Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/adb9689f-6a91-3bd6-ac5b-e52dbae94fb9.roa
File:                     adb9689f-6a91-3bd6-ac5b-e52dbae94fb9.roa (raw, json)
Hash identifier:          RnBGdcbkOOa3e6SyEocutEAvTCwg30MD8GRdSw5O3C0=
Subject key identifier:   0A:87:9E:63:F5:EB:BE:3F:16:0F:CF:E8:53:62:CB:2A:06:F8:06:9B
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4F9F9A275749EB8BC3800
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/adb9689f-6a91-3bd6-ac5b-e52dbae94fb9.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.96.176.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:f9:f9:a2:75:74:9e:b8:bc:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=e01fc444-f8fb-4f70-8d18-0a5bbe29b775
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:07:d3:34:a0:fd:57:c6:6b:94:76:2e:4a:25:
                    b4:b0:9d:8a:f5:0b:08:3c:55:f8:31:c1:e7:86:e1:
                    a7:c2:86:aa:9c:be:41:8c:0e:23:63:29:cb:78:75:
                    b4:3f:4d:27:76:22:05:4b:3a:ed:82:3e:5d:63:37:
                    bc:5d:a7:66:75:b9:e9:86:e6:c5:a6:3d:d1:d7:4f:
                    82:34:3c:65:ec:f9:a2:33:26:c7:30:e3:5c:58:90:
                    ea:d2:8f:ad:26:26:1d:db:ce:94:d6:b4:54:7b:5b:
                    6e:ef:23:1c:48:ae:0c:9b:54:be:f5:90:7a:f2:73:
                    49:b8:ac:59:ec:0a:be:a4:76:92:ec:78:8e:3e:86:
                    72:f6:d2:1e:32:0d:ec:33:08:ee:ba:e9:45:53:a5:
                    07:a2:8e:2a:e0:78:cc:37:9f:4e:60:f2:b7:d1:a9:
                    48:07:17:21:8f:f5:86:4d:14:0b:a6:de:94:ca:e8:
                    83:b5:16:50:c5:95:8f:6a:a2:ee:f5:85:86:c7:c3:
                    15:dd:20:ae:ea:0d:e0:c6:c1:4f:5e:2e:9b:51:d2:
                    36:ab:3f:8a:e0:30:16:3d:37:a2:d1:d3:9c:f7:5b:
                    f9:74:d8:e6:49:66:c1:07:8d:05:40:b7:3c:75:26:
                    36:84:8f:5a:20:ee:7d:77:5d:8f:62:68:01:51:11:
                    f9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:87:9E:63:F5:EB:BE:3F:16:0F:CF:E8:53:62:CB:2A:06:F8:06:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/adb9689f-6a91-3bd6-ac5b-e52dbae94fb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.96.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:85:5d:6f:44:13:f0:8c:7d:06:70:eb:5b:ed:29:9a:e1:81:
         3b:ec:7e:ca:82:19:67:f3:86:ea:2b:26:7f:dd:c1:02:8c:74:
         74:f6:ab:38:18:06:c2:a3:08:a2:68:de:99:43:cd:35:b1:c3:
         75:34:d8:ac:b2:9d:ae:52:91:78:6b:1d:fa:03:fe:99:f6:99:
         8a:c5:41:48:36:e1:db:35:82:9a:db:bd:92:9b:0d:45:8c:63:
         40:40:98:3a:a9:dc:11:87:b6:d4:d4:6f:b2:cf:52:03:32:06:
         aa:27:95:b7:3d:02:88:18:1b:b7:c4:06:b3:3a:75:8d:ee:55:
         13:dd:43:91:c1:aa:db:3d:dd:fe:a5:3b:88:65:2f:a1:fa:58:
         b4:a8:46:c2:dc:ad:7d:ac:3e:4e:34:3a:49:7c:d3:46:a9:1e:
         38:e5:84:ea:d1:bb:95:be:95:1e:ab:68:f2:66:1c:3a:df:a5:
         63:6f:d9:f3:21:78:63:60:b1:cc:98:16:6e:50:d2:3f:ea:fd:
         bd:33:0f:9a:6a:6d:01:a4:97:3d:42:d1:46:2b:39:f5:7d:e4:
         45:c6:24:7a:2c:fc:5c:6e:cd:4c:53:42:1a:df:77:2c:72:32:
         53:d3:a3:20:20:30:a9:28:ad:7f:0d:96:2f:03:50:91:4c:dd:
         47:f1:a6:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:44:15 2025 by rpki-client