Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3f4e9e3-557e-3363-9ab0-7e765ae5606c.roa
File:                     d3f4e9e3-557e-3363-9ab0-7e765ae5606c.roa (raw, json)
Hash identifier:          fYTlMqJ5UsVvhslRrvvLRMjALtayrm+GYU7H8yer8bM=
Subject key identifier:   E1:8E:29:AB:90:B8:7F:7D:60:DD:74:3C:A6:8C:73:1A:7D:E4:43:D3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F53AA5EEEDD77FA5895580
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3f4e9e3-557e-3363-9ab0-7e765ae5606c.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.98.32.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:3a:a5:ee:ed:d7:7f:a5:89:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=63d0c7f2-2c78-4115-ac94-c266d6ccdae5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:41:fd:14:35:e2:4b:49:df:16:ec:b2:9f:02:
                    bf:4c:3a:33:1a:de:32:be:aa:2a:51:50:a1:1a:ff:
                    99:5f:d0:e7:88:51:9f:6c:c1:05:eb:84:90:eb:ad:
                    ef:ce:c6:19:22:f0:3b:1b:ca:9d:d3:0d:68:39:fe:
                    7c:8f:53:e0:28:db:53:1f:4c:3b:0c:51:65:4a:62:
                    1e:1e:18:e6:2a:8a:6e:38:79:43:80:1a:82:42:78:
                    09:dc:b2:2f:6e:a5:40:5c:d9:ce:c9:8f:a2:13:b4:
                    27:5f:e9:43:7d:73:60:0a:34:b1:bf:4c:5d:6e:1c:
                    87:fd:51:ed:88:b6:ca:2f:d6:e1:d0:cd:39:f4:3c:
                    04:56:e2:73:f5:9d:93:0f:92:73:99:44:f7:8b:31:
                    8a:4f:bf:5c:0b:bc:aa:c1:5f:52:ea:84:8d:13:21:
                    a5:57:d9:4d:bd:e0:30:83:b5:f2:01:c4:71:2a:ed:
                    9e:95:2f:b8:dc:dd:a2:25:10:09:88:1e:4e:9e:73:
                    ab:cd:c6:ce:6c:18:9d:9d:95:b3:6a:32:fc:fd:53:
                    08:79:0c:e8:d7:47:66:72:35:65:8d:1d:b1:bc:61:
                    dc:fb:c4:aa:f8:db:c6:22:06:86:95:73:95:8d:93:
                    58:e6:8f:b4:46:53:85:49:69:2b:cd:af:05:41:51:
                    c5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8E:29:AB:90:B8:7F:7D:60:DD:74:3C:A6:8C:73:1A:7D:E4:43:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d3f4e9e3-557e-3363-9ab0-7e765ae5606c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.98.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:d2:14:d4:c8:b0:c1:ce:43:97:04:d7:b2:0a:44:4c:c2:fd:
         f1:22:c7:44:a6:bb:0b:44:52:c5:e0:c7:46:14:4a:d4:d2:23:
         72:01:d3:58:37:05:d8:10:62:a4:af:c4:c0:b5:04:1a:6e:ac:
         60:62:f1:1f:78:bf:31:5c:fd:8b:4c:49:05:52:8a:e0:3b:37:
         98:77:f6:eb:e8:f5:a7:ab:55:f1:34:42:83:bc:51:43:5a:29:
         f6:ce:ea:15:74:99:ce:21:cc:fb:2f:07:dd:ee:2d:1d:cb:52:
         04:41:c4:6f:f4:bf:53:52:dd:0b:17:46:5e:44:64:58:96:54:
         87:ee:2f:3c:85:a1:f8:e5:45:25:6d:bf:e0:a6:a9:80:ac:26:
         d6:9c:a1:3d:b5:50:ad:77:75:27:c5:72:b6:f3:49:86:5a:82:
         ad:2c:30:69:dc:05:8e:b2:38:91:3a:74:b4:a1:aa:64:f1:fc:
         61:09:d1:c2:57:72:58:9d:f3:eb:d8:48:9f:d7:7f:5e:c5:27:
         bc:8c:89:a0:70:ae:db:40:b2:9b:bf:43:08:9e:0c:ab:7d:27:
         37:8c:42:c5:89:aa:d4:2d:97:0f:3f:67:7e:75:48:52:c9:f7:
         18:3a:ca:d7:82:11:86:08:16:70:29:f5:72:88:69:68:cf:28:
         6c:f9:2e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:42:29 2025 by rpki-client