Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d8a5c1e-5065-33a8-9cc6-d30cf381a8da.roa
File:                     8d8a5c1e-5065-33a8-9cc6-d30cf381a8da.roa (raw, json)
Hash identifier:          om+oVuEMpsT93lZIVe5gK1T0YzFvNXuZ0Su4333cpnQ=
Subject key identifier:   F3:34:EC:80:64:D0:F6:1E:BA:78:85:2D:D7:78:F0:97:02:7F:7F:3C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BD616D4204DEB5448AF00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d8a5c1e-5065-33a8-9cc6-d30cf381a8da.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.70.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:d6:16:d4:20:4d:eb:54:48:af:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=04f72722-6ef5-458d-b9d2-edf94859c4b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0a:57:81:1d:17:22:e8:82:36:63:40:65:ce:
                    66:cf:c9:58:1f:ce:22:45:80:3c:7d:bd:24:ee:ac:
                    80:11:9f:81:de:d8:d9:62:cd:a0:cf:86:b6:9e:aa:
                    7c:d9:d6:13:2a:05:a5:a6:5b:09:9b:3a:36:1b:78:
                    5a:f2:b9:af:77:17:1e:6a:8e:2f:13:7b:3b:47:fc:
                    a1:0c:8c:0f:1e:42:7f:58:e9:3e:da:27:4f:8b:94:
                    38:8c:47:57:11:a4:19:ca:a7:29:47:de:d4:3b:18:
                    5b:79:a3:a2:56:80:51:f6:70:6c:7a:d9:89:10:5e:
                    5a:06:93:aa:70:c8:e1:da:2b:1f:a4:e4:5f:68:42:
                    f6:6b:ab:a9:40:6f:cd:c8:eb:c6:3e:45:be:69:79:
                    7d:a4:91:50:2e:d7:82:78:ad:00:d5:f3:d3:bc:59:
                    6f:43:32:af:fd:79:18:73:91:b7:5f:b9:5f:6b:54:
                    71:7b:a8:fd:ae:fb:e3:17:d4:3c:a2:d7:63:18:7a:
                    ea:97:1b:7d:dd:21:55:11:fc:77:f5:bb:ee:bf:5f:
                    ac:c5:f9:4b:d6:e3:42:63:60:cd:d7:dc:8d:5a:de:
                    15:4c:c7:31:21:94:36:10:a5:c1:c4:81:86:63:4a:
                    eb:9a:a9:55:8d:5c:07:75:42:9b:bb:f7:68:dd:b9:
                    24:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:34:EC:80:64:D0:F6:1E:BA:78:85:2D:D7:78:F0:97:02:7F:7F:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8d8a5c1e-5065-33a8-9cc6-d30cf381a8da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.70.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e4:3a:1a:c7:2e:84:b5:53:3c:08:68:c2:74:36:1c:44:b5:
         4d:0e:e7:d5:78:56:5f:95:30:52:5b:a9:f4:78:8e:cc:1f:14:
         3e:fc:ab:07:1c:8e:5d:19:5d:8c:b0:4d:15:de:ce:19:80:23:
         24:bf:74:21:9d:89:51:0c:24:c0:a1:81:b6:12:da:d7:aa:6d:
         94:b3:67:71:7a:99:a7:06:87:7d:95:e4:51:68:52:09:6e:26:
         75:4c:e2:2f:0d:1d:50:ce:ac:1e:78:cb:bf:6f:6f:32:e9:20:
         98:b7:15:c1:6f:4c:64:74:0d:b1:ad:c1:e9:dd:00:f7:0b:eb:
         dc:3a:d0:b6:4f:3d:e6:dd:6b:86:2c:bf:40:6a:70:bc:df:9c:
         b8:20:ad:17:1d:7e:26:47:a7:61:ac:08:78:03:09:b6:f6:10:
         0f:3a:69:d1:cb:9f:a3:08:a4:c7:6b:f0:4c:96:27:f7:52:4e:
         12:23:68:e2:2e:79:a5:25:89:26:4d:91:d2:27:9f:9e:d5:36:
         c3:a9:74:6a:be:78:a1:ac:04:c1:1f:40:a6:7f:13:59:4c:fd:
         0d:a5:f7:38:1d:91:0e:d3:d8:d1:b9:83:86:34:f0:26:37:1c:
         e8:6c:66:64:dc:10:4d:d5:d8:69:9d:b9:32:21:5d:b8:2e:7d:
         e4:47:8e:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:50 2025 by rpki-client