Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/710b950a-c0c3-3150-85ed-9b0fc49f4295.roa
File:                     710b950a-c0c3-3150-85ed-9b0fc49f4295.roa (raw, json)
Hash identifier:          tzr9RVnKrk06OioA3pQU8zU3fvZ6kxG8f3BFgl+CRn0=
Subject key identifier:   95:8C:62:F0:30:66:01:C1:97:5F:A5:AB:35:F8:19:8A:84:0A:2F:B4
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4E16E1FACBF79F5FAF380
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/710b950a-c0c3-3150-85ed-9b0fc49f4295.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.70.64.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:e1:6e:1f:ac:bf:79:f5:fa:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=afcde8a9-98cb-47a2-9f49-fb153fe0d031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:db:97:20:46:79:ad:8e:95:c3:e8:da:58:2a:
                    0d:38:0c:57:b5:3d:0d:17:e7:7c:0b:2e:2e:25:3e:
                    cf:ca:0b:03:ba:bc:26:08:4b:ab:4e:92:d8:4a:bc:
                    2d:7c:f4:bb:92:5c:e6:81:03:c6:42:e4:bc:d9:6a:
                    1d:a6:12:a2:44:d5:1f:9b:71:0d:fa:c0:3f:6a:5d:
                    2b:41:b1:e3:c3:5c:26:aa:b1:f0:e3:59:33:b8:2d:
                    95:77:df:d4:a6:7c:31:a3:a8:d1:a2:68:0c:83:c7:
                    4d:be:81:de:f6:56:42:b0:6a:97:39:1d:00:3c:a7:
                    88:09:af:80:3b:54:be:19:b2:3c:b6:31:e0:33:4a:
                    fc:ed:11:56:1a:ca:e0:88:5d:79:39:96:2f:f4:0f:
                    6e:15:c6:71:24:79:3d:1a:82:76:d6:91:c9:0b:1b:
                    40:04:db:82:d7:c8:1b:f5:da:cb:9c:b0:b1:64:ae:
                    34:28:6f:2d:6a:59:c6:c6:d6:fa:fc:6b:7b:49:64:
                    cd:7e:10:28:72:c0:93:61:5b:24:52:59:af:f1:89:
                    97:2a:7a:09:b1:3d:55:cb:43:e0:5a:e4:0c:8d:ca:
                    63:5d:7e:e6:ef:b0:24:a2:98:37:5e:ac:69:ff:46:
                    31:0b:34:ae:d9:c6:4f:85:a7:85:2e:48:51:f6:30:
                    2f:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:8C:62:F0:30:66:01:C1:97:5F:A5:AB:35:F8:19:8A:84:0A:2F:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/710b950a-c0c3-3150-85ed-9b0fc49f4295.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.70.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:9e:97:94:14:97:0d:e2:a1:7c:ff:a5:f9:06:d6:76:21:7c:
         62:25:4a:38:35:e4:8d:a7:5e:49:60:4b:a2:f6:47:4a:b1:d7:
         bf:1d:cf:e1:c5:44:96:ca:68:1b:aa:c4:39:8f:45:86:15:22:
         b1:fa:ea:f4:94:b9:d2:0b:fc:27:9a:89:e8:97:8a:9b:93:7a:
         f3:83:4a:b1:00:35:6f:9e:b8:80:27:09:3a:b4:1f:0f:ae:e8:
         42:20:a1:64:e9:b8:99:c9:5f:d0:81:3b:22:95:d4:46:e0:6e:
         6a:41:47:33:70:2b:ff:c8:05:7d:2c:19:9c:7c:c9:8a:d1:1b:
         d2:d6:9a:e0:63:a1:6a:a6:6a:eb:d0:ef:23:97:90:ac:9a:8d:
         0e:a2:d8:7e:51:10:fc:79:b6:db:f6:58:68:ea:b7:25:94:5b:
         f0:29:68:52:c4:5c:50:08:d4:80:b6:56:ec:5a:22:81:25:6c:
         22:0f:22:2f:b4:f9:bd:d5:0a:e4:8e:f7:7b:73:98:1e:cb:b8:
         8c:4e:b2:75:60:d8:aa:df:a4:40:8c:96:8f:8f:17:aa:68:e3:
         e7:c8:75:6f:2d:bc:f0:d1:de:3c:bb:92:15:fd:f5:a4:30:3d:
         8f:15:4e:cb:50:17:f0:10:f5:78:47:ef:de:50:03:12:11:04:
         d0:3b:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:32:00 2025 by rpki-client