Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136322e302f32342d3234203d3e203333333837.roa
File:                     34352e3133352e3136322e302f32342d3234203d3e203333333837.roa (raw, json)
Hash identifier:          ULXocvaLrmWNS/LN9IH07zxUho2X8pu0tV8KPOA55No=
Subject key identifier:   4B:EF:DE:C1:86:5C:99:34:D8:B2:7F:92:AB:D8:F4:F0:86:2F:36:F5
Certificate issuer:       /CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
Certificate serial:       3208A83209CBBE63C635A915A5BF01C4EDC6A016
Authority key identifier: 35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136322e302f32342d3234203d3e203333333837.roa
Signing time:             Sun 06 Nov 2022 21:49:48 +0000
ROA not before:           Sun 06 Nov 2022 21:44:48 +0000
ROA not after:            Sun 05 Nov 2023 21:49:48 +0000
asID:                     33387
IP address blocks:        45.135.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:08:a8:32:09:cb:be:63:c6:35:a9:15:a5:bf:01:c4:ed:c6:a0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab7b19c23214e090ab71154c587d6cc0c70040156c0
        Validity
            Not Before: Nov  6 21:44:48 2022 GMT
            Not After : Nov  5 21:49:48 2023 GMT
        Subject: CN=4BEFDEC1865C9934D8B27F92ABD8F4F0862F36F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:de:aa:9f:c8:94:22:6e:1b:a9:f9:4d:2e:f1:
                    a7:a5:7d:70:56:f3:f2:83:14:1a:88:b7:13:43:0c:
                    4f:b9:a9:ed:ae:60:33:ee:0c:0a:8a:0a:24:86:a0:
                    6e:ae:27:7a:d3:79:af:03:7d:69:3f:b0:42:ac:a9:
                    2f:f3:4f:e6:28:5a:15:73:67:1c:23:d8:f1:04:5b:
                    e0:4d:f8:79:2f:59:41:ed:71:48:5e:4a:be:80:ef:
                    a8:65:73:3c:d3:17:a8:e5:49:76:b5:d6:f9:4e:e9:
                    c4:24:e3:d8:6b:38:23:bf:25:ee:d6:fc:22:73:aa:
                    05:ef:b7:3d:7e:a8:64:0b:e4:06:f3:02:8b:8a:ea:
                    bf:e9:d4:2a:c5:63:92:ca:2c:02:96:f2:10:a0:a7:
                    f1:7c:75:e4:b0:c9:f7:63:54:01:ed:82:9a:26:cb:
                    79:90:ec:3a:47:9f:91:04:e5:3b:17:38:c2:b5:5c:
                    fd:dd:50:0a:12:86:3a:8f:e1:bf:6c:80:b0:0b:dd:
                    d8:78:e6:4b:ab:8e:6b:c7:c3:6b:e5:2b:80:ae:52:
                    80:a9:ab:49:fb:60:9f:ab:16:20:ac:c4:80:ab:db:
                    52:f5:94:4d:57:c6:06:d0:63:4b:69:40:39:bb:af:
                    c3:11:69:cf:c5:22:21:2f:3e:63:08:9d:d8:d6:60:
                    38:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:EF:DE:C1:86:5C:99:34:D8:B2:7F:92:AB:D8:F4:F0:86:2F:36:F5
            X509v3 Authority Key Identifier:
                keyid:35:CF:62:50:14:C3:93:93:4B:18:94:4E:D7:62:D9:23:D5:BE:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/35CF625014C393934B18944ED762D923D5BE625D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab7b19c23214e090ab71154c587d6cc0c70040156c0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/0/34352e3133352e3136322e302f32342d3234203d3e203333333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.135.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:62:54:8e:e7:13:ad:44:4f:26:5b:3d:43:7f:f3:0f:15:92:
         44:62:e0:b9:ff:3c:33:cf:94:9e:f0:8e:b0:23:66:0a:41:e4:
         18:90:a3:6a:77:e2:97:b5:8c:62:0f:5a:05:4b:7a:a0:28:8f:
         b3:3c:fc:fc:4b:c7:29:49:d5:bb:59:fa:47:b3:99:49:cf:fd:
         03:db:5a:4a:ae:5c:63:30:53:e5:57:7c:d7:61:5e:f6:92:a0:
         3d:44:99:99:09:b0:b4:02:82:f6:20:d9:7f:e5:07:64:62:33:
         c7:9e:64:bb:dc:2b:b2:2d:b1:63:46:c5:c8:58:c9:49:c3:61:
         24:27:f4:da:65:0b:d5:90:7b:40:20:d0:9a:38:5e:82:1d:0f:
         8a:39:38:0e:3b:26:a3:f2:ed:9c:93:2b:d5:80:48:88:45:96:
         9e:a0:ab:cb:76:1c:b5:af:17:c6:bd:76:1b:c7:f5:d5:9e:f0:
         ea:41:43:21:6b:51:8c:57:a3:12:b2:02:b1:c2:71:5e:ce:85:
         23:b2:74:8e:33:22:71:bc:4c:72:52:2e:84:43:14:67:ee:4e:
         8f:eb:69:c8:2e:11:4b:cb:e4:ba:3c:6d:60:f3:51:1b:f0:97:
         dd:ce:52:2c:f6:7a:b6:93:8c:45:3a:61:34:52:cd:b2:85:65:
         5c:a1:ef:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:22 2023 by rpki-client on console-ams.rpki-client.org