Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/34352e34352e3135362e302f32342d3234203d3e203631333137.roa
File:                     34352e34352e3135362e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          TeDl9Ij95Bf0cTbzBxzE8kIRJ2lqM5jN3NUkyvGONPQ=
Subject key identifier:   93:DE:F4:E0:F6:15:C8:5A:9E:53:15:CC:26:A5:94:C9:9B:AC:F1:40
Certificate issuer:       /CN=4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42
Certificate serial:       29A40FADA324B42013100356D493D09F738A0E4A
Authority key identifier: 87:4A:35:3A:EE:F2:A6:07:A1:AB:A8:E4:3D:20:F1:8E:C9:41:1A:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/34352e34352e3135362e302f32342d3234203d3e203631333137.roa
Signing time:             Tue 14 May 2024 07:01:15 +0000
ROA not before:           Tue 14 May 2024 06:56:15 +0000
ROA not after:            Tue 13 May 2025 07:01:15 +0000
asID:                     61317
IP address blocks:        45.45.156.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a4:0f:ad:a3:24:b4:20:13:10:03:56:d4:93:d0:9f:73:8a:0e:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42
        Validity
            Not Before: May 14 06:56:15 2024 GMT
            Not After : May 13 07:01:15 2025 GMT
        Subject: CN=93DEF4E0F615C85A9E5315CC26A594C99BACF140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6f:99:9b:cd:2f:ac:85:f2:9c:84:41:cb:3e:
                    24:cd:e3:91:d5:75:00:03:c0:f5:65:6f:74:5e:7e:
                    e4:cf:fb:90:79:d0:5e:51:31:9e:4d:d2:29:50:b2:
                    ba:e6:62:de:6a:9f:be:a2:13:08:bb:11:7b:72:49:
                    2d:d9:ec:95:2b:3e:42:83:0e:9b:f5:5e:c1:7f:19:
                    9e:f1:ec:b5:e8:83:e0:91:11:a6:60:0b:cf:55:0a:
                    1c:b7:8f:33:75:0f:4f:df:83:09:51:5c:d8:8e:f1:
                    49:75:fa:e2:1a:e8:a7:33:5b:65:4e:cf:d8:76:55:
                    de:a9:a7:b7:a7:16:4a:b0:ca:3a:d6:fe:26:cf:76:
                    a5:76:d2:ba:71:08:1b:67:4a:b1:d1:49:a5:84:06:
                    a8:20:d5:0b:04:e4:d8:80:96:ec:c1:fb:77:0e:2b:
                    49:be:40:bf:93:8e:ab:35:c5:e4:19:ac:06:25:ef:
                    03:90:71:6a:15:d5:13:d1:ba:69:ad:2d:b0:72:4c:
                    78:8a:89:b4:98:9f:e6:06:58:da:6f:59:c5:58:e2:
                    41:4d:a8:37:fd:2f:ee:82:7e:29:1e:36:73:38:dc:
                    94:90:35:55:4c:52:73:38:b7:70:cd:0e:ee:15:03:
                    d1:3b:3e:e3:44:0f:cf:49:c1:a2:16:47:a1:4a:f9:
                    9d:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:DE:F4:E0:F6:15:C8:5A:9E:53:15:CC:26:A5:94:C9:9B:AC:F1:40
            X509v3 Authority Key Identifier:
                keyid:87:4A:35:3A:EE:F2:A6:07:A1:AB:A8:E4:3D:20:F1:8E:C9:41:1A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/874A353AEEF2A607A1ABA8E43D20F18EC9411AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/34352e34352e3135362e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:ba:85:54:10:cc:17:e2:47:8b:70:15:fa:5c:c4:a6:38:35:
