Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/74d5b8f7-3452-35f1-a269-94f8ad118002.roa
File:                     74d5b8f7-3452-35f1-a269-94f8ad118002.roa (raw, json)
Hash identifier:          0gU/PSv9gCN4RSi6gaKMfjY/4oESk5anlPLoEhdGKq8=
Subject key identifier:   09:CC:9A:61:31:DD:9B:6A:8B:D9:0F:E3:98:04:6E:2C:35:BF:CC:7E
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F51085630943FD78F30280
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/74d5b8f7-3452-35f1-a269-94f8ad118002.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        34.177.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:10:85:63:09:43:fd:78:f3:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=5c8e6e8e-0765-40a7-8251-2df96de3c72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b0:10:8e:42:25:8b:6f:27:43:ce:23:16:69:
                    bb:ae:b2:c0:de:45:71:35:45:69:ce:63:66:d9:28:
                    36:1f:9a:ba:9d:3b:68:b8:04:f9:a8:fa:dd:ff:51:
                    fc:7c:89:cf:ad:29:0b:10:d6:78:7a:26:79:77:15:
                    23:1e:66:12:ac:85:74:f6:2c:c8:24:36:80:3b:2c:
                    48:17:5a:f3:26:7f:eb:3d:83:38:db:0d:10:5c:0e:
                    69:d4:21:9c:b3:99:44:c4:ab:62:49:5a:cf:3d:23:
                    f3:22:09:45:64:77:8d:ef:72:47:7c:3c:94:c3:bc:
                    f1:75:86:ef:9d:6d:1c:8e:b7:49:62:2a:57:40:21:
                    c1:98:19:64:9b:72:83:fe:3f:5a:88:04:82:85:70:
                    ab:43:a4:3b:9d:9d:22:09:92:de:34:54:52:e7:eb:
                    c0:a1:05:ef:cd:d5:4a:1f:81:8f:b0:9a:f4:47:96:
                    91:70:bb:f2:13:dc:6a:32:aa:27:23:86:67:3a:2f:
                    bb:e6:dd:76:b0:e3:59:75:50:3e:a8:a8:8f:60:ae:
                    9e:5e:ce:cc:2a:bd:4c:76:42:5d:9f:fc:6c:67:d9:
                    e3:f9:96:fe:5c:61:ee:28:49:fa:70:ef:13:d4:0b:
                    d9:67:7a:0a:bc:04:4b:27:03:db:87:b8:43:6b:bd:
                    fa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CC:9A:61:31:DD:9B:6A:8B:D9:0F:E3:98:04:6E:2C:35:BF:CC:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/74d5b8f7-3452-35f1-a269-94f8ad118002.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.177.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:3f:c9:f8:38:4d:cc:76:7f:62:37:ec:b1:e3:59:d8:b8:93:
         ef:a8:82:23:0f:3e:08:cb:4d:2b:29:6d:f7:2b:a3:34:a2:7c:
         5b:34:fb:c8:55:b6:d5:1a:32:84:f4:f2:f6:35:6c:4e:08:c0:
         ec:0b:68:dc:be:0d:75:82:e3:78:d5:98:04:a7:61:7a:d8:1d:
         5c:5f:70:98:b3:d4:c5:ef:a4:5a:5e:8c:d2:9f:22:68:28:20:
         1c:e9:98:a6:e3:99:1c:c3:4d:ad:bc:08:bb:a8:13:9e:df:34:
         6f:1b:20:b7:00:ef:ac:3f:3e:e5:44:20:b0:dd:b4:3e:77:c4:
         a1:80:26:11:ac:6d:ea:7d:43:ac:79:30:d0:51:a2:8b:3b:61:
         0d:b9:ca:89:e3:05:7e:3f:90:89:58:73:3c:eb:92:22:23:22:
         c3:2b:40:90:c7:6e:82:1d:1a:82:6b:db:74:14:f6:54:6f:ac:
         09:98:d6:d7:6e:52:f8:0f:fd:ae:8a:82:c7:26:73:21:3d:1a:
         de:a2:31:01:36:19:d3:fa:e8:c6:e7:7f:6a:08:bb:55:95:5f:
         74:4f:92:b4:62:07:5f:61:e0:51:a2:f0:8f:be:34:60:89:03:
         d1:d9:c4:4f:2b:6a:44:cd:96:4b:75:9a:18:58:5d:45:b9:f1:
         44:84:39:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----