Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd5516a8-2126-3d90-abde-ee6b599139ab.roa
File:                     cd5516a8-2126-3d90-abde-ee6b599139ab.roa (raw, json)
Hash identifier:          yiZBq4Na2YcHexGhmGYkDchBTdHF/ckQyfPzesww4lw=
Subject key identifier:   4A:01:03:CE:D5:67:EA:34:BC:AC:01:4A:C1:15:94:83:1E:2A:F7:E8
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F5354C8EB3B028BE386BC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd5516a8-2126-3d90-abde-ee6b599139ab.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.99.112.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:35:4c:8e:b3:b0:28:be:38:6b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=744ae400-a50b-4145-a677-3801efe4b33c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7f:2d:62:12:0d:bf:e4:29:e5:01:55:d2:f4:
                    08:1b:59:81:18:c1:a3:45:25:87:03:9d:eb:bd:4d:
                    73:a8:02:c7:f9:3a:af:07:9a:b7:3a:63:d9:27:de:
                    05:fb:c8:f9:ca:2a:87:01:83:31:1d:4f:28:8a:89:
                    e2:0e:7d:67:4c:36:ac:46:53:57:02:8b:95:8a:e6:
                    df:9b:ff:57:81:cc:0c:4b:d6:c4:78:3c:cb:13:7f:
                    0a:d7:c2:30:32:d3:d1:9a:6e:4d:09:b2:7a:4a:1a:
                    c6:a7:24:ba:2b:cd:c6:9b:95:49:9f:34:3b:78:2f:
                    9d:d8:24:12:b5:b4:76:77:67:6d:22:1e:12:b0:b8:
                    f1:1c:7b:14:61:c5:34:30:54:96:0c:ed:44:9c:b2:
                    97:19:33:6c:48:a2:c2:1e:7f:f4:82:00:a1:ee:e4:
                    05:4b:d3:c8:9b:26:db:56:7c:56:17:59:a4:2d:a0:
                    3a:53:41:4e:58:8a:96:3a:42:2a:93:7a:a1:fe:16:
                    99:72:83:94:6e:06:a0:86:a4:1e:43:95:92:1e:7a:
                    5f:b3:ff:fa:7e:77:fe:6b:88:bb:c7:e0:ac:16:6e:
                    98:5b:e2:8d:23:54:54:3e:a1:35:d2:e5:1a:60:69:
                    35:e2:4f:d5:af:be:e5:f5:70:f5:4d:d5:95:b0:fc:
                    48:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:01:03:CE:D5:67:EA:34:BC:AC:01:4A:C1:15:94:83:1E:2A:F7:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cd5516a8-2126-3d90-abde-ee6b599139ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.99.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:cf:31:f4:bb:4c:40:31:71:f6:83:f5:2f:a3:4b:00:90:2d:
         c5:f5:32:c0:77:b1:e1:5a:d8:53:9a:a2:31:41:2c:4c:b1:1e:
         4e:16:35:68:3b:06:aa:07:5f:b2:36:25:b5:26:1e:15:4e:4e:
         ed:8e:d2:92:c9:67:5e:b7:5b:c6:0e:0b:ef:27:03:25:61:32:
         84:3e:08:d9:22:3c:50:49:75:56:50:ff:59:3c:26:b4:3f:8e:
         89:91:55:0e:18:db:6c:1f:55:6c:cc:cc:60:c2:86:91:cd:93:
         17:21:49:aa:00:b2:26:f6:33:a0:a6:f7:e4:d4:88:94:c9:3c:
         ee:38:7f:02:80:2c:ae:fe:03:25:e5:4b:43:24:73:16:25:3c:
         a0:e4:b0:0b:27:f5:49:d6:b3:02:e7:e8:ef:64:b1:1d:0e:3d:
         85:63:da:29:9b:55:c3:61:1b:a3:63:33:ad:98:5a:ae:9b:17:
         31:de:af:4a:ad:0f:40:41:ac:c1:0f:fd:60:ab:21:f8:b5:8e:
         84:f4:34:0f:9b:10:67:c6:e8:71:dd:f6:09:9f:b8:63:27:c2:
         d4:63:5b:20:39:72:b2:b8:e8:9c:a8:03:1f:8d:0a:68:db:28:
         16:fa:24:6e:c9:30:c3:10:af:30:e2:29:f1:3b:98:89:21:7e:
         2f:0f:53:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:31 2025 by rpki-client