Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/719b1d9d-81b4-3cee-8534-977aa1ca7300.roa
File:                     719b1d9d-81b4-3cee-8534-977aa1ca7300.roa (raw, json)
Hash identifier:          mqvAk/Xus1j2kkdPTgZjPTuGWN6hfVcGwk2Z8OWW13w=
Subject key identifier:   90:50:4A:47:01:53:62:EE:23:0C:28:50:25:A5:C1:1D:13:08:B9:2F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84C2298EF578B27297D3980
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/719b1d9d-81b4-3cee-8534-977aa1ca7300.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        35.221.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4c:22:98:ef:57:8b:27:29:7d:39:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=50a5c093-de11-4a00-8ac4-72118b6e2b06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3a:01:b3:19:69:c9:bf:5c:b1:ad:6c:9d:fa:
                    5f:50:25:88:08:2e:6a:e9:36:34:81:b6:39:08:28:
                    e8:e5:7c:43:a0:bb:4d:b0:94:c8:9d:3b:26:9e:d6:
                    dd:18:79:34:c3:41:a8:1c:30:51:9a:26:a4:77:83:
                    d6:4e:02:0c:b0:d7:46:91:8c:4f:97:c9:92:96:2c:
                    a2:86:01:5b:c2:e4:93:da:18:ca:ab:a0:53:37:7e:
                    c9:18:da:f6:91:98:77:4b:8a:3c:76:6a:2e:12:1d:
                    89:a3:60:0d:97:d8:cf:a4:43:4e:8e:2d:b3:e1:da:
                    a3:c0:61:64:5f:4f:61:4d:31:c9:4d:f4:d1:7c:ae:
                    77:50:b8:fe:5b:fe:f0:18:52:7e:81:71:0a:11:1e:
                    5f:3a:7e:a4:7e:b0:be:d7:bf:35:2f:c1:a5:5e:a1:
                    ef:86:54:01:ba:58:a8:1e:5b:99:b9:87:25:39:92:
                    13:d1:be:79:53:e2:db:c3:28:ff:10:2a:46:a9:13:
                    a1:97:32:2d:b3:71:fd:28:e9:db:76:a6:31:c6:aa:
                    cd:d7:65:cd:15:a1:45:95:3f:4f:a4:73:aa:a6:9e:
                    b0:29:09:dc:6d:0c:b1:3f:01:ff:b3:e7:a7:b7:11:
                    27:c4:80:db:8b:dc:69:88:0b:6c:7f:da:5e:49:0e:
                    ac:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:50:4A:47:01:53:62:EE:23:0C:28:50:25:A5:C1:1D:13:08:B9:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/719b1d9d-81b4-3cee-8534-977aa1ca7300.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.221.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:09:79:5a:33:b6:74:0a:c2:c5:ab:66:a9:46:6c:dd:d1:f8:
         dd:d3:20:05:62:af:b9:6e:dd:af:f6:0b:e0:e5:76:64:4e:35:
         4b:ff:0f:6f:df:3f:7a:21:48:30:c4:24:f9:9c:a4:04:cf:15:
         83:10:77:45:f5:08:28:2e:1e:23:1a:ee:bf:ca:72:00:18:23:
         48:d6:ac:4a:0c:8d:a0:92:75:0e:73:78:af:cc:13:a1:44:fe:
         f6:af:f8:e0:f7:40:d5:d2:01:01:0b:a8:26:dd:9b:ea:69:d8:
         15:9f:a3:21:ce:29:ef:75:77:06:a3:c9:ca:58:19:b2:18:c1:
         57:47:0c:18:93:02:5d:f6:1e:b8:5a:3a:cf:88:22:ef:08:51:
         fa:4b:31:fa:06:e6:8f:a4:fe:67:eb:92:cd:a6:64:e3:3d:0a:
         ce:90:ac:47:a8:4b:9d:57:45:77:bb:d2:0d:a2:69:af:8c:a3:
         65:23:1a:e4:57:34:64:38:a8:2c:0c:23:5c:1f:e9:c8:6a:f9:
         ce:7d:ef:b2:a3:26:31:76:0d:3f:93:b1:82:db:a7:42:4c:f2:
         b5:67:34:4b:95:67:9f:70:dc:97:b8:3e:65:04:49:54:e5:d5:
         ac:a6:b0:c2:d9:3f:98:31:f2:64:1e:4c:76:80:fa:b1:af:35:
         d7:1f:a4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:14 2025 by rpki-client