         d6:a5:86:b1:66:1d:37:e0:60:fc:7f:ca:63:6f:eb:89:bd:67:
         f1:46:aa:d2:6c:b8:01:71:24:49:36:42:4b:28:69:b4:d2:d6:
         22:d6:34:cd:98:4d:3e:c3:ee:af:5c:9f:5b:85:6f:a3:44:e2:
         c6:b5:ff:09:3b:7a:aa:3e:69:40:c4:36:17:35:33:25:75:44:
         a7:29:30:70:f5:08:9a:f8:27:04:5d:f5:0a:b2:d6:b9:20:8f:
         04:b2:05:49:a8:24:5c:5e:50:fb:95:40:61:c3:bb:52:61:ff:
         e8:56:b4:b9:72:9e:2e:1a:64:e2:08:1a:3d:0c:3b:90:19:12:
         fd:42:be:35:71:4e:70:77:81:ae:fb:f1:b7:0c:4e:a3:cf:9f:
         e7:4a:20:e1:3a:7e:91:7f:4e:b1:33:2d:d6:c7:58:61:bf:d7:
         f4:f1:0c:d2:3b:db:38:4d:18:0d:b3:4e:b8:d8:25:93:ed:a9:
         65:fd:e5:b5:cf:de:a1:82:f6:24:d6:ba:40:44:81:6f:3a:00:
         c2:dc:b9:1c:d1:6e:6b:65:7f:92:c1:bc:cd:0a:5d:56:9c:3f:
         f7:6d:4a:a7:1d:37:9e:67:cc:42:39:f7:0c:27:11:43:a1:38:
         03:7a:5f:d9
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUKaQPraMktCATEANW1JPQn3OKDkowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNGFkNjNhZmNjOWI3ZDUxODYwYTI1ZjVmZWNjMjQ5MmQz
NWJkMGFhNDEzNTAxOGRlNDIwHhcNMjQwNTE0MDY1NjE1WhcNMjUwNTEzMDcwMTE1
WjAzMTEwLwYDVQQDEyg5M0RFRjRFMEY2MTVDODVBOUU1MzE1Q0MyNkE1OTRDOTlC
QUNGMTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5m+Zm80vrIXy
nIRByz4kzeOR1XUAA8D1ZW90Xn7kz/uQedBeUTGeTdIpULK65mLeap++ohMIuxF7
ckkt2eyVKz5Cgw6b9V7Bfxme8ey16IPgkRGmYAvPVQoct48zdQ9P34MJUVzYjvFJ
dfriGuinM1tlTs/YdlXeqae3pxZKsMo61v4mz3aldtK6cQgbZ0qx0UmlhAaoINUL
BOTYgJbswft3DitJvkC/k46rNcXkGawGJe8DkHFqFdUT0bpprS2wckx4iom0mJ/m
Bljab1nFWOJBTag3/S/ugn4pHjZzONyUkDVVTFJzOLdwzQ7uFQPROz7jRA/PScGi
FkehSvmdyQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJPe9OD2FchanlMVzCallMmb
rPFAMB8GA1UdIwQYMBaAFIdKNTru8qYHoauo5D0g8Y7JQRr4MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODg5YzQzZTcwMTg4YjM2OTA1ZDQxNjA1LzAv
ODc0QTM1M0FFRUYyQTYwN0ExQUJBOEU0M0QyMEYxOEVDOTQxMUFGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiLzNlYjYwNTk4LTc2Y2EtNDliMC05YTFmLTAxMjcwNjAzZDhkOS80YWQ2
M2FmY2M5YjdkNTE4NjBhMjVmNWZlY2MyNDkyZDM1YmQwYWE0MTM1MDE4ZGU0Mi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg4OWM0M2U3MDE4OGIz
NjkwNWQ0MTYwNS8wLzM0MzUyZTM0MzUyZTMxMzUzNjJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM2MzEzMzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAAtLZwwDQYJKoZIhvcNAQELBQAD
ggEBAIm6hVQQzBfiR4twFfpcxKY4NdalhrFmHTfgYPx/ymNv64m9Z/FGqtJsuAFx
JEk2QksoabTS1iLWNM2YTT7D7q9cn1uFb6NE4sa1/wk7eqo+aUDENhc1MyV1RKcp
MHD1CJr4JwRd9Qqy1rkgjwSyBUmoJFxeUPuVQGHDu1Jh/+hWtLlyni4aZOIIGj0M
O5AZEv1CvjVxTnB3ga778bcMTqPPn+dKIOE6fpF/TrEzLdbHWGG/1/TxDNI72zhN
GA2zTrjYJZPtqWX95bXP3qGC9iTWukBEgW86AMLcuRzRbmtlf5LBvM0KXVacP/dt
SqcdN55nzEI59wwnEUOhOAN6X9k=
-----END CERTIFICATE-----
Generated at Mon May 27 03:37:16 2024 by rpki-client on console.sobornost.net