Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/3130342e33372e34302e302f32342d3234203d3e20393730.roa
File:                     3130342e33372e34302e302f32342d3234203d3e20393730.roa (raw, json)
Hash identifier:          H/MKcLS0IjGQgPACsBVcq+XXyLDoBu+sTI4A2tZWUYA=
Subject key identifier:   9A:3A:44:E7:00:DF:C4:AF:2F:29:FF:22:06:1B:49:EA:00:44:C2:81
Certificate issuer:       /CN=02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055
Certificate serial:       0D252E8FFFAD5CE50FB2C72007841B232FD3B694
Authority key identifier: 26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/3130342e33372e34302e302f32342d3234203d3e20393730.roa
Signing time:             Tue 04 Oct 2022 19:43:29 +0000
ROA not before:           Tue 04 Oct 2022 19:38:29 +0000
ROA not after:            Tue 03 Oct 2023 19:43:29 +0000
asID:                     970
IP address blocks:        104.37.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:25:2e:8f:ff:ad:5c:e5:0f:b2:c7:20:07:84:1b:23:2f:d3:b6:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055
        Validity
            Not Before: Oct  4 19:38:29 2022 GMT
            Not After : Oct  3 19:43:29 2023 GMT
        Subject: CN=9A3A44E700DFC4AF2F29FF22061B49EA0044C281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2c:38:83:86:cc:aa:5b:5f:d8:a5:c5:80:71:
                    49:a8:47:6f:34:fd:fd:9b:13:f8:a5:2c:45:db:87:
                    59:23:3b:a3:de:1e:34:e5:cd:58:fc:7a:ae:f9:27:
                    58:8c:4d:02:88:39:d9:8a:bb:21:a8:ab:22:ee:bd:
                    a9:0c:43:f4:2d:13:ae:4a:f3:46:c2:7f:6c:3b:0c:
                    4d:a7:48:7c:a5:6f:3f:0d:72:9a:1e:82:d6:61:c7:
                    d6:9c:e5:84:0e:16:12:01:00:ab:c4:03:c2:47:1e:
                    7a:c6:02:b4:7c:90:a0:a3:c5:11:7e:4e:2b:18:f2:
                    87:d0:2c:7e:84:aa:a9:4b:f2:7f:e1:6f:2d:16:c2:
                    b5:5b:54:73:cd:99:42:fd:e1:b0:f8:d9:f8:fa:95:
                    ff:73:dd:ea:ca:21:bb:45:ee:4e:b7:e0:3f:bb:72:
                    66:42:11:c3:79:02:9f:a5:7a:63:a0:ba:81:8b:0b:
                    dd:14:4f:5c:80:0a:f9:7e:ab:f2:4f:9c:cd:65:17:
                    96:d9:45:ad:5c:ac:fd:c1:de:48:1d:d2:e1:8d:08:
                    2a:28:8e:28:8f:72:c8:7d:53:e1:bf:f8:8e:31:07:
                    a3:6b:05:d7:a8:51:7d:f2:68:ff:af:85:8d:ea:e0:
                    63:8f:38:a2:2d:4d:b2:36:8f:46:6d:19:48:a4:e3:
                    be:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:3A:44:E7:00:DF:C4:AF:2F:29:FF:22:06:1B:49:EA:00:44:C2:81
            X509v3 Authority Key Identifier:
                keyid:26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/267181B0A5DD38D60BCC22881342C64FFC8CBC1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/3130342e33372e34302e302f32342d3234203d3e20393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:61:d6:07:f1:f3:c0:3e:23:79:49:0b:1a:8f:b5:a0:06:68:
         1e:2a:2f:29:0a:62:9a:c7:37:2e:7a:79:cf:c4:bc:09:0f:3c:
         fc:28:38:af:7f:50:92:67:c0:d8:87:28:73:2a:7d:84:54:48:
         2c:0e:98:e5:c8:dd:5e:f4:a0:40:fb:67:f6:9f:9c:26:a2:f6:
         6d:6d:fb:2c:cf:e5:e9:16:ca:bf:93:7b:48:f8:2e:41:cb:39:
         fe:ed:a7:fe:ff:2f:fa:ef:80:16:b3:62:60:94:06:7e:d9:c1:
         69:62:07:7e:ea:03:e0:db:4b:44:38:e3:30:2c:bb:00:db:b2:
         5b:bb:9d:d3:41:78:57:66:14:9d:b9:9f:5f:4d:e4:b9:c5:e4:
         bd:74:ba:10:67:0c:c4:04:98:22:c1:16:89:12:26:5d:05:c0:
         c8:41:bd:52:74:5f:71:c8:20:fe:fe:02:b5:fe:b4:bf:82:1b:
         48:6d:d3:0a:22:2e:8a:f7:20:99:d9:0c:d9:ac:4e:82:1e:cb:
         6e:a6:38:12:45:0c:19:1c:05:be:6f:db:b5:d9:ae:e3:68:7b:
         64:be:9e:d3:6e:2a:e6:87:2f:46:11:6d:6b:6e:43:e2:e5:d3:
         8d:5f:d5:c4:37:10:ce:1f:21:78:a0:ba:cf:de:f1:33:7d:b7:
         f1:63:7c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:21:23 2023 by rpki-client on console-fra.rpki-client.org