Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bf295ad-9f8c-3a4f-8870-c808c7c84924.roa
File:                     3bf295ad-9f8c-3a4f-8870-c808c7c84924.roa (raw, json)
Hash identifier:          RxnPEQp268gN9LgnxS0olDRrtaOXtkbAwnsRx7vPmKQ=
Subject key identifier:   D8:18:61:F2:73:4B:85:66:5E:86:80:FA:31:F1:65:45:15:12:11:09
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F541AC12FFAE015FDC6500
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bf295ad-9f8c-3a4f-8870-c808c7c84924.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        35.204.208.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:41:ac:12:ff:ae:01:5f:dc:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=b5b2c5a8-83e7-440e-952a-c574ca1efe45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:55:9f:e3:5b:99:07:a9:3b:50:78:fb:36:b3:
                    06:f0:ec:e5:ac:50:44:90:fc:d5:f8:2e:5e:ac:6c:
                    b0:a9:25:a4:b2:ff:e2:82:30:92:8b:f9:84:ff:82:
                    66:6a:ae:3b:d1:b9:9f:f9:3a:7d:f0:a7:4e:58:60:
                    12:8e:bd:53:df:47:42:2a:1c:13:c5:28:e5:8c:04:
                    15:50:88:f8:4e:08:76:39:e2:a0:23:fc:61:43:d7:
                    b9:5a:72:4c:85:61:56:8c:25:a9:76:66:2a:14:72:
                    c5:9a:90:c9:52:c1:08:ff:92:aa:82:2d:7d:a7:d4:
                    86:da:bc:07:06:8f:cc:e1:95:c1:30:c1:cf:a0:cb:
                    bc:c4:c0:04:fe:52:1f:d0:3e:29:d9:34:b6:af:17:
                    61:f6:b8:4f:04:f9:e8:9a:df:4b:60:f2:83:7a:bb:
                    4e:39:0b:0b:22:9c:b1:96:fc:40:bb:9c:7d:cd:d1:
                    10:76:ef:59:85:53:b5:4b:03:25:ba:61:95:7e:7a:
                    9c:a8:a3:11:44:ce:2e:df:97:51:86:b5:be:bd:34:
                    74:d6:30:86:4c:c6:23:9e:f7:c7:f7:0a:9e:cd:18:
                    7a:5a:5b:28:4f:57:30:c0:76:b7:72:ea:e1:a7:e4:
                    83:16:6a:9c:85:60:e0:5c:50:12:d9:50:52:31:4b:
                    86:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:18:61:F2:73:4B:85:66:5E:86:80:FA:31:F1:65:45:15:12:11:09
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3bf295ad-9f8c-3a4f-8870-c808c7c84924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.204.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:f3:7d:8e:1b:88:a3:7b:76:7f:b2:97:a8:6d:64:6d:98:04:
         0d:fa:9e:f9:ad:79:be:01:b0:b0:67:ba:8f:28:19:0c:65:f8:
         b7:14:f9:64:80:84:bd:52:46:77:3e:ae:63:d4:9f:de:e4:bf:
         2e:dc:b6:20:b8:89:ef:bc:f1:d2:53:fa:b4:6e:20:ef:fa:30:
         65:80:8e:1a:a1:e3:85:48:5e:b5:6c:9f:b6:42:e2:32:de:cf:
         e8:7a:c1:45:e7:9f:c0:84:28:8b:d9:bf:8b:9a:41:83:68:b0:
         be:e8:e2:ad:91:ca:84:1f:aa:c5:1b:0a:9e:c3:1b:76:58:4c:
         09:ac:56:32:05:58:2d:f0:ff:0f:e7:42:e8:96:e6:e0:95:ab:
         74:92:f5:e8:d2:f2:8a:6b:77:b4:f1:65:02:ce:5b:07:0b:92:
         7b:9f:43:cf:93:cd:27:42:89:89:fd:6b:a5:53:96:37:fd:39:
         0a:41:9e:04:1e:b8:8b:c1:90:93:40:75:a4:4d:bb:ab:9c:1f:
         81:2f:fc:14:7c:81:e1:36:35:ef:5d:b9:5a:82:09:9f:39:a1:
         b3:b0:6f:a8:cd:f1:32:38:f3:6b:71:a7:c5:5b:b5:0e:a9:88:
         f4:cc:fc:a6:41:55:64:16:18:ad:e8:f1:dc:5f:05:2a:45:d2:
         cf:78:e6:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9UGsEv+uAV/cZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
YjViMmM1YTgtODNlNy00NDBlLTk1MmEtYzU3NGNhMWVmZTQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlWf41uZB6k7UHj7NrMG8OzlrFBEkPzV+C5e
rGywqSWksv/igjCSi/mE/4Jmaq470bmf+Tp98KdOWGASjr1T30dCKhwTxSjljAQV
UIj4Tgh2OeKgI/xhQ9e5WnJMhWFWjCWpdmYqFHLFmpDJUsEI/5Kqgi19p9SG2rwH
Bo/M4ZXBMMHPoMu8xMAE/lIf0D4p2TS2rxdh9rhPBPnomt9LYPKDertOOQsLIpyx
lvxAu5x9zdEQdu9ZhVO1SwMlumGVfnqcqKMRRM4u35dRhrW+vTR01jCGTMYjnvfH
9wqezRh6WlsoT1cwwHa3curhp+SDFmqchWDgXFAS2VBSMUuGqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNgYYfJzS4VmXoaA+jHxZUUVEhEJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2JmMjk1YWQtOWY4Yy0z
YTRmLTg4NzAtYzgwOGM3Yzg0OTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI8zQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA/zfY4biKN7dn+yl6htZG2YBA36nvmteb4BsLBnuo8oGQxl+LcU+WSA
hL1SRnc+rmPUn97kvy7ctiC4ie+88dJT+rRuIO/6MGWAjhqh44VIXrVsn7ZC4jLe
z+h6wUXnn8CEKIvZv4uaQYNosL7o4q2RyoQfqsUbCp7DG3ZYTAmsVjIFWC3w/w/n
QuiW5uCVq3SS9ejS8oprd7TxZQLOWwcLknufQ8+TzSdCiYn9a6VTljf9OQpBngQe
uIvBkJNAdaRNu6ucH4Ev/BR8geE2Ne9duVqCCZ85obOwb6jN8TI482txp8VbtQ6p
iPTM/KZBVWQWGK3o8dxfBSpF0s945io=
-----END CERTIFICATE-----