Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/069487ad-25f3-34e8-8612-1f29030f365d.roa
File:                     069487ad-25f3-34e8-8612-1f29030f365d.roa (raw, json)
Hash identifier:          L+Amr9lUF/1E9/EKc9EHsARep3tlHMyadyKH+MSoYsY=
Subject key identifier:   D7:BC:36:43:6C:F9:C5:2A:2F:30:7B:9F:DE:1F:CF:A9:45:09:37:CD
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858481C9A93BDA9CF67A1979A2120
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/069487ad-25f3-34e8-8612-1f29030f365d.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     15169
IP address blocks:        34.0.225.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:93:bd:a9:cf:67:a1:97:9a:21:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=8d6d468e-10e3-48f5-88ef-1476425ef032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2f:e3:a0:6f:a3:a4:ba:e7:0b:80:28:60:63:
                    b6:f3:cb:7d:7c:f3:c1:2b:98:45:b1:cb:82:f6:52:
                    e8:1d:54:fb:bf:2d:ae:0a:7e:9a:c8:80:83:8d:d7:
                    5a:18:e7:a2:b7:0b:df:f7:25:ee:c8:0e:54:dc:eb:
                    9c:92:a5:83:5a:4b:56:71:65:70:24:29:90:a0:8c:
                    a8:73:53:18:65:08:2d:64:43:65:e0:43:e2:b1:b4:
                    26:87:da:b4:7f:26:1d:32:4c:18:e4:a0:f7:8e:91:
                    ee:70:0f:e7:e8:ff:80:33:bd:f9:62:1c:e5:1f:23:
                    88:4e:17:64:d0:55:01:6c:0f:39:51:cd:64:75:0a:
                    dd:3e:81:aa:77:e7:35:92:71:ef:df:85:6e:43:e7:
                    9f:b8:c7:4f:60:5d:4a:d5:6e:32:22:f6:de:cf:4b:
                    ba:31:13:f0:44:f9:9d:71:0b:26:d9:93:3d:cb:32:
                    34:44:4c:ab:8a:b5:54:9c:34:39:b1:bf:e1:4a:9b:
                    99:e7:4d:22:86:65:d9:03:d6:49:08:69:28:25:05:
                    9a:e4:d9:6c:9b:2d:a0:5f:25:e1:9c:e0:1f:f6:90:
                    dc:20:6a:26:b6:09:eb:39:39:80:d1:eb:ec:65:5e:
                    a5:e2:3b:b6:91:0c:1a:1f:68:1a:1a:f3:91:78:2c:
                    da:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:BC:36:43:6C:F9:C5:2A:2F:30:7B:9F:DE:1F:CF:A9:45:09:37:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/069487ad-25f3-34e8-8612-1f29030f365d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.0.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ad:55:29:ea:41:fa:7b:8b:10:92:09:15:3c:71:32:70:12:
         92:51:76:e1:1e:37:a9:9f:70:f6:e6:c1:4c:95:6c:cb:d9:cf:
         d5:11:ca:f4:9f:e7:f4:7e:cf:e2:22:af:83:4f:33:36:6b:f8:
         30:81:ac:80:a6:48:55:25:fd:77:6d:14:ce:ea:04:b6:82:f3:
         da:91:79:3f:75:df:5a:2b:8d:a3:4b:44:6d:db:31:ee:b2:50:
         0f:b3:87:b7:ec:84:a1:07:c2:b0:04:2c:c5:dd:4e:75:e5:1e:
         c8:cd:48:71:6d:ea:6e:37:e4:80:88:34:0a:6c:83:d2:6e:36:
         11:f1:cb:c3:d0:6d:9c:7f:77:c1:59:1f:12:33:4f:af:8a:a3:
         2a:f6:f2:25:84:ff:dd:58:e2:31:65:7c:af:aa:5a:cb:ff:44:
         3b:8b:18:90:10:b1:ba:02:9f:cb:63:02:72:11:74:c1:a2:e5:
         dd:61:c4:d6:e9:32:10:38:e8:c8:b8:62:92:d7:f1:6f:a4:0e:
         f9:04:7f:c5:8e:4b:44:5a:0a:7b:d4:67:46:4e:15:69:cf:a3:
         11:76:71:46:f1:3b:26:47:46:13:0a:41:74:27:1c:93:62:44:
         6d:a5:cd:88:6a:07:37:6e:24:ae:12:2d:21:31:bb:07:74:18:
         d7:d6:a9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:02:29 2025 by rpki-client