Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/367f6e44-8c13-31a9-9087-0c18b1215d78.roa
File:                     367f6e44-8c13-31a9-9087-0c18b1215d78.roa (raw, json)
Hash identifier:          Kf6ZTLMc2MF4M875+lOPnZ3ZF2k1GOAGTu+2k56kYz0=
Subject key identifier:   15:C0:E9:72:EC:E8:66:B8:27:C9:81:8C:A8:44:2C:CC:07:93:BF:F2
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4CF87C3520FF6CB5DFF80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/367f6e44-8c13-31a9-9087-0c18b1215d78.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.89.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:cf:87:c3:52:0f:f6:cb:5d:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=ff2ea345-99d3-44be-86ef-061e6c5025c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:04:56:5e:e2:39:78:d8:bc:b7:42:b3:f2:31:
                    5b:06:83:60:7e:ee:e6:bc:93:ff:e2:35:e1:64:d2:
                    96:35:4d:dd:cc:d9:ec:6d:32:23:63:b9:54:73:b4:
                    e3:ee:54:8c:a1:39:92:93:0a:ad:66:56:b8:51:bb:
                    51:2c:34:d3:40:b0:db:5f:3f:d6:c8:61:8c:d6:a5:
                    aa:a8:32:59:f0:a2:cd:65:bc:27:f8:d6:eb:e1:68:
                    df:fa:a8:4f:c5:65:56:fc:fd:31:5a:18:1c:b9:2f:
                    fc:23:42:2a:ce:55:2f:e2:6b:d7:14:8b:13:5c:18:
                    8a:80:2f:78:19:76:4a:43:de:bc:64:69:c9:5c:bf:
                    fd:ab:2b:2a:db:ae:92:a3:86:06:61:81:c2:52:4e:
                    63:11:5a:e0:d5:34:52:8b:c3:8c:14:55:c6:81:f8:
                    d9:52:3c:d2:ad:5e:db:8a:57:b7:42:c8:97:27:47:
                    8c:2d:58:47:7f:2f:d0:11:33:e4:d4:cf:50:93:98:
                    3a:21:68:42:58:9b:49:45:4c:ad:a6:f6:a1:1b:5c:
                    23:7b:37:8b:d0:ea:6d:0d:7d:5c:f2:60:d8:3e:04:
                    35:13:24:e8:f8:95:cf:01:1f:18:ff:fa:7e:6b:8a:
                    17:66:e9:5d:28:91:db:b1:8a:1a:72:a2:5a:87:b2:
                    ed:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C0:E9:72:EC:E8:66:B8:27:C9:81:8C:A8:44:2C:CC:07:93:BF:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/367f6e44-8c13-31a9-9087-0c18b1215d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.89.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:b3:2a:f4:b1:79:d8:8a:d8:07:05:57:78:ed:52:98:3e:fc:
         92:ff:33:3d:ca:8c:1a:2a:a6:e7:8d:9d:cd:d6:05:6c:a0:56:
         40:c4:65:6e:77:7c:85:65:e2:cc:76:58:3e:35:64:c2:51:7b:
         7d:1c:33:21:ae:f3:df:dc:50:7d:d7:e0:18:cd:47:0c:85:66:
         2c:c7:bf:ca:7d:cb:51:22:0c:28:ca:f8:c6:4c:64:a3:75:bd:
         c2:dd:12:27:a4:f4:e2:03:9b:4d:e7:d4:df:de:44:c2:da:95:
         c9:e7:12:1d:9d:ef:0d:b6:e8:e0:6c:f8:8b:d1:40:34:59:38:
         6c:99:cd:c2:88:eb:37:75:dc:ef:e5:12:0f:81:b1:f7:8b:20:
         af:01:31:b0:e2:36:da:61:99:73:bc:d4:bb:9d:56:d2:dc:32:
         73:b6:8f:d6:c9:69:cf:6c:71:be:b3:7a:26:31:26:8d:f9:49:
         b7:40:35:ad:4e:23:48:84:73:a2:00:aa:2f:ca:09:e9:65:64:
         82:41:f8:e4:89:77:e9:8c:4a:39:80:0e:bb:55:26:1d:f5:fb:
         da:13:55:14:94:83:4e:4d:b5:b0:fb:ab:c0:37:c3:18:5c:95:
         46:e2:da:0e:82:2e:97:8a:19:c5:ea:23:9b:92:0a:d6:d1:9a:
         b8:c5:38:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----