Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a248df24-a312-3bc0-ac28-3593eb07784b.roa
File:                     a248df24-a312-3bc0-ac28-3593eb07784b.roa (raw, json)
Hash identifier:          aB57cMg24RAXMEpD7wGKxucBxrdl7R3h0i/wcU1NI+U=
Subject key identifier:   25:B1:EA:38:38:5B:2B:DB:85:0C:3C:98:78:77:30:9F:C4:FE:D4:5F
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F53663BBDF69E5F5697CD0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a248df24-a312-3bc0-ac28-3593eb07784b.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.163.0.0/18 maxlen: 18
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:36:63:bb:df:69:e5:f5:69:7c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=2b51e644-ba0d-4095-a3df-712aeed1dd6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:03:aa:d4:03:bc:9f:da:75:60:65:bf:c3:97:
                    d4:45:64:59:e3:89:d3:6a:86:66:7c:58:13:65:d9:
                    36:24:69:a7:2b:38:00:35:a1:c6:6c:a2:49:ea:5d:
                    cb:9a:91:13:e0:d6:b7:18:69:90:86:ec:6b:c1:35:
                    ce:1c:77:ae:b0:19:c4:c9:42:00:c9:9e:f0:2f:5f:
                    7a:b4:3f:08:94:d6:40:b6:f6:bb:4e:db:ea:91:ba:
                    0d:ff:99:80:0e:f8:5b:3d:2c:06:cd:21:32:f9:eb:
                    8f:7a:54:d5:a1:6e:00:14:4b:af:3b:a9:e4:8a:15:
                    dc:85:a6:d2:5f:26:03:07:bf:69:c1:0b:8d:c8:3d:
                    87:29:7a:a0:03:b5:e0:ae:f8:f4:67:e1:fe:54:86:
                    f4:7f:33:59:81:40:3b:e6:d9:77:e3:ee:02:26:65:
                    da:f0:6e:d6:b8:b5:13:f5:4f:8a:d3:3b:eb:09:a8:
                    dc:63:99:bf:92:af:e9:9d:ce:e7:cf:5f:20:ea:77:
                    b6:a7:3e:1b:73:f1:c0:fa:74:2d:29:3b:a9:a8:ac:
                    0b:19:f3:6d:10:d1:8d:70:92:6c:a1:77:46:b6:08:
                    55:a1:ee:a5:9c:bb:9f:f0:00:a1:2f:2a:3d:28:1a:
                    ed:cb:43:d6:1c:af:ac:6f:9b:e3:48:3e:ae:95:fe:
                    24:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B1:EA:38:38:5B:2B:DB:85:0C:3C:98:78:77:30:9F:C4:FE:D4:5F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a248df24-a312-3bc0-ac28-3593eb07784b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.163.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:38:2e:f5:4f:68:8f:de:93:3f:ff:34:27:4c:87:eb:43:56:
         33:c0:f1:cd:e8:83:ee:d3:2a:d9:28:af:01:82:23:06:5d:03:
         df:cc:f2:51:1a:80:bc:2d:51:2d:5c:fe:96:76:aa:a3:fb:b5:
         76:58:cc:8e:32:e6:82:0e:02:a2:e9:a2:80:66:72:e2:fd:21:
         3a:78:d3:7e:30:a9:07:67:2a:de:67:5b:b5:7d:3e:dd:ba:1e:
         61:4f:9c:73:de:48:58:e9:ba:58:ba:0f:5c:dd:ce:a9:c9:8b:
         1e:10:cb:ec:ea:be:ad:a2:b0:e0:8a:ea:53:d7:c6:77:48:ea:
         f0:c3:77:63:d2:0f:bf:f9:68:02:a5:6b:20:89:03:32:93:44:
         c2:61:ad:7d:69:af:1c:fe:aa:ce:14:43:9d:98:83:f2:ec:7f:
         27:c2:bc:dd:81:c8:4e:8f:db:38:45:3e:ef:c8:a6:29:f1:1c:
         73:80:b9:5d:1a:c9:be:a5:2e:0b:b7:c4:b2:9e:9b:ff:84:fa:
         d7:b4:14:22:06:5a:7c:75:c0:8e:70:39:e3:78:bc:f8:55:dc:
         85:72:2b:8d:26:41:be:a1:0f:27:fe:3b:45:28:33:3a:d9:4e:
         78:9c:6d:74:9e:4a:a2:31:85:b8:52:d5:3d:05:af:ac:28:d9:
         05:c0:c4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:46:26 2025 by rpki-client