Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bdf16a21-233d-34ef-8c40-09efd46931fd.roa
File:                     bdf16a21-233d-34ef-8c40-09efd46931fd.roa (raw, json)
Hash identifier:          9J7WtApt0zKEfUb5fiU/rY6h0pkT+cCOfyW0LNOYNS8=
Subject key identifier:   70:44:85:48:24:A6:1A:2D:20:D4:25:91:EF:DC:59:9F:0A:BD:E2:0B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BA66035142D0C17DB0A00
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bdf16a21-233d-34ef-8c40-09efd46931fd.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        35.203.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:a6:60:35:14:2d:0c:17:db:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=b7f1d792-bb0a-4249-ac6d-b39b43856c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:be:d1:d1:d0:ad:a6:80:de:d3:fa:cf:c8:90:
                    78:eb:84:09:ab:c7:2e:9f:d6:a3:36:9c:9c:ea:ed:
                    59:61:24:01:08:50:92:f3:00:0e:8b:04:8d:df:36:
                    30:2c:c1:b7:0c:16:0b:9a:53:2b:e5:2c:e7:ab:76:
                    35:a5:76:cd:da:5c:5a:07:32:2d:61:70:6b:6f:1a:
                    c1:e9:49:37:d7:4a:57:06:4c:47:10:00:31:48:78:
                    cc:da:57:07:81:b2:e3:d4:9f:d0:ea:9f:7a:ea:29:
                    aa:d8:c7:1a:63:e8:40:ad:f2:46:ce:34:99:48:53:
                    27:db:80:ca:93:8f:26:a8:27:f8:d5:85:5f:7b:06:
                    1e:d5:0f:6f:d0:3e:06:c7:c0:08:bf:2c:35:0d:b6:
                    2f:7f:ed:16:d0:92:2c:ba:75:fe:29:50:5c:1f:04:
                    d1:91:e0:ca:47:e9:b1:46:d2:96:ab:15:a0:82:5c:
                    f2:4e:e9:da:a8:ea:49:47:71:57:e2:4f:56:7b:1d:
                    99:e1:50:a6:5f:9d:64:cf:ab:2e:01:cf:04:18:06:
                    d8:9d:a5:2c:26:e8:96:24:9a:7a:e1:4c:ce:4e:9b:
                    c2:95:0a:d3:84:cc:b4:ec:47:72:3d:c1:aa:ee:26:
                    33:4a:94:59:84:28:9b:af:98:94:70:29:19:a6:05:
                    be:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:44:85:48:24:A6:1A:2D:20:D4:25:91:EF:DC:59:9F:0A:BD:E2:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/bdf16a21-233d-34ef-8c40-09efd46931fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.203.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a7:4d:5b:6e:c3:07:cc:de:f1:fa:72:8d:10:b5:db:dc:ab:
         73:d3:19:e7:39:8c:5c:7c:f5:16:17:c6:0e:5b:5e:f6:98:d5:
         f4:3c:c6:4b:ca:26:7f:b2:6c:4c:9f:4b:e8:5b:ca:05:91:1a:
         4e:71:d4:c4:09:57:1d:38:b7:5a:62:d2:a1:56:12:a4:1e:16:
         48:c4:71:77:dc:1d:53:c9:5f:2f:3a:d7:e3:c9:0f:52:f8:43:
         d8:18:79:3c:df:d4:02:95:6f:00:d2:e1:3c:c0:c7:58:83:bb:
         07:61:90:f9:14:f2:0f:33:a3:1d:ff:05:3f:77:15:0d:b8:70:
         39:a8:d0:69:22:9f:8b:e1:76:e7:41:5d:cc:2a:2b:3a:ed:7b:
         e1:d2:5d:ed:c7:70:a3:fe:f8:4f:3c:70:90:6e:c8:7d:52:ef:
         5f:a2:c0:18:a6:5a:10:4e:f2:9b:6a:4f:a5:c9:fa:c0:e7:21:
         2c:58:98:7e:80:cf:02:d9:48:ef:18:0d:17:a1:7b:0e:23:9e:
         6a:22:5f:16:c6:c4:e3:5e:ce:ae:2b:ee:0a:7f:3e:0f:2f:76:
         12:d5:42:4b:42:8b:44:0b:b6:0d:e0:be:2f:00:d0:64:21:21:
         5a:82:49:89:cb:fa:e4:73:e3:65:5f:15:72:78:2a:0f:f4:7f:
         57:25:d0:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS6ZgNRQtDBfbCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
YjdmMWQ3OTItYmIwYS00MjQ5LWFjNmQtYjM5YjQzODU2YzM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L7R0dCtpoDe0/rPyJB464QJq8cun9ajNpyc
6u1ZYSQBCFCS8wAOiwSN3zYwLMG3DBYLmlMr5Sznq3Y1pXbN2lxaBzItYXBrbxrB
6Uk310pXBkxHEAAxSHjM2lcHgbLj1J/Q6p966imq2McaY+hArfJGzjSZSFMn24DK
k48mqCf41YVfewYe1Q9v0D4Gx8AIvyw1DbYvf+0W0JIsunX+KVBcHwTRkeDKR+mx
RtKWqxWgglzyTunaqOpJR3FX4k9Wex2Z4VCmX51kz6suAc8EGAbYnaUsJuiWJJp6
4UzOTpvClQrThMy07EdyPcGq7iYzSpRZhCibr5iUcCkZpgW+SwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHBEhUgkphotINQlke/cWZ8KveILMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYmRmMTZhMjEtMjMzZC0z
NGVmLThjNDAtMDllZmQ0NjkzMWZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8tAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHunTVtuwwfM3vH6co0Qtdvcq3PTGec5jFx89RYXxg5bXvaY1fQ8xkvK
Jn+ybEyfS+hbygWRGk5x1MQJVx04t1pi0qFWEqQeFkjEcXfcHVPJXy861+PJD1L4
Q9gYeTzf1AKVbwDS4TzAx1iDuwdhkPkU8g8zox3/BT93FQ24cDmo0Gkin4vhdudB
XcwqKzrte+HSXe3HcKP++E88cJBuyH1S71+iwBimWhBO8ptqT6XJ+sDnISxYmH6A
zwLZSO8YDRehew4jnmoiXxbGxONezq4r7gp/Pg8vdhLVQktCi0QLtg3gvi8A0GQh
IVqCSYnL+uRz42VfFXJ4Kg/0f1cl0MI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:09 2025 by rpki-client