Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136322e302f32342d3234203d3e203332303937.roa
File:                     34352e3133352e3136322e302f32342d3234203d3e203332303937.roa (raw, json)
Hash identifier:          COt2vgPg5mrK89thhUdsY1bPDjD31rPEwx5+I7466So=
Subject key identifier:   D2:FD:C2:F2:42:CF:13:8F:62:85:4E:CB:78:0B:05:A9:62:CE:FB:76
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       462577B3005F38E15A4728ED584B95CBDF08258A
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136322e302f32342d3234203d3e203332303937.roa
Signing time:             Tue 01 Nov 2022 22:19:02 +0000
ROA not before:           Tue 01 Nov 2022 22:14:02 +0000
ROA not after:            Tue 31 Oct 2023 22:19:02 +0000
asID:                     32097
IP address blocks:        45.135.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:25:77:b3:00:5f:38:e1:5a:47:28:ed:58:4b:95:cb:df:08:25:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Nov  1 22:14:02 2022 GMT
            Not After : Oct 31 22:19:02 2023 GMT
        Subject: CN=D2FDC2F242CF138F62854ECB780B05A962CEFB76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:48:76:b6:a4:5f:7c:a6:10:50:64:79:f6:11:
                    08:8c:b2:40:bd:af:29:23:24:a7:21:69:36:df:65:
                    53:c8:e8:81:70:19:82:73:21:8e:4b:7a:5e:04:0d:
                    6c:ee:4b:8d:77:37:ec:ac:dc:ba:e1:15:9b:fb:07:
                    3d:c3:d8:61:f2:c5:4f:c2:4f:df:f9:08:e7:8e:6c:
                    8c:eb:fb:e2:ab:55:c0:e5:b3:30:8f:7f:fd:7a:3f:
                    63:be:5b:46:ea:31:f3:8a:8d:9a:df:e9:4a:4e:88:
                    18:0f:23:93:2e:35:c3:6e:09:8b:e3:50:74:79:77:
                    a4:57:09:b0:7e:70:fc:d2:0f:bb:5d:1b:15:f2:14:
                    a7:4b:27:50:31:7d:ff:12:07:e6:f3:b3:de:c9:09:
                    4d:c8:e5:c3:bb:33:d8:43:ca:e9:b2:05:1e:1a:ad:
                    2e:4a:4e:72:03:2b:b0:10:e4:1f:5e:a1:77:49:50:
                    13:a3:2e:c4:0d:3a:da:0e:1d:9b:5b:da:f7:f0:8d:
                    66:fa:7f:2a:bf:3b:a1:71:a0:5e:a8:24:d2:92:86:
                    8c:bc:b0:0d:ba:c4:c0:63:23:6a:0b:80:2f:78:57:
                    40:27:c3:e4:5f:2a:20:5e:95:24:a6:2a:81:5b:57:
                    db:58:7a:23:c3:f4:89:7a:13:37:a0:34:ee:93:05:
                    6a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FD:C2:F2:42:CF:13:8F:62:85:4E:CB:78:0B:05:A9:62:CE:FB:76
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136322e302f32342d3234203d3e203332303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:d6:1d:b9:e0:70:79:48:4e:06:00:10:ff:96:38:c9:16:26:
         e1:75:d3:c3:df:99:ef:07:17:6a:e9:f2:e1:78:d1:0a:61:fd:
         75:c9:50:40:90:ce:e5:e8:13:0d:60:44:ed:0c:a1:1d:aa:41:
         36:68:b1:3b:40:6f:19:4f:8d:a3:d0:1a:a3:e1:a3:f1:a1:6d:
         4d:1b:9c:3f:3d:dd:dc:14:16:e0:cf:3a:4e:f7:32:a7:89:e3:
         fa:e1:14:b9:3e:1b:af:9d:9c:78:c3:6d:c6:7c:77:9a:67:18:
         a7:63:25:b8:20:78:67:92:6e:99:9c:8f:e2:6c:0e:b0:91:82:
         0e:f4:0d:77:5f:d3:98:5f:3c:a6:12:c8:4a:54:b3:f5:de:01:
         a5:7d:75:76:e0:29:50:ef:a4:0e:11:61:c9:e8:0f:b6:9b:c5:
         97:f9:37:30:08:a6:3e:9e:61:db:c3:23:a8:5d:f7:cf:88:cb:
         09:f4:89:52:a4:7e:6b:c8:37:a3:b5:24:b4:12:7f:a7:ec:fe:
         9c:91:ec:ef:0c:20:c9:64:38:bf:d3:6d:2e:16:51:66:39:ea:
         c3:61:cd:a5:7e:8c:92:80:fb:4b:28:8a:40:e9:51:ef:c9:a7:
         cc:6a:39:41:ab:bd:25:a7:3f:33:27:ff:ab:65:9e:d1:b4:19:
         ae:ea:da:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:41:02 2024 by rpki-client on console-fra.rpki-client.org