Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3ec9ebf-1536-3b3a-9aec-68a61b328ddf.roa
File:                     c3ec9ebf-1536-3b3a-9aec-68a61b328ddf.roa (raw, json)
Hash identifier:          T8N2ziDIGDiNhuiYJUIRIjjVY8pSPsEMVs3R8YFoM1I=
Subject key identifier:   C9:89:F0:E1:68:A6:FF:5E:93:FD:C6:99:5C:50:C5:99:1D:C8:C1:94
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F4328584839EAD29368A36386291D9560
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3ec9ebf-1536-3b3a-9aec-68a61b328ddf.roa
Signing time:             Mon 16 Dec 2024 14:00:51 +0000
ROA not before:           Mon 16 Dec 2024 14:00:51 +0000
ROA not after:            Sun 16 Mar 2025 13:00:51 +0000
asID:                     19527
IP address blocks:        34.1.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:39:ea:d2:93:68:a3:63:86:29:1d:95:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Dec 16 14:00:51 2024 GMT
            Not After : Mar 16 13:00:51 2025 GMT
        Subject: CN=006fb153-2a1d-4a0d-8489-c9c9c5e92027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e9:e0:79:60:d4:9f:b5:9d:a8:46:3e:d3:0c:
                    27:85:9c:a1:d4:f2:e0:fa:6c:3d:c6:e5:1b:1f:5e:
                    38:5e:49:e1:b0:dd:cb:12:f2:bb:29:75:f2:7f:d8:
                    ee:56:4e:ab:b9:c6:21:58:2f:03:76:77:5e:01:c8:
                    98:ac:ba:bb:6e:fc:21:a6:0e:0e:c5:1f:40:97:9b:
                    83:e4:26:61:97:a4:09:77:5d:97:bf:76:0a:8c:52:
                    78:1e:13:3d:df:b7:0e:a0:3d:17:fa:f1:c7:02:26:
                    8c:82:26:25:05:41:fd:bc:ee:8d:83:72:26:83:44:
                    72:9a:e2:05:8b:7f:33:eb:28:dd:db:af:82:86:04:
                    20:3e:d4:33:13:1f:c6:29:c9:b6:d2:b2:b3:20:b4:
                    66:ef:de:cc:94:9f:ed:12:d7:d7:b5:23:1f:36:1f:
                    b4:9e:41:a0:9b:da:b9:be:95:b0:ca:b7:05:5e:83:
                    ec:06:44:54:f2:8e:de:1d:cd:c4:a7:a4:17:05:26:
                    f6:8a:e8:70:52:6a:32:74:62:a1:04:28:8f:94:57:
                    e6:40:5c:0e:a6:90:d8:ac:6a:47:0b:9d:98:c6:7d:
                    70:26:1a:b2:3d:23:b2:4c:22:c8:b9:ea:b1:b3:b2:
                    1a:a6:fd:f8:43:49:72:af:a7:7b:05:37:0b:c5:7e:
                    ea:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:89:F0:E1:68:A6:FF:5E:93:FD:C6:99:5C:50:C5:99:1D:C8:C1:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/c3ec9ebf-1536-3b3a-9aec-68a61b328ddf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:04:49:68:04:3f:98:2e:69:89:4a:2d:9e:14:fc:86:83:93:
         fc:9a:1d:54:09:d3:75:24:0d:23:49:13:6a:43:aa:c5:6a:c3:
         50:74:27:4a:f2:ab:74:89:cb:5c:bb:ab:f3:f4:66:2e:b5:3c:
         54:27:0a:b9:cd:20:84:e5:df:da:2a:95:c6:23:bc:ae:e3:a2:
         6a:f8:d8:87:29:d2:3c:9c:e0:32:71:7b:cf:87:77:b1:67:b6:
         46:30:07:e5:af:09:69:00:62:5d:93:33:8a:6e:33:92:2d:7a:
         ec:dc:98:24:fb:6e:f0:aa:7f:e2:3c:99:d3:2f:b4:f8:cb:8e:
         14:d0:3b:cd:67:f4:9b:fc:94:32:3b:48:80:f7:39:33:0d:f7:
         2f:09:06:19:08:d4:c2:6a:7f:4d:c5:83:6c:30:d2:a7:f7:27:
         95:75:51:1f:1e:aa:04:71:8c:ae:8e:e7:56:3b:b0:68:e0:19:
         6d:59:05:1e:9a:ac:30:cd:ae:b9:ce:fe:2d:bc:42:49:68:cc:
         35:8e:cf:16:a6:8e:51:e2:55:a5:1d:03:2e:46:f0:75:e0:88:
         e4:92:33:5f:fe:0c:31:a3:50:97:9f:6b:23:f9:f1:85:d4:bd:
         e8:12:62:df:50:dd:4d:3c:d2:c5:95:8a:f6:a4:9f:10:0a:13:
         bc:cf:2d:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg56tKTaKNjhikdlWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTIxNjE0MDA1MVoXDTI1MDMxNjEzMDA1MVowLzEtMCsGA1UEAxMk
MDA2ZmIxNTMtMmExZC00YTBkLTg0ODktYzljOWM1ZTkyMDI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiungeWDUn7WdqEY+0wwnhZyh1PLg+mw9xuUb
H144XknhsN3LEvK7KXXyf9juVk6rucYhWC8DdndeAciYrLq7bvwhpg4OxR9Al5uD
5CZhl6QJd12Xv3YKjFJ4HhM937cOoD0X+vHHAiaMgiYlBUH9vO6Ng3Img0RymuIF
i38z6yjd26+ChgQgPtQzEx/GKcm20rKzILRm797MlJ/tEtfXtSMfNh+0nkGgm9q5
vpWwyrcFXoPsBkRU8o7eHc3Ep6QXBSb2iuhwUmoydGKhBCiPlFfmQFwOppDYrGpH
C52Yxn1wJhqyPSOyTCLIueqxs7Iapv34Q0lyr6d7BTcLxX7qKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMmJ8OFopv9ek/3GmVxQxZkdyMGUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYzNlYzllYmYtMTUzNi0z
YjNhLTlhZWMtNjhhNjFiMzI4ZGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFIgHgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGAESWgEP5guaYlKLZ4U/IaDk/yaHVQJ03UkDSNJE2pDqsVqw1B0J0ry
q3SJy1y7q/P0Zi61PFQnCrnNIITl39oqlcYjvK7jomr42Icp0jyc4DJxe8+Hd7Fn
tkYwB+WvCWkAYl2TM4puM5IteuzcmCT7bvCqf+I8mdMvtPjLjhTQO81n9Jv8lDI7
SID3OTMN9y8JBhkI1MJqf03Fg2ww0qf3J5V1UR8eqgRxjK6O51Y7sGjgGW1ZBR6a
rDDNrrnO/i28QklozDWOzxamjlHiVaUdAy5G8HXgiOSSM1/+DDGjUJefayP58YXU
vegSYt9Q3U080sWVivaknxAKE7zPLeA=
-----END CERTIFICATE-----
Generated at Sat Apr 26 09:48:45 2025 by rpki-client