Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/3130342e33372e34322e302f32332d3234203d3e203530303538.roa
File:                     3130342e33372e34322e302f32332d3234203d3e203530303538.roa (raw, json)
Hash identifier:          KsaUmYT1JjCfKeW1lgCIwXT5MDX1NRw+Y8rtb6UNdGw=
Subject key identifier:   A3:AE:BF:92:E8:04:17:D5:62:91:CE:93:9F:61:1B:7B:45:A7:F1:4B
Certificate issuer:       /CN=02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055
Certificate serial:       107334AD0FDC9BE2512F3B7687C84FC3DEA0ED21
Authority key identifier: 26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/3130342e33372e34322e302f32332d3234203d3e203530303538.roa
Signing time:             Mon 10 Apr 2023 05:50:31 +0000
ROA not before:           Mon 10 Apr 2023 05:45:31 +0000
ROA not after:            Mon 08 Apr 2024 05:50:31 +0000
asID:                     50058
IP address blocks:        104.37.42.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:73:34:ad:0f:dc:9b:e2:51:2f:3b:76:87:c8:4f:c3:de:a0:ed:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055
        Validity
            Not Before: Apr 10 05:45:31 2023 GMT
            Not After : Apr  8 05:50:31 2024 GMT
        Subject: CN=A3AEBF92E80417D56291CE939F611B7B45A7F14B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:36:be:8f:fb:ac:19:e4:a2:5d:d6:ef:f1:ab:
                    38:bf:09:8b:d0:c1:24:0d:1b:d1:84:c8:2c:80:7b:
                    68:7d:6e:4d:8b:42:02:d6:c4:07:35:94:79:4c:a2:
                    86:dd:d2:ca:98:b9:90:b0:25:77:b8:67:86:9c:29:
                    76:07:98:d7:83:3d:eb:1b:2f:23:c9:b4:59:3e:ce:
                    ab:6e:76:34:b8:e1:fa:e9:14:bd:99:d4:ee:dd:e4:
                    d8:5f:63:05:42:f3:bd:26:31:de:e1:e6:27:fc:13:
                    2e:fd:6b:b0:97:41:b1:47:1b:b4:e0:3d:67:3e:b1:
                    45:20:e4:70:ee:f9:c8:29:ce:1b:99:be:94:4e:17:
                    37:df:c1:96:96:6b:46:0e:38:fe:35:ea:aa:e4:a0:
                    97:68:f8:cc:a8:48:13:48:70:c7:ae:10:2c:8a:09:
                    7e:11:6c:82:4f:5a:2e:bb:25:a4:0f:46:54:da:ec:
                    74:70:b6:de:d3:a3:63:b2:b6:a0:85:ce:6d:06:13:
                    10:d5:1e:50:f0:79:e8:1d:d5:82:ae:f8:44:ba:dc:
                    4b:f4:bf:bb:99:cb:1f:82:44:4e:1c:80:b2:62:96:
                    5d:c1:af:89:91:b9:a4:39:34:f3:b8:83:ca:64:ca:
                    5b:81:0a:c7:e6:9e:bc:0b:f5:bc:7d:d3:12:e4:c5:
                    26:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AE:BF:92:E8:04:17:D5:62:91:CE:93:9F:61:1B:7B:45:A7:F1:4B
            X509v3 Authority Key Identifier:
                keyid:26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/267181B0A5DD38D60BCC22881342C64FFC8CBC1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/3130342e33372e34322e302f32332d3234203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:7c:55:c5:e7:3b:3a:dc:31:87:53:b6:72:a2:ac:94:26:90:
         aa:ac:e3:70:24:13:01:52:4a:20:20:6d:14:eb:51:9b:dd:43:
         25:d6:0e:e5:74:3a:96:bd:cf:22:95:a6:6d:21:fc:56:21:ea:
         1b:41:63:6a:ff:3a:0d:f4:71:1a:1e:c5:00:7f:2d:df:5f:83:
         e0:44:20:2d:29:31:e9:be:af:9e:e9:09:d1:09:d4:17:cf:0e:
         1a:3b:b2:db:37:26:39:e0:28:00:44:e6:8c:79:e5:29:25:05:
         03:66:22:27:69:88:2b:fa:a6:6f:df:3b:8b:ab:cd:2b:79:20:
         cb:a8:0c:e3:0c:53:d5:d2:50:d5:9b:25:71:82:90:eb:66:0a:
         48:c2:5e:55:18:57:5b:17:5f:14:5a:00:af:04:68:6f:54:6a:
         97:04:15:6b:c9:87:4b:e1:29:8a:99:e4:68:5c:29:28:3a:d3:
         46:59:84:55:a4:8b:5e:26:56:3b:c6:f0:94:90:c8:eb:03:8d:
         1b:7b:7a:ed:3b:f7:95:3c:e6:9c:21:95:6d:04:7e:f3:36:c3:
         e0:00:34:9b:ac:fb:cc:19:e9:61:7c:33:03:41:4c:27:7a:2a:
         4b:ce:35:37:75:d3:48:a4:db:ad:35:73:04:76:47:56:69:b6:
         47:d8:e0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org