Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72e38756-cbd6-3b2d-ab02-a77af2b6167e.roa
File:                     72e38756-cbd6-3b2d-ab02-a77af2b6167e.roa (raw, json)
Hash identifier:          CnyNO7QWiMeeVdryyvQd3qKzDtD0iZl5y7MVkWCOZCs=
Subject key identifier:   AE:C1:3C:F0:C6:73:92:BA:F2:36:7E:FA:EE:24:D8:CF:F3:01:4D:88
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4F3C28AA0CD671B5538C0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72e38756-cbd6-3b2d-ab02-a77af2b6167e.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        35.185.160.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:f3:c2:8a:a0:cd:67:1b:55:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=9c0d7933-792a-4b6f-8194-de9d1736226a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b4:23:bb:6b:b6:f3:ed:82:8e:4e:cc:13:8e:
                    55:8b:03:72:33:96:11:d9:08:17:03:5e:b8:c1:92:
                    a5:30:6e:f3:85:e2:7f:29:8e:f7:86:67:50:6f:11:
                    3f:86:10:f1:c8:41:c9:72:29:19:d1:7a:d1:5b:27:
                    71:92:d0:2a:c7:03:cb:a3:16:75:a3:56:51:37:09:
                    87:5a:7d:68:77:4e:48:44:fb:ef:d2:a0:1f:8d:80:
                    43:a8:27:cd:e3:80:fd:b3:72:ea:32:d1:27:0d:ea:
                    9c:ef:0a:af:db:e0:aa:30:34:18:a9:a7:6e:d2:a9:
                    f8:83:cc:03:cd:12:7f:d1:42:bc:88:c0:5c:2a:69:
                    41:3b:83:b2:7c:ea:e1:4d:a5:4d:a4:de:21:14:ea:
                    4c:5a:31:50:70:99:18:04:de:35:68:50:d1:6d:e9:
                    7c:88:9d:14:3f:10:50:67:f0:b3:5f:16:78:52:19:
                    6f:8b:cb:50:7b:8b:71:23:31:74:b5:63:88:d6:00:
                    68:2b:68:b0:50:8f:fe:09:bb:3b:3b:f4:81:8c:0d:
                    f5:d4:48:07:68:4b:ae:57:cf:04:88:24:97:aa:2a:
                    cf:09:1e:49:2f:db:10:b3:49:dc:9d:26:b5:11:ed:
                    e7:99:27:72:82:21:3d:36:b6:98:f2:e3:92:7d:86:
                    99:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:C1:3C:F0:C6:73:92:BA:F2:36:7E:FA:EE:24:D8:CF:F3:01:4D:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/72e38756-cbd6-3b2d-ab02-a77af2b6167e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.185.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:1c:22:ff:ed:9b:26:de:24:77:c6:b2:23:c1:33:97:68:c3:
         8e:81:38:91:07:1d:0a:f1:0a:6f:87:36:7e:cb:58:fc:f1:a0:
         e0:7b:93:06:fe:7f:ae:b2:0d:3d:f7:3f:5e:2d:55:34:39:ed:
         65:47:70:cb:70:fb:cd:b6:4b:0a:66:fd:09:99:96:49:3c:75:
         48:f6:8c:9c:d8:aa:ed:97:a5:a3:0e:3c:25:a2:a6:14:0d:d5:
         af:e0:96:22:f6:12:ce:43:47:5b:fa:d6:69:fd:27:5c:2c:34:
         8a:02:53:6f:86:b2:51:68:5d:b4:50:47:cc:f0:42:0f:8e:ba:
         7d:d9:7a:66:07:cb:b0:11:cd:19:a6:03:b5:c6:ea:14:41:84:
         54:99:43:bd:9c:63:cd:a1:56:b1:d4:e5:86:d5:3b:13:24:f4:
         f0:6c:15:58:c2:25:7c:51:33:1d:ea:cb:1f:8e:1a:a4:d7:b5:
         0b:bb:f2:03:ee:ac:46:b4:59:5b:3b:ef:29:2c:c1:59:da:25:
         33:90:1b:94:a3:05:e3:92:78:f1:3f:68:7d:4f:88:26:a5:45:
         dc:f3:1f:4c:90:20:e7:85:50:9c:48:13:cc:bd:4f:19:8f:83:
         a8:c2:fd:d0:30:e6:d7:0a:24:8c:a0:40:15:f6:2b:c5:24:a7:
         3f:dd:82:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----