Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52f8aea2-2333-3e3c-ae67-e334191775a2.roa
File:                     52f8aea2-2333-3e3c-ae67-e334191775a2.roa (raw, json)
Hash identifier:          xEvojGdL+z0XVBYiBcl2rtENcRpKTvXZwonZ1RyNjgw=
Subject key identifier:   1F:78:5C:B8:EB:78:16:2D:12:12:3D:54:BF:6B:95:43:18:E2:C6:0C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F530CC0DB9C9921BD02E40
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52f8aea2-2333-3e3c-ae67-e334191775a2.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.96.0.0/14 maxlen: 14
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:30:cc:0d:b9:c9:92:1b:d0:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=baed5012-cccc-43ae-94a8-6bdb832468fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:09:13:98:a4:32:f8:ef:44:1a:e0:33:6d:6d:
                    07:03:31:6f:0d:73:63:59:62:3c:8d:a6:e9:85:22:
                    f5:ae:2c:65:14:fc:ba:0c:fa:aa:5e:f5:54:e3:79:
                    ae:fb:c3:08:d6:43:78:64:21:d8:00:07:07:f2:08:
                    f8:f6:f2:16:d1:6d:5e:09:76:ea:23:b8:e3:13:65:
                    f4:b7:fa:1b:9a:9c:81:2d:6e:ba:2b:11:a8:b3:a2:
                    6f:64:e0:3f:26:5a:09:66:96:ce:46:83:67:60:c5:
                    36:c8:57:28:d3:41:29:0e:f7:11:54:ac:76:77:a2:
                    55:b4:db:b7:e5:fc:09:fc:db:0f:90:e2:0a:a2:03:
                    b8:b6:1f:c6:a2:63:a2:93:02:18:d6:df:8e:8c:f5:
                    86:1d:47:03:e5:c4:f4:75:10:d0:00:e2:a8:38:82:
                    fb:5d:23:37:36:10:72:32:a7:2d:b5:bc:93:7a:1d:
                    62:28:cd:ff:a3:eb:ee:90:d0:03:fe:7f:68:d2:94:
                    8c:a6:f3:1b:aa:37:86:f2:fd:8d:12:af:12:eb:e8:
                    79:88:e3:44:17:2b:3b:fd:48:62:10:11:b4:cc:37:
                    f7:ae:ae:7a:e7:00:df:06:00:77:79:38:84:56:50:
                    f6:f5:f8:61:b3:b0:d5:f0:aa:22:74:43:52:57:02:
                    97:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:78:5C:B8:EB:78:16:2D:12:12:3D:54:BF:6B:95:43:18:E2:C6:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/52f8aea2-2333-3e3c-ae67-e334191775a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.96.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:cf:c1:09:17:e7:57:77:55:f4:ab:15:fb:1d:53:64:6a:cc:
         31:fc:c2:cb:0a:2c:b0:d4:a1:96:e3:c2:f3:d1:7d:d9:fb:13:
         12:f6:0c:c2:e0:c9:15:02:35:0d:ab:5f:e7:01:16:9e:e0:21:
         92:8d:f7:a0:74:9b:52:b7:24:3a:2a:91:fd:6e:8c:11:44:75:
         f6:dc:f3:d5:eb:10:ce:2a:96:2a:8c:74:ab:7d:98:a1:9a:c3:
         0f:35:33:39:2c:e2:1e:cc:b1:26:fe:8f:e9:2d:27:f7:d4:e1:
         6d:86:90:bc:18:f6:7c:55:01:3d:43:74:0e:d7:c0:a7:32:d4:
         16:bb:d8:1a:1a:ae:b3:eb:de:9d:c7:c0:a0:e8:b2:04:5b:1b:
         93:11:64:46:d8:e0:98:0b:f9:4d:97:51:0a:53:b3:b7:2f:bb:
         fe:c0:0d:16:ff:c6:0c:27:0a:48:ad:68:99:7d:00:98:7d:b9:
         ad:ed:af:72:c9:93:9d:f8:b8:f0:4c:d0:53:27:f5:58:a0:15:
         6f:0b:05:0f:fd:88:3c:1a:42:da:81:63:45:af:bb:82:67:59:
         0b:e0:6d:63:04:d4:76:07:fb:95:dd:68:0a:a4:db:7d:a0:25:
         c4:50:59:93:cd:94:e7:d6:ac:96:75:e4:9f:4b:94:00:21:5f:
         bc:b4:2d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----