Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec313fa4-4901-340f-8959-6e5b204c9f0b.roa
File:                     ec313fa4-4901-340f-8959-6e5b204c9f0b.roa (raw, json)
Hash identifier:          qaehje5d15D3phnwYMijzuStGEuUNh6YQmjc1jDpWvw=
Subject key identifier:   EC:65:BD:5F:FB:EF:35:B4:15:34:26:2F:6C:A6:EF:7B:45:19:A1:07
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F43285847E8F502A695C851663C3B1620
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec313fa4-4901-340f-8959-6e5b204c9f0b.roa
Signing time:             Sun 17 Nov 2024 14:00:38 +0000
ROA not before:           Sun 17 Nov 2024 14:00:38 +0000
ROA not after:            Sat 15 Feb 2025 14:00:38 +0000
asID:                     396982
IP address blocks:        34.123.240.0/20 maxlen: 20
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:e8:f5:02:a6:95:c8:51:66:3c:3b:16:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Nov 17 14:00:38 2024 GMT
            Not After : Feb 15 14:00:38 2025 GMT
        Subject: CN=a146e9f5-5c10-4638-802c-a74f914d5f7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ff:34:ea:f6:58:57:f8:c3:fb:99:a4:54:71:
                    e5:57:b6:8f:df:86:7a:1a:39:01:03:e8:49:fe:b4:
                    5f:34:35:80:20:8c:d2:de:2d:eb:3a:d5:d2:88:0b:
                    77:ec:ba:b6:c5:3a:83:01:97:23:79:ab:f7:2a:c0:
                    4f:47:e4:62:97:4f:8b:b1:bd:18:49:ad:cc:1e:f0:
                    85:42:c6:8b:d2:4e:b0:32:df:12:8d:35:9c:20:b5:
                    5b:49:f6:c9:a4:a4:41:db:e6:19:90:b1:e8:af:5c:
                    09:37:c4:05:6e:dd:25:4c:41:a8:0e:1a:14:69:a5:
                    4b:45:58:03:c5:2a:ad:76:75:21:85:49:12:be:2a:
                    ca:f7:6e:85:e6:4e:44:54:ec:2c:5c:e1:f8:e0:bd:
                    5c:63:02:df:cd:ed:db:0f:91:8a:21:c4:aa:90:ec:
                    0d:26:73:24:95:eb:07:4f:e6:ac:df:2f:9c:d4:7f:
                    49:07:c3:7a:d7:ed:31:98:00:d2:24:f6:a1:92:ba:
                    55:92:a8:11:cd:c9:0a:4a:94:00:e7:d4:30:37:4e:
                    70:6a:6d:5a:0d:fd:73:82:bf:f8:28:0d:9e:ff:6f:
                    a7:ba:ce:aa:91:f0:6f:71:65:c7:2f:40:44:84:1d:
                    5e:82:1c:dd:d1:24:2d:ce:2b:ec:01:f0:9a:22:5f:
                    ec:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:65:BD:5F:FB:EF:35:B4:15:34:26:2F:6C:A6:EF:7B:45:19:A1:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ec313fa4-4901-340f-8959-6e5b204c9f0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  34.123.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:06:c7:e1:28:d3:3f:42:52:b6:da:c1:e9:25:db:9a:ea:2a:
         be:54:29:9c:86:b2:90:6e:6b:0f:17:df:b0:28:27:b5:cc:53:
         2b:d6:d0:fd:0f:c7:fe:bd:01:c1:16:2c:ad:a4:3e:19:d9:c7:
         73:7e:41:90:9f:e8:ac:8b:2f:1a:92:93:e9:d3:af:d5:70:44:
         df:57:51:0a:12:4a:01:c7:f4:34:6f:7c:92:df:62:86:92:9e:
         dc:22:5f:24:f9:fd:c4:d9:b3:36:8a:77:7c:b4:a8:e8:b2:4e:
         3d:c1:be:a8:7d:69:9a:5a:22:6e:80:3c:a9:9e:03:8f:44:08:
         bd:03:56:57:4d:11:a1:d6:b4:50:bf:25:04:d5:f8:96:ca:8d:
         0e:61:65:f8:e2:31:32:46:3b:f3:ad:70:b1:c0:82:ea:ba:8b:
         82:40:44:0e:eb:8e:27:56:3c:5c:92:05:c1:89:ab:a1:68:ba:
         c2:22:9b:3d:bc:33:39:14:e3:88:25:21:42:0e:53:6e:76:14:
         e0:66:50:b5:05:26:51:e3:76:14:61:cf:cb:28:90:23:a9:74:
         ab:2b:97:f7:be:1c:af:c4:74:33:dd:10:27:a5:df:18:db:a4:
         8b:43:fc:7e:0f:d3:ce:01:a4:c1:fb:71:2f:b9:71:57:8d:ea:
         cd:48:50:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEfo9QKmlchRZjw7FiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI0MTExNzE0MDAzOFoXDTI1MDIxNTE0MDAzOFowLzEtMCsGA1UEAxMk
YTE0NmU5ZjUtNWMxMC00NjM4LTgwMmMtYTc0ZjkxNGQ1ZjdiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyP806vZYV/jD+5mkVHHlV7aP34Z6GjkBA+hJ
/rRfNDWAIIzS3i3rOtXSiAt37Lq2xTqDAZcjeav3KsBPR+Ril0+Lsb0YSa3MHvCF
QsaL0k6wMt8SjTWcILVbSfbJpKRB2+YZkLHor1wJN8QFbt0lTEGoDhoUaaVLRVgD
xSqtdnUhhUkSvirK926F5k5EVOwsXOH44L1cYwLfze3bD5GKIcSqkOwNJnMklesH
T+as3y+c1H9JB8N61+0xmADSJPahkrpVkqgRzckKSpQA59QwN05wam1aDf1zgr/4
KA2e/2+nus6qkfBvcWXHL0BEhB1eghzd0SQtzivsAfCaIl/sKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOxlvV/77zW0FTQmL2ym73tFGaEHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZWMzMTNmYTQtNDkwMS0z
NDBmLTg5NTktNmU1YjIwNGM5ZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEInvwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMGx+Eo0z9CUrbawekl25rqKr5UKZyGspBuaw8X37AoJ7XMUyvW0P0P
x/69AcEWLK2kPhnZx3N+QZCf6KyLLxqSk+nTr9VwRN9XUQoSSgHH9DRvfJLfYoaS
ntwiXyT5/cTZszaKd3y0qOiyTj3Bvqh9aZpaIm6APKmeA49ECL0DVldNEaHWtFC/
JQTV+JbKjQ5hZfjiMTJGO/OtcLHAguq6i4JARA7rjidWPFySBcGJq6FousIimz28
MzkU44glIUIOU252FOBmULUFJlHjdhRhz8sokCOpdKsrl/e+HK/EdDPdECel3xjb
pItD/H4P084BpMH7cS+5cVeN6s1IUGg=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:43:23 2025 by rpki-client