Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0f5a9fd-e232-318d-b4f2-082ffc27942b.roa
File:                     c0f5a9fd-e232-318d-b4f2-082ffc27942b.roa (raw, json)
Hash identifier:          VwBEhcJpRFwogvGC1r0UAnTqMr2K/TaD8PgJUAi1xqo=
Subject key identifier:   0C:DD:8C:00:55:DA:2D:0D:B4:50:E4:EC:40:B6:0A:1B:CA:F6:E5:FB
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F4CCF9F79A034B09CB0140
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0f5a9fd-e232-318d-b4f2-082ffc27942b.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     15169
IP address blocks:        34.154.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f4:cc:f9:f7:9a:03:4b:09:cb:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=9ea0fe9a-379f-4981-b54b-54c732351d96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8d:0a:b1:d6:88:de:3a:c9:af:f4:84:30:47:
                    80:c2:7d:8c:19:f5:e0:3f:a4:e0:54:0d:da:65:f8:
                    67:1b:77:a0:81:ad:2e:a5:9f:86:d5:49:4b:a5:e5:
                    40:6e:54:13:e3:84:d2:29:25:e1:e9:d7:1c:5b:3a:
                    bd:c3:da:c7:c6:67:27:4b:75:ce:67:60:45:61:0b:
                    2d:49:5d:d9:75:ae:ba:41:2b:f6:70:2d:10:58:fd:
                    d4:75:82:d9:b9:06:b0:14:e9:bf:18:3c:82:52:e3:
                    b8:14:f5:34:2f:63:56:d9:a0:88:70:91:2c:f4:2f:
                    d8:9b:71:b6:ce:95:e5:32:06:47:3c:57:e3:8a:b1:
                    dd:5e:49:1e:2b:b5:18:e8:47:43:ed:fa:c5:e1:56:
                    41:13:21:7d:26:e1:da:1d:2b:d3:15:ff:a4:44:75:
                    36:ec:24:f3:2e:03:05:74:08:12:84:63:c7:5f:ef:
                    06:ec:d8:96:2f:9d:9f:e4:38:c5:52:c3:96:df:7b:
                    75:bd:77:4d:43:36:03:c4:90:af:b0:50:83:03:56:
                    25:76:2b:7c:e4:a9:11:a1:ac:7a:89:4b:e2:43:95:
                    1c:86:b3:6c:75:32:dc:14:be:cf:ba:71:81:5a:53:
                    d2:8a:0f:13:f5:29:8b:00:30:c7:45:f7:ca:ab:b5:
                    ec:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:DD:8C:00:55:DA:2D:0D:B4:50:E4:EC:40:B6:0A:1B:CA:F6:E5:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c0f5a9fd-e232-318d-b4f2-082ffc27942b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.154.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:dc:78:31:14:a4:20:36:b2:b5:de:dd:cb:0a:6c:37:d1:03:
         af:63:33:d3:a1:55:a1:77:79:50:1a:a0:3f:cd:48:a5:74:99:
         9a:a9:00:ae:cc:74:55:23:db:33:fd:ec:42:f2:be:23:62:8f:
         a7:66:47:0a:09:94:07:be:f3:71:ed:29:71:3d:95:cf:f0:eb:
         11:7f:8e:bd:5b:e2:82:4e:66:cf:be:e9:eb:1f:59:c1:3b:d6:
         b7:af:54:db:6b:ce:b6:44:b1:cd:4e:de:f2:c8:36:84:1f:14:
         68:a4:52:a5:c6:6b:6d:ed:41:84:9e:15:0a:ca:b9:c9:2a:f5:
         ba:ef:1b:73:ec:12:6b:58:ec:83:56:62:55:3e:c3:25:13:fb:
         3b:3a:20:b2:cc:ae:ae:96:eb:7d:e3:ae:cc:d9:3b:9c:cc:c7:
         ed:6b:e9:c9:c1:d2:cd:24:5f:f1:5b:a3:3f:bd:d8:ca:5b:b4:
         85:d0:07:de:fa:51:ba:b0:7e:f2:a6:4d:62:84:8b:57:df:3f:
         78:86:64:a1:66:ca:ba:72:7f:ec:ee:ae:5e:25:17:5a:b5:f0:
         b7:2c:40:cb:74:9f:a9:65:89:ef:4e:a5:56:9c:0c:a8:d3:0e:
         21:b3:4e:c2:0d:34:f2:6b:45:0d:c1:c1:a3:1f:ee:e5:de:c9:
         97:cd:95:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----