Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8aa7d31-5eda-3d04-8a12-16bd1a36ea39.roa
File:                     d8aa7d31-5eda-3d04-8a12-16bd1a36ea39.roa (raw, json)
Hash identifier:          Ar3jDIBTFzoPpTqYSttbcNQQV5vYpP8Y8OTq3cRbjhc=
Subject key identifier:   5B:44:DF:D1:2C:2D:A6:82:EC:06:3F:08:21:19:B8:50:58:9F:FE:0C
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F52588A79DED3D3C869080
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8aa7d31-5eda-3d04-8a12-16bd1a36ea39.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        35.195.144.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:25:88:a7:9d:ed:3d:3c:86:90:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=0fcb6d8a-ef09-4d5c-8e79-e567ee6acdc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f6:02:b5:08:6f:8e:50:ee:0a:9a:64:4b:1b:
                    ed:4d:1e:14:d8:1d:3d:60:77:70:c9:c5:40:8a:51:
                    9d:a9:23:3b:c5:f8:8c:39:1d:fe:36:fe:bd:12:22:
                    e6:22:6f:62:9b:22:3d:db:74:3e:e7:04:a4:fa:9c:
                    01:aa:99:c1:b2:e5:cd:09:48:42:71:8c:97:ca:09:
                    aa:df:70:96:21:3b:b4:6a:2d:71:7a:fc:9c:9c:51:
                    8a:d6:58:9e:6b:d7:87:d5:5d:6b:ad:35:08:8f:01:
                    5e:fb:d1:13:c6:f0:43:f9:bb:2a:97:87:8a:f1:03:
                    57:01:79:b2:e3:7a:06:b5:e5:5e:fc:6b:65:c9:b3:
                    78:4d:10:65:4e:1d:77:09:3f:cb:b4:7d:99:ef:b3:
                    26:23:24:53:66:00:85:07:cd:44:04:5e:44:71:1c:
                    88:97:4e:3c:5c:67:9d:05:fc:25:40:a4:d6:d6:e7:
                    40:83:8f:a4:cc:04:25:28:96:8e:44:fd:ce:20:db:
                    b5:7c:6c:22:18:f5:1a:3c:90:ec:b9:a6:d2:32:e7:
                    4f:bd:3f:01:e5:73:1c:2f:eb:32:6a:a9:f8:ae:92:
                    78:86:10:63:d2:76:28:c4:9c:eb:54:3c:77:bd:8c:
                    c8:74:c4:8a:0e:7a:e3:66:43:25:f9:76:a5:ee:aa:
                    58:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:44:DF:D1:2C:2D:A6:82:EC:06:3F:08:21:19:B8:50:58:9F:FE:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/d8aa7d31-5eda-3d04-8a12-16bd1a36ea39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  35.195.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:0e:aa:dd:bf:30:cb:55:e6:d7:8c:c4:aa:b0:78:21:6a:b1:
         54:ad:a9:d6:1e:21:af:e2:a3:43:c0:ff:78:33:7d:1c:9f:06:
         a6:da:38:53:f8:c8:32:8d:85:61:7b:c0:46:20:e9:ec:f9:3c:
         3c:19:5a:05:af:05:fc:55:b9:80:6d:b1:a2:09:a6:33:f5:8b:
         23:9d:cc:d5:b3:fb:37:53:f2:ca:66:0f:b0:34:31:8a:68:c3:
         30:d1:18:98:58:a7:96:9b:b0:a2:f2:fb:e3:c8:4f:cb:8f:32:
         41:cf:35:9d:7c:be:91:40:2d:6b:27:48:d2:70:20:f9:46:78:
         fc:ac:33:2c:5b:c1:47:41:25:5a:37:ba:39:44:d0:63:f6:f2:
         f2:0b:6d:c0:8e:99:3f:a9:12:b3:bd:6c:26:cb:67:be:5e:34:
         ba:ed:76:60:5c:bc:9a:b8:e7:61:77:aa:71:72:0f:00:b7:30:
         08:42:1b:70:b3:4f:ad:7d:f1:63:93:68:85:12:f3:15:ef:be:
         41:8a:6f:df:70:3d:45:05:a8:19:0f:10:88:13:16:92:24:f3:
         84:cb:f9:78:86:3f:12:63:4f:5a:dd:74:8c:87:33:3d:0b:79:
         0c:8e:d6:8f:17:96:12:a8:7c:0b:88:62:60:e0:af:eb:1f:55:
         4b:86:76:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----