Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/debcd6cf-84fd-3034-a0ee-39bf4ee11dab.roa
File:                     debcd6cf-84fd-3034-a0ee-39bf4ee11dab.roa (raw, json)
Hash identifier:          vzvJ7Vapq+LcalrRyMcWpMLxCJZNaRipKYVmuHKUeQ0=
Subject key identifier:   9C:26:A2:53:6D:EF:5D:E6:24:58:94:44:AF:CD:AC:CE:7A:AA:EC:58
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858482BF562C98CCA4334DC775DC0
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/debcd6cf-84fd-3034-a0ee-39bf4ee11dab.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        34.1.76.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:62:c9:8c:ca:43:34:dc:77:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=076bbe51-6e29-4306-8f91-19dabb0c994b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:09:5a:61:58:3b:af:77:c8:5d:62:b0:67:8d:
                    f0:63:b4:bd:28:e9:25:24:a7:cc:e2:e1:59:77:35:
                    5d:84:4b:e1:f5:10:42:86:69:31:f0:c7:7e:55:d9:
                    48:02:c6:ae:e7:fb:bb:a8:33:b8:62:57:49:f3:e2:
                    b0:03:97:ee:0f:4a:0f:67:cb:f4:b3:f9:d2:b9:b4:
                    e0:c0:f7:ab:43:3b:96:9a:72:83:c7:73:d6:0a:1a:
                    d2:3d:8b:3d:f8:40:7e:42:f0:58:d0:4a:85:fc:9d:
                    39:8f:55:62:5a:92:1f:dd:09:e8:09:28:3b:8e:d7:
                    26:8e:8a:ab:b1:ee:6a:e0:57:80:4d:8b:ca:a2:67:
                    65:2a:7b:a5:0e:af:91:45:42:33:98:38:95:ed:af:
                    84:31:82:6a:90:9b:8c:19:bf:82:4e:ad:2e:7e:a4:
                    17:2b:e8:51:38:e8:96:7a:2c:98:b5:02:97:c6:3b:
                    8b:dc:8b:06:e1:6f:0e:cb:24:ee:b5:4c:b9:5b:33:
                    70:b4:e0:e1:0e:3b:ca:e4:f3:ca:5c:0f:40:27:07:
                    ce:ae:f4:1e:6b:e3:ad:a8:fc:5e:d1:14:d7:28:52:
                    05:95:05:8f:0d:34:ef:1b:b9:14:bf:6b:03:5e:52:
                    20:d8:a9:50:87:c7:48:0d:75:ae:3a:e9:fc:96:ba:
                    a5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:26:A2:53:6D:EF:5D:E6:24:58:94:44:AF:CD:AC:CE:7A:AA:EC:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/debcd6cf-84fd-3034-a0ee-39bf4ee11dab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.1.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:84:13:48:37:f3:4d:79:49:1e:bb:15:a1:94:32:43:f9:1b:
         a9:28:6f:17:dc:c2:a4:d7:ff:69:35:3c:36:7b:b0:fa:11:9d:
         94:e2:8e:e0:ab:a6:2d:a8:28:6f:60:e6:c1:ff:ad:21:63:3b:
         18:fa:26:6a:2d:ea:22:c8:16:01:3c:5b:b0:57:61:df:65:66:
         48:97:12:1b:a5:d9:84:68:4a:24:fb:85:4b:e3:b6:b5:11:1b:
         f7:4a:da:d7:9a:a9:42:06:7e:ce:38:6e:4f:07:0f:ae:21:2e:
         df:e8:ca:9d:74:27:5f:4e:e6:9c:8b:57:97:32:bf:4f:1f:2d:
         c0:3e:63:56:b0:14:06:70:89:cd:96:ad:7f:16:8d:b2:68:d6:
         13:a2:cc:6d:ca:d3:24:3e:26:aa:3c:23:ea:01:fd:53:53:38:
         e9:f7:95:f4:2a:6c:db:a1:1b:d5:a2:22:59:a9:e5:7a:6f:06:
         cf:d7:95:5c:ce:56:f2:68:34:71:b0:06:f8:fb:2b:7a:f0:32:
         35:4d:b7:bb:c7:5b:c5:91:79:5e:29:e1:30:6a:f3:93:d5:3f:
         14:bc:90:45:8e:f5:85:b6:2b:03:75:f7:58:a6:7d:1c:c5:1f:
         19:7c:9a:69:91:a8:53:f6:ea:b3:c8:7c:f9:c3:e1:2a:7b:55:
         64:0a:4f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:57:27 2025 by rpki-client