Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a360c08e-a9af-36d2-b599-fd736f7587a7.roa
File:                     a360c08e-a9af-36d2-b599-fd736f7587a7.roa (raw, json)
Hash identifier:          n9XmGIv+vBIKQFaynAlh8atJzO4l9o5YFbT+1iGuaSM=
Subject key identifier:   A4:5E:BF:85:3B:1F:06:91:3E:77:FD:C3:C5:26:BB:B1:05:13:62:12
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F541C2D0CA840EE8AC7C78
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a360c08e-a9af-36d2-b599-fd736f7587a7.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.88.112.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:41:c2:d0:ca:84:0e:e8:ac:7c:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=520c2f81-41a4-452d-9987-23ace9b4d055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:ce:18:99:87:6e:cb:a3:c3:a2:26:7e:91:dd:
                    34:7c:20:db:72:ea:07:25:ed:9d:5c:d1:57:6e:1d:
                    30:61:5c:ec:96:53:4b:68:6f:26:de:68:af:52:30:
                    58:9e:7c:fd:37:61:76:74:c1:ed:6e:5e:ee:1a:a9:
                    4b:ce:e6:93:e5:1e:16:52:51:5f:42:ad:9a:39:ea:
                    52:43:d2:b1:d1:5d:19:f3:fb:7c:49:97:83:85:8e:
                    51:c4:37:51:67:b3:67:81:14:48:8e:a8:bc:aa:96:
                    ff:31:78:0e:2f:cd:6e:a4:a9:c9:bf:df:63:2c:e2:
                    17:0e:a9:e7:70:80:59:64:ed:74:3f:2a:7c:d2:77:
                    f9:45:bb:d0:f6:b7:47:c3:20:a7:2e:f2:37:25:53:
                    ca:dd:9e:f6:0b:16:72:07:b4:53:b8:b4:19:c4:e2:
                    45:6f:03:06:6a:d0:3f:08:b8:c3:54:15:54:8e:42:
                    ca:ce:17:59:1a:23:d9:19:9c:cc:14:a7:d8:5d:9b:
                    6c:43:44:69:6c:b7:8c:af:14:64:7d:77:eb:d0:42:
                    d0:a5:29:c6:5e:79:d5:4c:8a:c6:76:ee:cf:4d:58:
                    bd:d2:86:d3:a6:a7:aa:fe:b3:c6:11:2d:d8:bf:c6:
                    84:c0:e6:51:6a:7d:8f:45:45:1f:85:c5:98:3e:08:
                    47:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:5E:BF:85:3B:1F:06:91:3E:77:FD:C3:C5:26:BB:B1:05:13:62:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a360c08e-a9af-36d2-b599-fd736f7587a7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.88.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:bd:ce:cb:de:8e:76:83:0e:6c:66:5d:c0:39:14:9a:b7:68:
         07:e4:73:f8:c5:87:c8:fc:fe:44:21:7c:b2:94:74:8d:f0:e3:
         ae:32:11:b6:9a:2d:ce:bc:77:f6:ad:c1:0f:8a:32:4c:43:b1:
         03:26:c0:24:3a:15:27:68:4e:ee:06:24:26:b4:32:12:d3:b4:
         01:3a:11:a4:12:71:da:22:63:35:e1:38:90:48:9c:93:5e:b4:
         9b:cc:9f:60:ef:02:3a:99:34:15:1f:8f:50:02:84:16:25:f5:
         84:99:3e:9a:ec:f8:3c:04:77:1d:ed:34:65:70:ea:52:3e:73:
         a0:41:3b:68:d7:66:2a:d4:82:5b:3c:01:6b:30:b4:6d:e6:ab:
         f8:74:00:4a:28:0d:41:79:58:2e:92:b1:8c:b8:d3:bc:0c:b4:
         82:bc:2d:06:62:84:de:64:3f:77:66:29:a3:1d:bf:b9:df:54:
         02:8e:f8:42:94:bb:33:c7:27:4e:2d:02:af:b2:d9:46:43:5a:
         b2:34:90:f4:70:95:ec:73:ae:f4:72:81:3c:4e:b2:7c:eb:3f:
         ca:45:24:52:04:d0:6f:eb:ca:3f:5f:0a:7c:dc:d3:4d:f9:e6:
         b6:3c:fe:74:6e:93:5f:73:8e:b3:22:86:17:d0:a4:fe:2f:c3:
         50:cf:3e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:39:46 2025 by rpki-client