Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/3130342e33372e34332e302f32342d3234203d3e20393435.roa
File:                     3130342e33372e34332e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          LRmlxEVSZibDLOWV3ntGAf5X53DvwIlpUzkfxnY6uE4=
Subject key identifier:   93:9B:54:69:00:D6:D9:E5:60:10:D2:7B:A4:F8:6D:2B:9A:C5:7B:FD
Certificate issuer:       /CN=02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055
Certificate serial:       3C74AFC6FB32C232675EB5E533586E7D3B29A229
Authority key identifier: 26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/3130342e33372e34332e302f32342d3234203d3e20393435.roa
Signing time:             Mon 10 Apr 2023 05:50:41 +0000
ROA not before:           Mon 10 Apr 2023 05:45:41 +0000
ROA not after:            Mon 08 Apr 2024 05:50:41 +0000
asID:                     945
IP address blocks:        104.37.43.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:74:af:c6:fb:32:c2:32:67:5e:b5:e5:33:58:6e:7d:3b:29:a2:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055
        Validity
            Not Before: Apr 10 05:45:41 2023 GMT
            Not After : Apr  8 05:50:41 2024 GMT
        Subject: CN=939B546900D6D9E56010D27BA4F86D2B9AC57BFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:62:6d:9c:67:43:2c:e3:1d:a4:c7:a8:23:09:
                    46:5a:5c:8b:15:21:80:f8:8e:02:7a:fe:3d:e7:17:
                    bb:0a:f9:fe:2e:1c:45:ce:af:87:eb:4c:55:be:e3:
                    1d:64:1d:1b:4d:aa:c9:9a:4e:15:44:e8:00:c8:3c:
                    41:82:75:42:26:c1:39:ae:bc:d5:bd:76:e7:0e:bd:
                    bc:15:dc:f9:58:1a:81:c4:ca:2e:1b:6e:0c:0c:32:
                    a9:5e:1d:92:4a:b1:fa:44:dc:e2:c7:9f:cd:03:3d:
                    2b:fc:07:74:cb:fd:1e:c2:4d:cb:6f:b1:65:d8:74:
                    ae:6a:3e:53:3e:0b:16:51:6a:8d:6e:4a:22:08:4d:
                    50:af:02:f8:1f:e6:1a:92:e4:d6:ed:85:63:73:5b:
                    eb:5d:73:d9:17:74:ee:48:e9:6d:da:a9:29:42:38:
                    19:0b:13:60:b5:b3:83:62:24:b2:eb:84:33:6b:47:
                    ef:01:91:e8:83:df:a1:f4:cd:2b:cc:1b:78:9e:0b:
                    e0:b4:9c:c0:a0:e2:c0:25:21:be:bf:8c:55:30:65:
                    33:6b:ac:bb:b5:3c:c4:e7:58:49:3c:7f:cd:32:6c:
                    b1:65:98:ef:c7:ae:91:39:a0:b9:aa:71:ec:a4:11:
                    9e:1f:1a:d2:3e:15:17:bf:b7:a1:0c:9d:df:8c:2c:
                    5c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9B:54:69:00:D6:D9:E5:60:10:D2:7B:A4:F8:6D:2B:9A:C5:7B:FD
            X509v3 Authority Key Identifier:
                keyid:26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/267181B0A5DD38D60BCC22881342C64FFC8CBC1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/3130342e33372e34332e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:b9:55:a3:f8:5e:e4:48:12:e6:35:95:70:1f:cf:15:3d:86:
         86:8d:21:ae:6d:d2:ac:42:c1:74:46:a4:21:0e:a8:92:00:83:
         7e:64:c1:b5:42:e0:e1:51:ae:5c:1a:52:e7:c3:f7:ef:c0:be:
         15:3b:df:64:3d:e9:f3:50:4e:32:17:3d:23:be:fb:53:7d:69:
         ea:29:3b:ba:7d:b1:7c:cc:58:f0:24:ba:1a:ad:ef:7a:f8:a8:
         ca:01:c9:b3:c1:31:76:97:fa:b1:00:93:8d:4a:7d:63:51:21:
         34:47:e7:6e:76:d0:62:ae:b9:17:73:aa:04:f7:52:9e:12:67:
         05:d1:c2:93:44:49:cd:89:39:08:4a:de:1b:e0:4d:26:73:9e:
         42:86:9b:a9:da:b6:84:8b:56:81:54:2d:5d:ba:5c:5b:a0:26:
         ed:50:af:02:6e:41:65:0f:e2:7e:d4:2f:06:21:9b:f6:08:78:
         c8:c5:ba:49:15:c3:d6:3d:61:7f:13:c7:2f:0d:16:0d:3d:c7:
         71:de:34:b1:ae:b5:c3:6c:c4:23:ac:6b:de:6f:f0:7a:a5:66:
         d7:93:da:07:86:59:ee:ef:cd:d5:8e:52:1a:2a:0a:56:8c:b9:
         83:35:b3:be:fd:23:c9:f0:47:c1:62:11:15:6c:8a:46:b7:b7:
         39:6f:19:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----