Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2fb92c7-382c-4f2f-b805-d3dfb3cdd989/852dd082-24ae-31fe-9740-a06205abf309.roa
File:                     852dd082-24ae-31fe-9740-a06205abf309.roa (raw, json)
Hash identifier:          17PJrXGmShj81QH2n8efJyPdhuteB008iGyib8hjLOs=
Subject key identifier:   9B:F9:58:CA:4B:AD:C1:1E:79:92:23:04:2C:15:0A:1E:5E:F2:F9:1D
Certificate issuer:       /CN=f2fb92c7-382c-4f2f-b805-d3dfb3cdd989
Certificate serial:       010D0C9F432858421EADF784B6A43BF2C045F200
Authority key identifier: AB:29:8B:9B:95:71:8E:3A:1C:F5:3C:C6:91:0E:B7:19:EC:72:AC:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2fb92c7-382c-4f2f-b805-d3dfb3cdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2fb92c7-382c-4f2f-b805-d3dfb3cdd989/852dd082-24ae-31fe-9740-a06205abf309.roa
Signing time:             Mon 05 Jun 2023 15:10:02 +0000
ROA not before:           Mon 05 Jun 2023 15:10:02 +0000
ROA not after:            Sun 03 Sep 2023 15:10:02 +0000
asID:                     61317
IP address blocks:        45.45.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:1e:ad:f7:84:b6:a4:3b:f2:c0:45:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2fb92c7-382c-4f2f-b805-d3dfb3cdd989
        Validity
            Not Before: Jun  5 15:10:02 2023 GMT
            Not After : Sep  3 15:10:02 2023 GMT
        Subject: CN=0bab33a1-4f97-4add-ac32-01a706867285
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:6e:7f:63:37:f6:e6:b1:66:8f:33:d0:1a:52:
                    94:64:ba:f7:38:90:87:62:7c:3d:67:51:9e:c2:5c:
                    15:e8:a5:a6:15:df:ac:19:23:40:ca:ab:a1:25:03:
                    1a:5b:75:d5:ff:3f:5d:56:84:b6:bd:75:d3:50:9d:
                    74:5b:b4:a8:af:01:27:ff:74:e2:9b:74:b1:ab:79:
                    07:d5:a0:85:c0:76:81:76:ad:13:ab:dd:4b:85:d5:
                    5f:f0:bf:f4:af:87:63:cc:32:d0:9e:5a:f4:fd:52:
                    18:a7:8d:b5:87:df:05:85:c4:2a:df:5e:cc:8c:4c:
                    3c:c2:42:3e:2c:10:25:0e:d8:cb:09:14:5f:fb:56:
                    71:bf:8d:4f:0e:c4:19:ce:8f:2f:f8:e7:98:37:2d:
                    58:c5:e0:c0:32:73:e8:53:89:a2:a3:0a:16:2f:c5:
                    7f:a8:f7:79:36:84:70:b8:82:d2:91:d1:55:05:63:
                    4f:2b:11:37:b4:81:d2:9b:fb:b8:0b:72:52:97:5f:
                    2f:b2:68:cc:1c:4b:cc:5b:4a:db:1e:62:a2:af:78:
                    c6:b9:fd:ff:50:44:8a:45:e5:d0:4b:c3:47:3a:d0:
                    87:7d:79:d9:16:68:16:2e:46:d7:42:ae:de:b6:0c:
                    6a:c5:ac:b6:6a:0d:50:7e:4e:ee:25:bf:ba:72:ce:
                    71:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:F9:58:CA:4B:AD:C1:1E:79:92:23:04:2C:15:0A:1E:5E:F2:F9:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2fb92c7-382c-4f2f-b805-d3dfb3cdd989/852dd082-24ae-31fe-9740-a06205abf309.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2fb92c7-382c-4f2f-b805-d3dfb3cdd989/f2fb92c7-382c-4f2f-b805-d3dfb3cdd989.crl

            X509v3 Authority Key Identifier:
                keyid:AB:29:8B:9B:95:71:8E:3A:1C:F5:3C:C6:91:0E:B7:19:EC:72:AC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f2fb92c7-382c-4f2f-b805-d3dfb3cdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:9b:94:32:be:91:d3:94:fe:cf:f5:72:94:a7:c3:dc:e2:a4:
         c1:cb:e9:76:50:4f:12:97:7a:09:ad:02:ec:03:dc:27:d0:46:
         b0:9f:00:9d:82:90:bb:7f:e0:1f:bf:43:7e:fa:d8:02:22:5b:
         95:60:a7:1a:29:8e:76:6e:3f:20:dc:55:65:50:c8:ed:33:ec:
         c5:fa:b1:f3:98:43:4e:d0:d5:d0:01:ed:66:6e:24:5e:30:81:
         03:75:2b:9e:e5:c4:2f:ec:e6:23:d1:94:e3:a6:be:1d:bd:0d:
         75:c2:a2:25:2f:1f:06:28:5d:b2:c9:5f:69:33:27:ae:63:dc:
         ec:4f:73:c3:a4:6d:d3:66:7e:9a:a2:70:27:67:ea:73:4a:1c:
         ab:22:f6:ed:fc:68:c4:35:b4:7b:a9:28:7b:f6:b8:46:f9:9f:
         04:7a:14:9e:e5:ac:b8:68:92:67:67:2b:7a:ea:fa:c5:84:60:
         d1:c8:72:d2:b9:a1:19:4e:4a:7c:ea:74:86:ce:b7:20:8a:ab:
         4d:89:14:bf:b9:24:70:b4:e2:04:41:5c:38:66:d0:0e:69:61:
         b8:b1:a9:39:b5:0d:1d:e6:30:bb:56:3d:e7:fe:d1:4d:ff:33:
         20:99:ac:1c:8f:94:56:b9:34:e1:fc:e3:61:06:e2:5a:f7:17:
         70:b3:d0:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:44 2023 by rpki-client on console-ams.rpki-client.org