Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/47393b24-6646-3a6f-8356-dc4f9260d6c3.roa
File:                     47393b24-6646-3a6f-8356-dc4f9260d6c3.roa (raw, json)
Hash identifier:          1vSlZqPJJo35+09nNwGM/AG597ISX5N3tinKB9eKf6g=
Subject key identifier:   3B:DC:AC:A6:64:9A:2B:04:78:CB:92:33:0E:5E:D8:DF:9D:A7:FC:7C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858489E6B5E31F1829FAD10E64C80
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/47393b24-6646-3a6f-8356-dc4f9260d6c3.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     15169
IP address blocks:        34.2.128.0/17 maxlen: 17
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6b:5e:31:f1:82:9f:ad:10:e6:4c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=e4bb8e11-66d7-42ca-af6d-d38c54b95613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a0:7e:5e:d3:7f:b7:82:ee:e0:b2:73:50:ee:
                    1a:5a:aa:eb:51:fa:ec:6a:e6:f3:17:1e:26:a3:6a:
                    9d:34:68:97:3c:4f:0d:27:b7:26:81:97:8d:52:1e:
                    9c:12:50:f8:bc:f4:d2:7d:f4:7a:0a:c5:8a:f9:3f:
                    fc:0d:95:b8:f6:a3:19:cc:9e:38:25:0a:1b:76:55:
                    c2:8d:2e:e9:6d:92:3a:6b:d3:b8:a9:65:10:f1:b3:
                    6b:ac:77:bc:4b:34:ff:e8:89:6c:2f:4f:8d:2b:0d:
                    77:7b:9e:4a:a3:aa:0f:7b:6f:8b:94:36:4a:cf:a8:
                    29:5f:72:5c:e0:98:1f:3d:f8:8b:98:3a:d4:5c:28:
                    04:e1:db:24:40:4b:a2:cc:da:60:84:72:0f:c8:b6:
                    15:3a:65:f7:32:b1:f6:8d:26:d9:33:59:73:c4:3c:
                    5a:35:db:01:7e:4a:dd:99:ff:84:7f:38:42:8d:cb:
                    73:24:24:73:ea:e9:7b:32:97:01:ee:5b:80:16:4e:
                    32:54:d5:07:8e:26:80:48:9e:e6:08:ce:94:0b:b2:
                    99:db:76:bb:c0:44:63:56:e5:58:0b:07:90:f5:b6:
                    54:6d:0d:d7:1a:9e:d3:79:8d:f6:a2:1e:db:5f:99:
                    c3:fc:5b:68:e1:50:24:f6:87:65:c6:bc:c9:d9:97:
                    f4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:DC:AC:A6:64:9A:2B:04:78:CB:92:33:0E:5E:D8:DF:9D:A7:FC:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/47393b24-6646-3a6f-8356-dc4f9260d6c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.2.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:6b:b1:2d:5c:bf:79:08:50:fc:ba:b5:a9:a1:a2:11:9e:a8:
         46:5a:cf:81:8d:5f:03:69:02:c5:9d:26:71:a2:f9:34:f2:84:
         36:67:fe:a0:64:59:8f:01:34:18:89:ba:ff:4a:b6:aa:4a:4e:
         5e:57:62:7f:e6:64:b7:31:61:1c:e5:8c:50:73:c8:f4:61:5e:
         32:ab:e5:8a:e9:23:3a:0a:39:10:41:56:79:eb:63:00:cc:94:
         d3:7a:3c:c4:24:c7:48:55:21:30:f4:0d:b4:00:77:f1:51:a7:
         6d:20:58:a9:b6:ab:9a:36:4d:61:22:aa:67:68:5e:2b:30:7a:
         22:78:93:a4:1a:0d:29:b6:55:d1:72:72:22:b4:41:ba:55:86:
         0f:5b:a3:b9:78:91:5f:99:4b:96:b8:b8:5f:07:41:24:c5:6e:
         bb:8b:4b:0a:d5:7d:b4:4f:d9:e2:3b:04:b7:4c:38:82:20:1a:
         23:c9:9a:1b:08:ec:8d:c3:58:b0:d1:a8:ad:0a:fa:8e:c9:82:
         90:5e:ee:99:75:b0:23:dc:42:7f:eb:6e:f3:62:a4:ce:47:fe:
         50:74:38:39:8b:54:f2:55:e0:5a:b5:ba:8c:e1:3f:fe:6b:2c:
         80:46:05:44:a7:8c:07:9c:a1:9b:4c:c8:0d:18:fd:14:4a:56:
         f3:a0:56:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----