Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2fb92c7-382c-4f2f-b805-d3dfb3cdd989/3a605874-7bf5-36e0-8f15-6388f7872d59.roa
File:                     3a605874-7bf5-36e0-8f15-6388f7872d59.roa (raw, json)
Hash identifier:          DUaIV0YyAAvheWzpSEC5b9opCJ6YCh/SqQpdGe20WMw=
Subject key identifier:   49:68:47:16:16:C7:79:D2:B3:E0:24:7B:CF:90:44:6E:81:18:47:68
Certificate issuer:       /CN=f2fb92c7-382c-4f2f-b805-d3dfb3cdd989
Certificate serial:       010D0C9F4328584211DD8626AEF4663DF9CDFF00
Authority key identifier: AB:29:8B:9B:95:71:8E:3A:1C:F5:3C:C6:91:0E:B7:19:EC:72:AC:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2fb92c7-382c-4f2f-b805-d3dfb3cdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2fb92c7-382c-4f2f-b805-d3dfb3cdd989/3a605874-7bf5-36e0-8f15-6388f7872d59.roa
Signing time:             Thu 01 Jun 2023 01:00:18 +0000
ROA not before:           Thu 01 Jun 2023 01:00:18 +0000
ROA not after:            Wed 30 Aug 2023 01:00:18 +0000
asID:                     3356
IP address blocks:        45.45.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:11:dd:86:26:ae:f4:66:3d:f9:cd:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fb92c7-382c-4f2f-b805-d3dfb3cdd989
        Validity
            Not Before: Jun  1 01:00:18 2023 GMT
            Not After : Aug 30 01:00:18 2023 GMT
        Subject: CN=02dcbff5-b846-4dd1-a53e-91789b0a6b6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:18:61:83:db:bc:cf:1c:60:d8:87:cb:e0:32:
                    79:fc:5d:94:ad:54:10:f1:f9:0f:39:e1:6c:a2:f8:
                    f8:ae:0b:01:a8:a7:db:e1:79:ed:a3:8c:fb:61:33:
                    ea:93:80:3e:a3:2e:aa:be:33:9c:40:70:56:66:27:
                    a1:87:2d:59:67:a5:3c:b6:14:4b:11:21:8c:d7:7b:
                    29:7c:1c:ca:64:79:7a:8a:aa:6a:21:86:83:cd:d7:
                    38:3d:e8:53:32:b5:f5:0d:fc:06:b3:ed:fa:a8:f6:
                    85:70:9d:00:b2:78:52:18:d6:20:d7:15:2c:5e:7e:
                    33:84:e4:a7:be:63:2a:76:64:75:f0:57:95:34:79:
                    12:c5:29:d1:c4:29:6f:f9:5a:ef:43:5c:01:89:42:
                    39:4c:13:48:5b:21:1c:20:ba:b8:b7:9a:8a:fa:50:
                    1c:68:4c:6b:ea:9b:c9:05:d6:ab:01:83:fb:5e:52:
                    01:e0:1a:ad:0d:76:a4:ae:4f:97:31:c3:f2:5c:c0:
                    b9:37:a2:69:24:29:6b:07:ee:25:3a:5e:d1:05:c7:
                    5a:77:0d:0e:17:61:6b:c2:31:50:e5:6d:b8:5d:34:
                    d1:de:fc:35:f1:dd:3a:09:48:79:cd:e7:22:4e:f4:
                    4e:c9:6b:b8:ed:bd:80:a7:ca:02:47:1e:b0:ba:27:
                    63:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:68:47:16:16:C7:79:D2:B3:E0:24:7B:CF:90:44:6E:81:18:47:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2fb92c7-382c-4f2f-b805-d3dfb3cdd989/3a605874-7bf5-36e0-8f15-6388f7872d59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2fb92c7-382c-4f2f-b805-d3dfb3cdd989/f2fb92c7-382c-4f2f-b805-d3dfb3cdd989.crl

            X509v3 Authority Key Identifier:
                keyid:AB:29:8B:9B:95:71:8E:3A:1C:F5:3C:C6:91:0E:B7:19:EC:72:AC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2fb92c7-382c-4f2f-b805-d3dfb3cdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:ba:cb:90:11:14:f9:14:38:3a:98:c6:cc:e6:c7:b9:f9:10:
         61:e5:ba:93:ab:e0:c6:4a:12:0b:33:d8:c6:51:7c:43:e3:27:
         c9:94:88:1f:63:f3:22:c4:22:d9:f6:f4:dc:21:1f:60:8a:54:
         90:f7:e5:dc:b4:0f:a1:83:b6:d9:5a:f4:72:2e:8a:ce:b5:b2:
         6a:bd:25:5f:d2:be:73:28:65:09:8f:73:ad:72:8f:20:1c:0a:
         88:3b:ea:68:5c:bc:75:7a:38:86:6d:0a:f3:65:a2:a2:de:7a:
         fa:d1:34:f3:70:f0:2c:33:94:37:77:4a:26:c2:14:d0:f4:10:
         0d:66:cd:7b:80:40:13:f4:52:b7:38:87:74:6f:23:d7:a4:5e:
         37:f9:22:1c:7e:9f:ac:d2:3e:29:4b:8a:69:db:32:3f:34:06:
         d6:de:62:ac:3b:14:b4:ca:a2:e3:5c:16:79:fc:19:b3:78:c4:
         0c:ef:db:41:19:70:b1:c9:2d:8b:38:e4:eb:5c:97:f4:15:94:
         59:c8:e4:ca:ea:a0:ed:f7:30:5d:3f:a7:ec:f7:a4:fe:48:29:
         d4:9d:fc:be:8e:72:73:0d:49:8f:c6:de:65:55:d1:5a:68:20:
         c3:c5:09:68:8a:5b:a9:30:bc:1b:ae:f8:6f:d3:b8:e4:60:ed:
         0e:74:43:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:44 2023 by rpki-client on console-ams.rpki-client.org