Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/3130342e33372e34312e302f32342d3234203d3e203231393537.roa
File:                     3130342e33372e34312e302f32342d3234203d3e203231393537.roa (raw, json)
Hash identifier:          WKrdjB5nBJo+09La0GhdPsW+o7Le9BbILoQwzVyI7kE=
Subject key identifier:   3F:29:6B:22:49:5E:19:1C:41:EF:88:71:72:6B:0C:49:43:06:8D:39
Certificate issuer:       /CN=02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055
Certificate serial:       63EED5C738F31215F1E678A99B222A67AF024DAA
Authority key identifier: 26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/3130342e33372e34312e302f32342d3234203d3e203231393537.roa
Signing time:             Tue 04 Oct 2022 19:43:59 +0000
ROA not before:           Tue 04 Oct 2022 19:38:59 +0000
ROA not after:            Tue 03 Oct 2023 19:43:59 +0000
asID:                     21957
IP address blocks:        104.37.41.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ee:d5:c7:38:f3:12:15:f1:e6:78:a9:9b:22:2a:67:af:02:4d:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055
        Validity
            Not Before: Oct  4 19:38:59 2022 GMT
            Not After : Oct  3 19:43:59 2023 GMT
        Subject: CN=3F296B22495E191C41EF8871726B0C4943068D39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f3:49:eb:5c:2c:a1:f2:2a:76:74:ea:de:b1:
                    ca:06:41:c9:4d:a8:20:3d:c1:af:b4:ca:a2:0f:a2:
                    78:f7:89:20:84:90:14:80:7d:5d:a4:b4:43:69:7b:
                    f9:c3:e7:9a:7b:e2:f0:a8:43:93:f8:43:97:1b:54:
                    6d:87:ac:44:fd:7b:1c:27:f2:a2:3a:2f:8d:70:c9:
                    26:3a:54:d8:f3:9b:cb:82:6e:10:7c:85:e1:4f:b7:
                    00:fd:e5:3f:6b:f5:fc:3d:38:a4:36:88:6e:1a:15:
                    7c:9f:13:9f:e0:96:01:dd:95:7c:65:1f:af:30:58:
                    6b:91:1e:69:32:d1:d9:4b:fc:fc:b5:ea:44:8d:90:
                    a0:15:f1:ee:c1:05:df:91:10:cd:49:61:63:91:dc:
                    aa:ee:44:9e:1f:a3:23:de:99:43:b4:cf:e9:8e:da:
                    6a:fa:4d:4f:46:c9:a4:6e:c1:10:0f:dc:40:82:2e:
                    6a:cf:f6:d4:ed:62:ca:b8:9a:29:1d:b1:ef:20:8e:
                    29:e8:c3:d4:67:86:93:12:05:e5:7d:5e:c4:3f:27:
                    f8:f5:63:8e:f9:4b:15:d9:07:59:3f:04:65:52:17:
                    b0:0c:1d:09:f3:72:e1:f9:ab:e8:e3:96:9e:f2:0a:
                    a3:2c:0b:5a:e7:95:65:02:f4:e9:8d:08:28:e4:56:
                    6d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:29:6B:22:49:5E:19:1C:41:EF:88:71:72:6B:0C:49:43:06:8D:39
            X509v3 Authority Key Identifier:
                keyid:26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/267181B0A5DD38D60BCC22881342C64FFC8CBC1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/3130342e33372e34312e302f32342d3234203d3e203231393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:be:0e:dd:fd:b1:9d:66:36:d0:3d:c3:93:b3:cb:b9:1a:82:
         29:ac:f9:88:4d:fd:96:6b:fe:15:86:56:d3:a1:18:33:d3:6b:
         f0:24:92:8b:af:e9:54:87:17:09:88:0d:e9:ae:20:87:cc:0b:
         01:6c:53:ac:66:49:35:ed:5c:70:62:0c:e6:97:5a:76:83:d9:
         97:6b:6b:71:20:f2:cb:3c:e5:eb:f0:08:e3:a3:a9:7f:89:18:
         77:46:1a:99:2e:6c:47:12:d7:67:43:5b:70:16:26:9e:c7:68:
         96:7a:7c:f8:d2:4f:be:7a:99:63:86:8b:d2:11:d6:2c:d8:dd:
         c2:8d:2e:ea:fb:c1:49:76:a6:10:ef:a2:4f:56:03:0b:93:74:
         9d:3d:7d:0f:c8:c5:01:9a:df:f2:2e:03:c5:3a:b1:70:a7:9a:
         b4:b1:0a:a5:f2:e8:df:8d:cb:68:ec:fe:03:f6:0e:73:ba:c4:
         33:1e:88:58:8d:32:72:11:91:59:b2:39:57:c7:f2:e3:f2:b3:
         49:41:a5:58:bd:17:c3:8e:54:e0:30:46:e6:21:03:29:03:b7:
         89:52:f8:94:09:aa:18:ed:a4:66:3c:0f:33:ed:8b:1a:e0:72:
         2f:72:1c:a3:48:da:82:7a:c9:77:8f:bc:df:c6:e0:79:01:50:
         51:8e:41:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----