:c1:4d:9f:98:88:49:13:96:ff:
         08:74:82:5a:f7:d0:c1:86:1e:e3:54:7b:01:45:81:08:2c:32:
         98:1b:b3:c9:aa:e0:86:fa:9b:15:67:d7:e6:b1:82:f7:bf:ce:
         e7:1e:72:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:06:00 2025 by rpki-client