Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136312e302f32342d3234203d3e203332323434.roa
File:                     34352e3133352e3136312e302f32342d3234203d3e203332323434.roa (raw, json)
Hash identifier:          HsnMW4QXMM+NF61SfFiFxwWI2vlu0mycmlxwM/a41bg=
Subject key identifier:   40:7A:5A:55:54:CE:96:B0:32:34:4C:04:D2:90:9B:27:46:D3:4B:A9
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       69632628199113FB28602FFA431EB41EB62759E3
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136312e302f32342d3234203d3e203332323434.roa
Signing time:             Mon 25 Jul 2022 11:03:26 +0000
ROA not before:           Mon 25 Jul 2022 10:58:26 +0000
ROA not after:            Mon 24 Jul 2023 11:03:26 +0000
asID:                     32244
IP address blocks:        45.135.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:63:26:28:19:91:13:fb:28:60:2f:fa:43:1e:b4:1e:b6:27:59:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Jul 25 10:58:26 2022 GMT
            Not After : Jul 24 11:03:26 2023 GMT
        Subject: CN=407A5A5554CE96B032344C04D2909B2746D34BA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9d:81:45:bf:6f:37:ca:50:3d:ce:f4:a2:c4:
                    3d:28:f1:5d:57:6d:1b:9c:a7:71:21:c0:7c:38:3a:
                    4d:a4:08:c5:a4:d8:85:2c:0a:93:e8:c7:62:6e:96:
                    da:7f:64:14:f3:59:f9:95:21:f4:53:9a:83:64:c2:
                    b6:c0:95:61:a5:d2:dd:9a:7e:f5:a8:51:66:19:78:
                    e7:6f:59:75:87:33:99:86:f2:2f:13:0e:20:b2:11:
                    04:14:ce:04:d9:7b:1c:58:11:06:75:77:5f:93:0e:
                    56:47:e1:05:0e:6f:82:ab:22:2b:9d:2a:b5:9c:60:
                    a5:c2:87:4f:33:8e:1f:05:26:07:8c:87:ea:fd:9d:
                    6f:d0:76:1d:fd:e9:27:08:b1:05:08:99:08:4a:ea:
                    73:a4:bd:77:15:5e:e0:fc:4b:20:0d:3d:5c:1c:87:
                    f0:0b:d1:6c:36:87:94:3b:2c:26:f8:ec:70:fd:ba:
                    96:89:fc:c9:d0:fd:6e:41:b3:2b:05:5a:a7:76:03:
                    5d:8b:0d:35:b0:11:04:93:9e:d7:62:29:a6:b5:e0:
                    c5:92:44:f3:eb:bc:70:a5:b9:46:75:7e:2f:cb:14:
                    61:20:b5:dc:32:f6:10:b0:64:f7:11:a9:35:4f:df:
                    c9:b5:4b:76:a3:4b:68:c2:e2:8f:16:6e:7d:2a:85:
                    3e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7A:5A:55:54:CE:96:B0:32:34:4C:04:D2:90:9B:27:46:D3:4B:A9
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136312e302f32342d3234203d3e203332323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:ab:fd:f3:ae:fc:30:a7:39:1c:9f:ba:59:ae:3b:2f:24:d9:
         c8:95:c9:98:2f:00:32:d9:f4:a5:62:c1:4a:7b:9e:a1:06:dd:
         c6:e0:b2:ae:fe:95:a6:0d:87:f1:99:86:11:75:78:7e:e0:52:
         c6:95:05:83:ea:74:04:b7:79:c7:86:62:d1:1b:b3:42:e1:8f:
         4b:31:54:11:68:14:72:93:ba:3f:08:1f:80:56:f0:a8:19:13:
         78:42:81:d1:f2:e1:3d:03:20:64:09:ce:ab:d7:06:fb:d3:2a:
         46:12:83:96:2c:09:09:74:d4:e0:8e:0d:6e:bf:2c:14:1f:55:
         de:9e:68:f8:4e:b3:c1:6d:0f:36:e4:4e:89:1a:85:ea:58:0a:
         15:65:db:bd:c7:70:4b:96:ce:d5:75:5b:52:01:6c:1a:03:ed:
         4f:bd:eb:1e:4a:a5:d3:46:d5:db:ae:ce:e0:b7:5a:bb:7b:7a:
         d1:73:88:ff:3d:77:c4:23:e2:b5:d7:25:88:7f:7d:ef:a1:d0:
         e9:b1:dc:71:5b:ca:ab:2f:f6:4c:92:3f:d5:a6:82:64:2e:f4:
         5d:38:62:19:58:72:5c:56:ce:da:e1:2b:18:dd:40:90:d5:97:
         f7:b6:aa:ed:76:da:f2:2d:78:16:d4:1f:d2:e8:60:b0:b1:66:
         1b:37:eb:c9
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUaWMmKBmRE/soYC/6Qx60HrYnWeMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiN2IxOWMyMzIxNGUwOTBhYjcxMTU0YzU4
N2Q2Y2MwYzcwMDQwMTU2YzAwHhcNMjIwNzI1MTA1ODI2WhcNMjMwNzI0MTEwMzI2
WjAzMTEwLwYDVQQDEyg0MDdBNUE1NTU0Q0U5NkIwMzIzNDRDMDREMjkwOUIyNzQ2
RDM0QkE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp2BRb9vN8pQ
Pc70osQ9KPFdV20bnKdxIcB8ODpNpAjFpNiFLAqT6Mdibpbaf2QU81n5lSH0U5qD
ZMK2wJVhpdLdmn71qFFmGXjnb1l1hzOZhvIvEw4gshEEFM4E2XscWBEGdXdfkw5W
R+EFDm+CqyIrnSq1nGClwodPM44fBSYHjIfq/Z1v0HYd/eknCLEFCJkISupzpL13
FV7g/EsgDT1cHIfwC9FsNoeUOywm+Oxw/bqWifzJ0P1uQbMrBVqndgNdiw01sBEE
k57XYimmteDFkkTz67xwpblGdX4vyxRhILXcMvYQsGT3Eak1T9/JtUt2o0towuKP
Fm59KoU+swIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFEB6WlVUzpawMjRMBNKQmydG
00upMB8GA1UdIwQYMBaAFDXPYlAUw5OTSxiUTtdi2SPVvmJdMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzAv
MzVDRjYyNTAxNEMzOTM5MzRCMTg5NDRFRDc2MkQ5MjNENUJFNjI1RC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3YjE5YzIzMjE0ZTA5MGFiNzExNTRjNTg3ZDZjYzBjNzAwNDAxNTZjMC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8wLzM0MzUyZTMxMzMzNTJlMzEzNjMxMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzMzMjMyMzQzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC2HoTANBgkqhkiG9w0BAQsF
AAOCAQEAo6v98678MKc5HJ+6Wa47LyTZyJXJmC8AMtn0pWLBSnueoQbdxuCyrv6V
pg2H8ZmGEXV4fuBSxpUFg+p0BLd5x4Zi0RuzQuGPSzFUEWgUcpO6PwgfgFbwqBkT
eEKB0fLhPQMgZAnOq9cG+9MqRhKDliwJCXTU4I4Nbr8sFB9V3p5o+E6zwW0PNuRO
iRqF6lgKFWXbvcdwS5bO1XVbUgFsGgPtT73rHkql00bV267O4Ldau3t60XOI/z13
xCPitdcliH9976HQ6bHccVvKqy/2TJI/1aaCZC70XThiGVhyXFbO2uErGN1AkNWX
97aq7Xba8i14FtQf0uhgsLFmGzfryQ==
-----END CERTIFICATE-----