Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5829011-87b7-3a20-a891-a622e0df02cf.roa
File:                     e5829011-87b7-3a20-a891-a622e0df02cf.roa (raw, json)
Hash identifier:          72cM8ZBlQ2agLcgzHTdTdkqid+inPZlSQdDktpwU9DY=
Subject key identifier:   6F:56:CC:64:2D:69:2E:F4:75:2A:96:A0:46:0B:72:79:FF:F1:BE:C0
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BEFE2222E6D166678CD40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5829011-87b7-3a20-a891-a622e0df02cf.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        34.151.192.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:ef:e2:22:2e:6d:16:66:78:cd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=c02b9a19-0eec-407e-bf20-e318155a517a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2d:fa:ac:0a:41:c4:d0:de:e2:4f:1f:0c:63:
                    e8:d8:26:ad:94:93:f6:24:ba:38:0e:7e:c8:00:9b:
                    21:cc:2c:87:1d:b6:08:8d:ef:eb:de:b8:a9:2d:9b:
                    5c:df:1b:79:57:76:46:af:72:cc:89:74:12:82:c7:
                    33:f6:fe:04:34:e4:4c:6d:21:e5:55:cb:75:26:65:
                    1e:db:ef:d9:bf:ef:85:4a:7d:14:a2:09:63:d9:36:
                    0f:40:62:f0:38:93:19:de:bd:fd:f4:c8:34:c9:1e:
                    6e:16:cb:cd:ce:32:1d:b4:5b:aa:06:9b:57:4c:5e:
                    12:a5:26:1f:bb:26:be:3e:6c:a1:a6:3b:8f:e7:1a:
                    7b:62:45:67:00:7a:2e:de:6c:54:ae:53:c0:f7:de:
                    d3:51:92:8b:ed:1d:55:85:b4:ce:66:c8:05:53:e5:
                    fc:1b:8c:5f:3a:7a:d4:f6:55:04:3e:f1:e6:4f:51:
                    c2:bb:1f:aa:90:0e:d7:24:ca:3e:ed:0d:c0:06:84:
                    6a:fa:bb:d2:2d:63:d1:c2:90:c0:c1:cc:8f:cd:6c:
                    ca:05:16:af:5b:a5:56:ca:99:8b:f0:eb:de:e1:79:
                    0b:26:4b:92:62:8a:6e:fe:72:4f:cf:6d:46:b3:6b:
                    eb:e5:36:56:27:91:45:22:ca:71:1a:16:d9:28:34:
                    23:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:56:CC:64:2D:69:2E:F4:75:2A:96:A0:46:0B:72:79:FF:F1:BE:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e5829011-87b7-3a20-a891-a622e0df02cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.151.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:48:82:0d:d6:c9:c3:88:7f:eb:15:59:f8:61:ee:cd:1e:d3:
         c4:4b:4b:70:14:38:43:55:26:7d:d7:9e:6c:18:e0:8d:91:04:
         3f:1d:11:57:5d:b9:8f:f4:d4:22:b2:a9:54:d6:e6:fb:da:67:
         54:72:9d:76:db:79:67:87:de:93:58:c2:1f:d5:ac:01:da:64:
         bd:11:14:08:f3:54:bc:41:cc:1d:dd:4e:37:e9:e8:92:bd:5f:
         54:08:08:a0:e8:1c:30:52:07:3d:8d:73:1e:d1:03:bb:43:a3:
         66:ef:e4:c7:61:b3:0f:39:0d:ce:9e:90:18:85:15:8d:39:5b:
         26:15:b1:59:c5:f9:cd:ef:4d:09:07:8e:0e:f9:ba:63:44:4c:
         0e:94:22:3f:76:9d:b1:df:85:03:74:d5:37:b2:16:f9:7d:c1:
         b1:19:9a:b8:67:d1:0f:08:c5:52:30:53:7b:f0:09:a6:64:96:
         4f:a5:72:3b:bd:8d:85:8a:3e:c9:ff:90:2c:52:c6:9d:30:b2:
         18:33:44:f8:13:05:c4:d4:a4:28:55:47:20:d8:4c:97:2e:9e:
         85:b5:46:67:fd:24:da:9a:9e:93:60:ff:75:0b:e6:17:c4:d4:
         6d:3e:49:9c:8a:9b:0d:ed:a7:f3:7a:71:fe:bb:70:5f:79:7b:
         43:2c:04:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:26 2025 by rpki-client