Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/79888970-b39e-3f1a-8b45-00303d4214ac.roa
File:                     79888970-b39e-3f1a-8b45-00303d4214ac.roa (raw, json)
Hash identifier:          RN1sevdwIvokECL6CDn15KfbXJuZvgi73y76XIdMvJs=
Subject key identifier:   CA:A0:3A:75:69:0C:75:32:FE:5C:D8:F8:E4:A7:D2:4C:AB:F4:7D:F1
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F5324A42CF4D8E36DE9780
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/79888970-b39e-3f1a-8b45-00303d4214ac.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.145.96.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:32:4a:42:cf:4d:8e:36:de:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=f30a8192-ff5c-4b77-8ce6-835f7ad92876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2f:ab:8e:28:96:36:f7:54:d1:e2:35:d2:b4:
                    23:95:1c:15:a4:79:d7:3b:9c:62:bb:7d:35:56:11:
                    86:da:9b:7b:52:6e:17:eb:17:84:60:e7:9a:2a:46:
                    09:79:ff:b3:89:a2:46:4e:80:ae:a2:f4:70:b4:d0:
                    f0:67:d6:6f:e1:03:75:ce:67:de:dd:08:8b:78:5e:
                    94:1b:60:80:b9:7d:fe:3a:ca:36:df:90:cd:37:d4:
                    66:4e:22:a4:90:3f:38:09:e7:9e:d6:83:6f:5f:e6:
                    18:17:25:38:ce:df:07:33:ab:28:b6:32:22:a4:8a:
                    cf:48:77:23:59:ee:08:6d:9f:c5:ba:1d:c5:c6:77:
                    30:c9:23:a4:20:93:f6:6f:dd:70:ab:5c:cd:ee:d1:
                    79:ff:1a:3d:d2:99:0f:2d:24:e9:de:2b:93:dc:b3:
                    14:5e:80:70:f8:16:0f:66:ac:25:f2:67:44:9f:82:
                    bc:4f:72:a1:7e:38:ea:de:8a:58:f8:20:b2:12:7c:
                    6a:9f:52:dd:90:7f:8f:61:fb:21:5e:a6:06:7c:8b:
                    6f:1d:e6:90:c8:75:dc:ac:0c:ab:c8:42:17:3d:d5:
                    11:79:35:0b:df:43:5e:0a:2a:dc:0e:41:fa:d0:9d:
                    ea:3e:63:0b:09:50:f3:57:b2:17:17:11:0f:d7:48:
                    a3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:A0:3A:75:69:0C:75:32:FE:5C:D8:F8:E4:A7:D2:4C:AB:F4:7D:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/79888970-b39e-3f1a-8b45-00303d4214ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.145.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:a4:52:73:4b:6b:9c:90:bd:7d:95:83:4d:1c:77:f0:e1:78:
         77:27:a9:e3:64:d0:52:43:c0:bc:8c:5c:f9:6a:84:58:57:d2:
         42:9f:29:1f:90:ca:4b:bb:b2:0b:b7:3c:93:bc:34:78:22:fd:
         b8:78:6d:4f:70:7d:57:a9:c7:90:9b:65:2f:26:c8:8c:17:46:
         4b:74:d9:6a:28:fc:93:27:f8:f8:c3:c1:4c:fa:8e:01:99:1f:
         c4:91:21:92:8b:86:67:0d:fa:52:81:82:0f:58:84:7a:73:a4:
         30:fe:c4:b0:44:85:75:e0:b6:80:1b:ad:62:47:96:49:06:b2:
         92:3a:6e:cb:ee:6e:51:a4:fb:80:73:9e:08:30:38:e6:d3:76:
         69:78:4b:91:0b:d9:17:0b:8b:b2:bb:68:32:b6:22:df:50:95:
         1e:14:1c:53:29:8d:07:eb:63:04:11:98:48:8c:a4:7d:2e:8e:
         99:ce:34:e7:cd:64:1e:0e:74:3f:c6:15:9a:c7:24:d8:ab:1d:
         f6:b3:d1:42:39:a3:96:6d:e8:0e:0b:f9:1c:f9:a0:f0:dd:5c:
         d1:73:29:ee:d6:d6:97:0a:fd:c6:c7:25:72:41:6a:49:32:d9:
         2f:50:91:f6:e8:f9:cf:a9:fe:62:0e:87:90:75:c4:f9:cd:a8:
         d8:52:b1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----