Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/3130342e33372e34302e302f32322d3232203d3e2030.roa
File:                     3130342e33372e34302e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier:          qMOWCQ5N1OPkhb1IxzyxSLhtto4mtXYbWNp0JlRSEtg=
Subject key identifier:   67:08:63:6E:93:A6:53:21:37:A3:A4:65:5C:91:F7:13:7F:7F:A4:B2
Certificate issuer:       /CN=02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055
Certificate serial:       558366D7FE3F46227379550E006E44BA272004DC
Authority key identifier: 26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/3130342e33372e34302e302f32322d3232203d3e2030.roa
Signing time:             Tue 04 Oct 2022 19:43:44 +0000
ROA not before:           Tue 04 Oct 2022 19:38:44 +0000
ROA not after:            Tue 03 Oct 2023 19:43:44 +0000
asID:                     0
IP address blocks:        104.37.40.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:83:66:d7:fe:3f:46:22:73:79:55:0e:00:6e:44:ba:27:20:04:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055
        Validity
            Not Before: Oct  4 19:38:44 2022 GMT
            Not After : Oct  3 19:43:44 2023 GMT
        Subject: CN=6708636E93A6532137A3A4655C91F7137F7FA4B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:bd:73:50:34:29:67:eb:6e:d0:ac:ef:95:6f:
                    45:10:ee:5a:2d:c4:d5:a3:bb:81:8b:50:2e:0c:eb:
                    c2:29:b5:80:3f:db:1b:e3:2a:31:17:1a:60:3a:2a:
                    4e:aa:59:57:52:4f:7b:f8:ff:4f:66:84:9b:d2:32:
                    05:a1:99:05:cc:10:80:5b:6a:13:9f:62:72:ee:52:
                    75:ae:0e:36:0f:77:d2:87:d0:24:f4:7f:bf:f9:f9:
                    da:0e:cb:5a:d7:ba:3c:a1:ae:a2:17:73:7c:fd:09:
                    1b:20:43:86:1b:cd:6a:33:a0:fc:a2:96:67:c7:26:
                    31:74:c3:19:05:c5:b6:e7:61:2a:44:96:af:3a:83:
                    02:f8:3e:ab:7f:d1:84:ea:09:bc:e8:b3:55:32:30:
                    6e:c1:47:29:c9:8a:4e:29:30:a2:eb:a2:50:c3:85:
                    55:70:01:5f:40:69:aa:98:36:22:5a:2f:e4:3f:51:
                    85:38:cb:3b:a5:a6:7a:3d:56:19:14:d3:9d:59:c4:
                    09:e4:3f:fd:05:dc:0a:5b:50:2d:c4:bb:99:21:b5:
                    3f:6d:0b:4e:1a:8b:33:45:60:14:ef:3a:55:ef:f8:
                    ff:7a:e3:d9:1e:73:2f:c1:27:56:6f:cb:53:ad:9e:
                    29:b5:d7:82:29:d6:6a:a0:0d:74:cd:5b:12:c8:9e:
                    41:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:08:63:6E:93:A6:53:21:37:A3:A4:65:5C:91:F7:13:7F:7F:A4:B2
            X509v3 Authority Key Identifier:
                keyid:26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/267181B0A5DD38D60BCC22881342C64FFC8CBC1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/3130342e33372e34302e302f32322d3232203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:bb:98:b7:19:d7:3e:c7:b5:a4:ae:e1:1d:fd:fc:80:88:47:
         e1:bd:9d:fd:4f:28:d0:f4:48:15:bf:8e:c8:47:0a:36:98:a0:
         aa:0a:ef:65:49:cd:62:dc:8f:56:26:0c:e3:26:ed:d6:a7:62:
         c5:83:02:80:3b:71:40:c9:f3:09:cb:9b:3a:ea:c0:98:8e:22:
         8f:6d:00:cf:8d:97:95:56:33:e5:ba:d2:5b:4b:8a:53:ba:65:
         4b:b3:2e:21:9a:c7:23:16:c3:5a:02:74:e4:2f:a3:3e:7e:3f:
         59:6c:90:ad:a3:de:d0:b2:5a:5d:d3:ae:cd:7d:6d:66:a3:db:
         05:a8:ee:1f:10:88:79:e9:ec:e4:e3:6f:e1:c6:45:e1:88:d2:
         5d:db:42:c8:67:4e:57:92:0c:fb:55:9e:bf:dd:07:b4:5a:7f:
         95:dc:c1:61:05:c1:07:9f:11:e3:79:0a:7c:f9:11:9a:e3:2e:
         75:92:9a:a4:ff:23:c8:a6:92:57:56:7c:3e:a2:a8:15:15:11:
         86:b4:a8:eb:ed:1a:18:68:c9:0f:b7:80:2e:b8:3d:97:2f:8d:
         93:c1:74:53:8a:fa:ef:e5:72:49:bc:77:f7:a8:aa:e3:58:7d:
         22:33:25:3a:9e:8f:93:5b:8d:04:3a:17:4e:20:23:e1:ec:bc:
         d7:f0:3e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:23 2023 by rpki-client on console-fra.rpki-client.org