Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/785ea448-9c88-36ca-91ff-51d2a5a37423.roa
File:                     785ea448-9c88-36ca-91ff-51d2a5a37423.roa (raw, json)
Hash identifier:          Dn+pQAc8Fpb0Y+pH0NGai6IPa4oII2eY1V15+NEgF6s=
Subject key identifier:   7A:D0:FA:7B:C9:9A:3F:A0:26:CD:3A:A4:F6:7A:C2:58:80:27:49:1A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584905B6B98C46D2F19EFC8C1CC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/785ea448-9c88-36ca-91ff-51d2a5a37423.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.51.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:b9:8c:46:d2:f1:9e:fc:8c:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=7ab719d8-f625-48f4-b88b-fdfba5b34049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:38:a3:c1:b4:76:96:bc:d7:18:d2:dc:aa:
                    63:db:42:4e:be:64:41:12:3b:45:e6:1a:46:32:fd:
                    af:17:70:e2:8b:17:14:4e:3c:6a:10:af:bd:61:0a:
                    bf:5a:0e:4a:b2:2e:56:f4:56:5f:a0:74:25:d2:c9:
                    dd:8f:5d:6b:70:77:e4:4a:32:2f:ea:b2:4f:29:01:
                    71:1d:cb:bb:52:4a:1e:9d:88:6d:fc:4d:b1:d8:c2:
                    af:b9:f5:00:30:08:52:05:cc:c4:2c:20:fc:74:40:
                    38:91:a0:93:06:19:aa:0f:81:2e:56:67:bb:ed:7c:
                    54:9c:51:36:14:90:30:69:be:d2:7b:c0:80:dc:91:
                    36:74:80:e3:c3:37:0a:07:88:5b:03:24:77:b4:d5:
                    71:e3:de:6f:74:b9:25:59:dd:73:25:ec:12:c5:ee:
                    3e:b4:ed:b5:4a:98:2d:1d:35:be:ce:43:1d:ae:4a:
                    d8:28:51:ef:3f:22:fd:93:2a:a7:df:b7:aa:64:5d:
                    44:18:c7:2a:18:36:cd:29:5c:d2:dc:86:b9:dc:dd:
                    7e:1a:19:8d:61:55:83:4d:c0:b7:ae:f9:ad:44:6a:
                    ef:d6:46:01:47:34:c2:6b:1f:5c:7a:4f:a1:c3:83:
                    17:90:37:b3:5c:2f:02:e5:a6:57:da:d8:2a:a7:91:
                    ee:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D0:FA:7B:C9:9A:3F:A0:26:CD:3A:A4:F6:7A:C2:58:80:27:49:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/785ea448-9c88-36ca-91ff-51d2a5a37423.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.51.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:f9:22:bf:84:7d:cb:c4:01:1f:fe:87:47:fb:2b:d7:e2:3f:
         9b:93:16:65:55:98:c0:35:61:09:e0:de:57:9f:a1:92:08:ef:
         b9:25:68:0c:3e:41:33:af:a2:f4:86:e7:80:16:a7:1d:b2:62:
         f9:80:c1:88:f6:8c:96:73:97:f7:08:cd:df:78:fc:43:2d:2b:
         ec:d2:db:09:d2:af:02:4c:95:0c:b2:f5:a0:2e:46:ea:a2:94:
         d7:38:01:13:33:c3:0d:95:51:f2:aa:aa:c2:d6:f3:a7:f0:4d:
         c7:b6:d7:81:0f:72:d4:44:d4:ce:45:b3:b6:76:a5:27:86:42:
         cc:79:17:c9:1a:03:19:d3:35:ce:57:3b:fd:3e:51:a5:25:5a:
         13:22:0c:27:45:34:68:52:7e:7f:5c:cf:01:40:58:04:3a:f3:
         76:9b:7b:20:43:fe:62:e3:ec:70:ef:a1:24:d6:6a:cb:d0:47:
         5c:bf:98:55:88:34:2c:c4:2b:35:11:44:6c:44:0d:77:c4:89:
         26:79:e2:94:54:16:7b:3d:f4:0f:3d:a9:ad:0d:4f:bc:96:03:
         08:b6:21:fd:9c:8b:e9:67:92:85:c3:28:9e:1c:b9:3a:0c:2c:
         83:b3:ab:97:8f:05:32:b7:54:c6:b7:b7:f4:2d:1e:84:9b:a3:
         9d:04:63:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:49:23 2025 by rpki-client