Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/689718e4-fe7f-31c6-86a4-0597124eb58b.roa
File:                     689718e4-fe7f-31c6-86a4-0597124eb58b.roa (raw, json)
Hash identifier:          lWCt1xOboGkQ+tzLxVuYICCR3t4O5N+iIle8N90zr+o=
Subject key identifier:   28:92:A6:E5:1B:C0:49:1E:75:C0:35:59:55:9B:6B:58:3A:E9:2A:C9
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BD8E9FF25881253126C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/689718e4-fe7f-31c6-86a4-0597124eb58b.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.93.48.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:d8:e9:ff:25:88:12:53:12:6c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=920cef72-9044-460d-88af-12aeafaad7d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a7:f9:aa:9d:2a:d1:5d:a5:78:0d:c8:04:c3:
                    60:b7:7e:bd:b3:8b:ba:75:27:f6:ce:19:74:8e:fd:
                    ed:57:8b:b8:f2:f9:82:e0:08:6d:78:92:03:65:c2:
                    d2:40:c5:b3:4e:cb:db:fc:0d:25:f9:44:3c:7f:ed:
                    d2:38:e0:2e:9f:6a:32:6d:26:66:6e:be:c5:e4:1b:
                    21:40:77:60:79:a5:01:b5:0a:2a:95:08:95:cd:18:
                    da:28:e8:9b:c1:1e:1a:df:32:8d:10:dd:ba:eb:7a:
                    bd:24:05:1f:29:3a:5c:06:f7:16:af:18:c2:6c:eb:
                    bd:7f:d1:9f:66:67:1d:42:58:96:a9:ef:b0:1a:c2:
                    b8:64:50:1f:fa:7f:f0:43:75:cd:b3:4c:30:35:d4:
                    61:4e:2a:bd:0c:02:c0:34:ae:99:18:74:7d:f1:cf:
                    40:d5:70:74:3d:28:52:28:87:c6:a6:b6:d3:65:c0:
                    78:dd:9c:f6:74:e2:b6:35:62:e8:10:ec:54:3e:5f:
                    8e:95:80:a1:ed:67:26:15:73:cc:be:7f:27:36:84:
                    ba:7c:27:d9:8f:fe:15:ca:b2:ed:96:db:80:50:4a:
                    91:a4:98:45:1f:9a:cc:46:fa:78:36:6d:5e:85:fb:
                    ad:23:06:b2:0f:f9:ad:b1:64:25:c7:8c:9e:e6:e2:
                    63:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:92:A6:E5:1B:C0:49:1E:75:C0:35:59:55:9B:6B:58:3A:E9:2A:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/689718e4-fe7f-31c6-86a4-0597124eb58b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.93.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:49:76:93:40:38:08:1b:81:7a:fd:03:41:64:91:54:79:24:
         62:62:f5:58:78:2a:e9:b2:e9:03:16:97:50:f1:7e:5b:ac:7a:
         15:83:ef:f3:58:0f:b0:24:f3:c2:30:75:c7:43:ec:84:21:40:
         f2:cd:f5:6a:83:e8:7d:8e:0e:e4:d9:f1:1d:b8:63:6d:a3:4f:
         98:5e:ec:7d:fe:2c:8b:70:67:54:d5:16:f2:34:c8:ea:b6:b6:
         a4:c2:d5:29:dd:b6:4d:5e:43:8b:d6:c1:c0:c1:3e:09:d7:f5:
         c2:ce:62:a1:71:b7:fb:c5:a6:92:ee:ac:62:b0:90:b9:e5:90:
         66:58:b5:f7:90:0f:ab:38:40:b2:f5:37:3e:13:cd:77:00:59:
         73:69:7a:4c:c6:25:cf:6e:69:d7:a2:49:70:be:cf:09:1d:e6:
         75:2b:1a:db:52:dd:38:40:90:9f:74:23:8a:5d:36:c8:59:6d:
         dc:f1:ae:00:d1:77:16:ab:8a:3f:7d:20:bf:06:fa:6e:c9:cf:
         7e:18:54:b7:72:9f:71:e0:62:d3:3c:6b:eb:00:31:94:8c:e8:
         37:71:8c:8b:41:89:68:a4:95:7c:04:01:2d:a5:ed:51:a9:a4:
         84:cb:e4:2c:53:6f:9d:47:23:f0:d5:9b:e3:d7:ba:6c:e9:83:
         5d:ca:2d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 18:09:36 2025 by rpki-client