Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e825ebbd-5f03-3cd8-bf58-fa22c88c93d1.roa
File:                     e825ebbd-5f03-3cd8-bf58-fa22c88c93d1.roa (raw, json)
Hash identifier:          LH9pdsJgm2BX2RZAwjduJPM7rX3J0hkVvjCBSjNaw5w=
Subject key identifier:   21:1F:84:81:0B:1F:EC:2E:37:3D:CB:52:73:78:41:B2:1E:AA:93:8A
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84C01F956FE60A1F1F3C700
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e825ebbd-5f03-3cd8-bf58-fa22c88c93d1.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        34.143.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4c:01:f9:56:fe:60:a1:f1:f3:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=bdb7c2d5-8c1c-4ac1-9080-80f3f37a970f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:85:c7:1b:76:18:cf:08:04:cf:e9:a9:f0:6c:
                    fd:f6:ff:e0:6a:2f:f9:ec:8e:1a:3a:b8:cf:1b:fa:
                    ed:2e:8a:78:da:e2:78:93:cc:95:42:a2:99:8d:bd:
                    3e:c3:81:8d:91:87:b2:ba:b4:1d:6f:55:4b:92:96:
                    8b:29:bc:4a:49:21:be:a6:63:19:1b:2d:90:4c:5c:
                    0c:fe:d8:d2:82:5e:77:ce:73:d1:37:93:3c:4d:27:
                    48:8a:28:16:75:19:a6:de:a4:a2:da:96:36:6a:ef:
                    52:ad:0d:de:f9:8b:01:c4:ff:a2:6c:b6:69:f6:59:
                    1e:ad:01:55:48:70:8a:28:6c:12:60:df:f6:19:95:
                    79:bf:dc:62:56:59:07:e2:20:0a:a5:af:d0:33:86:
                    57:7b:a3:35:28:94:ca:a6:ba:bf:ad:59:26:a9:73:
                    0e:e8:c2:72:5f:63:28:0b:36:39:e0:db:aa:ff:e4:
                    77:73:2d:9f:19:ea:1d:93:4c:f4:17:46:ae:28:fb:
                    0d:90:42:53:83:d8:12:e2:7d:4a:79:68:40:61:75:
                    22:f0:0b:9d:62:ee:ab:6d:db:87:e3:fe:7e:02:87:
                    41:7c:3a:62:eb:c2:95:ef:c0:1d:ba:9b:ec:45:6c:
                    aa:76:0c:e9:f8:a5:bd:ce:3d:8f:a3:24:82:f9:81:
                    c3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:1F:84:81:0B:1F:EC:2E:37:3D:CB:52:73:78:41:B2:1E:AA:93:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/e825ebbd-5f03-3cd8-bf58-fa22c88c93d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.143.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:ac:d4:b2:a7:b9:31:66:e0:6f:26:34:7a:9e:08:0c:e0:d3:
         b6:6e:26:de:23:7a:be:f3:dd:ea:05:f6:64:ea:15:e9:25:d0:
         7d:1d:c8:c0:52:53:fb:9d:22:8c:94:28:ad:36:dd:86:28:3f:
         54:7c:5c:d3:5b:cd:22:af:68:4f:9e:e0:89:60:fc:40:37:d4:
         47:69:95:28:0d:29:7f:ae:73:fb:df:ec:20:8c:c0:4d:b4:b4:
         79:df:9c:95:2f:06:24:3c:c8:57:53:61:1e:7c:16:9a:2b:4a:
         48:69:ef:3d:a6:7a:f5:85:50:f2:7a:a1:8f:9d:9c:ee:63:ca:
         1b:64:6e:22:a1:a2:bd:0b:f9:f0:fb:4f:44:e3:c0:63:6a:a8:
         6c:aa:ea:de:c9:0b:f5:39:8c:cf:4d:c3:f5:81:98:b1:2a:b5:
         fa:82:5f:f3:20:fd:e1:29:7e:6b:9d:30:7b:45:ee:cf:58:39:
         a2:cd:20:03:5f:37:20:7d:10:20:c6:74:c3:43:c2:26:0c:11:
         61:b4:72:92:56:d5:01:c1:28:cb:fa:ca:8e:58:e9:bc:d8:94:
         b5:40:65:f0:aa:79:87:2a:d7:0f:0e:0e:6d:82:0c:ff:1e:c9:
         a0:9a:34:56:6c:e0:4d:f5:b4:16:5d:53:a5:3e:81:9b:bd:2e:
         95:98:a8:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:46:52 2025 by rpki-client