Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ecc21199-b1af-3b0c-a96e-2c859a0226fb.roa
File:                     ecc21199-b1af-3b0c-a96e-2c859a0226fb.roa (raw, json)
Hash identifier:          hq/GP5eEssN58hiPU1fqAKYpGXPefgBn2ceWRZUVvfE=
Subject key identifier:   50:51:9E:29:5C:B5:AB:B4:DF:9E:7A:AF:D2:47:6C:83:6C:C0:5A:45
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285848C84BF80459122CBFABB4BD80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ecc21199-b1af-3b0c-a96e-2c859a0226fb.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     396982
IP address blocks:        35.201.44.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:f8:04:59:12:2c:bf:ab:b4:bd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=93c40ec2-afd5-4bff-be6a-ecb4b998b600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:45:ab:55:04:3f:c9:45:67:f8:60:e1:66:d9:
                    11:4a:51:ab:e3:ab:dd:0e:35:26:c5:f1:85:27:96:
                    26:77:5e:25:17:47:b0:0c:23:17:f3:c9:25:8d:7c:
                    3a:d4:86:6b:01:61:88:6b:8e:38:4c:3b:7a:62:88:
                    88:26:fe:73:b7:fe:73:6d:0a:48:15:9c:ab:29:7d:
                    1a:bb:18:0d:6c:25:77:bb:18:e5:c0:95:b8:cd:c1:
                    fb:45:f3:2c:10:a6:e3:88:66:12:44:9d:9b:ff:3b:
                    41:e5:36:5d:49:6c:74:ae:8e:46:c4:54:b4:32:99:
                    d5:11:e7:a0:4f:80:95:9f:f8:f9:d4:a1:07:fb:bf:
                    fc:67:97:2d:d4:9a:5d:db:a8:74:0f:4b:c3:3e:cf:
                    4e:78:fc:88:d5:76:aa:58:30:c5:fb:26:01:76:ae:
                    c0:66:df:c5:8c:e5:69:ac:52:cf:08:48:18:5d:7e:
                    e6:d7:bf:30:e8:bb:3e:2e:ec:1e:e6:8c:d7:37:8f:
                    62:fd:a0:a0:eb:07:82:ab:64:19:22:4f:b9:bd:23:
                    1c:bd:e6:61:3e:1c:ba:53:d7:72:a5:e6:99:7b:7f:
                    9d:01:bc:28:00:59:2c:2f:8a:68:84:c2:84:d7:82:
                    dd:87:86:d1:fe:03:d5:1b:14:bd:f8:da:da:1e:50:
                    bd:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:51:9E:29:5C:B5:AB:B4:DF:9E:7A:AF:D2:47:6C:83:6C:C0:5A:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ecc21199-b1af-3b0c-a96e-2c859a0226fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.201.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:e4:ca:00:85:6a:8c:d6:f8:27:1b:2b:5b:58:f5:15:7d:ee:
         92:4e:b6:68:84:38:c4:7d:89:62:af:c7:d3:40:aa:da:2e:ac:
         81:8d:2c:60:6d:8a:ff:8e:7b:d9:23:3d:fe:9f:a9:82:4f:9b:
         ad:b2:d3:1a:db:6b:5f:f8:8a:d8:34:b7:e1:b1:cf:cf:bb:8c:
         3b:45:7e:15:a1:b4:40:ef:3d:1c:6b:51:03:4c:b9:82:55:27:
         50:d8:a5:3c:3e:71:5f:4e:23:e7:f9:3c:bb:cd:d8:d5:18:81:
         b0:12:33:4b:14:2e:22:ee:52:f0:30:3b:c9:f0:40:cd:bd:73:
         c6:d8:c4:9c:02:51:10:46:d0:7b:2e:40:e0:96:60:b5:07:b9:
         38:df:74:fc:c7:02:a5:60:13:49:4b:05:29:44:74:c5:53:ec:
         0f:37:e3:01:13:44:54:b8:0c:88:9a:02:b1:23:d4:8f:40:4a:
         6f:52:e9:e1:a7:62:d2:e2:ac:15:9c:34:cb:c5:5f:84:e5:41:
         23:ba:67:cc:af:6a:f7:8f:f6:ca:ab:ef:ee:a2:50:44:f9:00:
         e7:f7:c0:f1:ff:b8:50:86:fe:99:76:cf:5c:59:4d:0b:0a:c5:
         e5:e9:7b:44:d5:94:a6:b6:af:37:39:d8:ec:5e:c0:29:54:5d:
         1e:0e:18:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:47 2025 by rpki-client