Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/13/3130342e33372e34322e302f32342d3234203d3e203530303538.roa
File:                     3130342e33372e34322e302f32342d3234203d3e203530303538.roa (raw, json)
Hash identifier:          g6ORmDmeHjC0xJq6gpN/GQ+QDn6WKShnQzPkyzQmS3M=
Subject key identifier:   D2:45:64:B8:CE:39:CD:D1:0F:A1:DD:F6:1B:73:B3:A9:F2:99:CC:63
Certificate issuer:       /CN=2CA7ECD419E28CD586D408C2CC54157A7A586FB6
Certificate serial:       5FF4453A7061E08DC1E26504541C5395EA181736
Authority key identifier: 2C:A7:EC:D4:19:E2:8C:D5:86:D4:08:C2:CC:54:15:7A:7A:58:6F:B6
Authority info access:    rsync://rpki.co/repo/HYSP/11/2CA7ECD419E28CD586D408C2CC54157A7A586FB6.cer
Subject info access:      rsync://rpki.co/repo/August/13/3130342e33372e34322e302f32342d3234203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 09:22:02 +0000
ROA not before:           Sat 08 Apr 2023 09:17:02 +0000
ROA not after:            Sat 06 Apr 2024 09:22:02 +0000
asID:                     50058
IP address blocks:        104.37.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:f4:45:3a:70:61:e0:8d:c1:e2:65:04:54:1c:53:95:ea:18:17:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2CA7ECD419E28CD586D408C2CC54157A7A586FB6
        Validity
            Not Before: Apr  8 09:17:02 2023 GMT
            Not After : Apr  6 09:22:02 2024 GMT
        Subject: CN=D24564B8CE39CDD10FA1DDF61B73B3A9F299CC63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:f9:6d:52:eb:fe:7c:8e:81:36:2f:ad:59:91:
                    61:4e:0c:c6:4d:2a:bc:2b:a8:88:7f:92:46:69:cc:
                    0d:ef:9a:ae:f6:f1:c2:50:69:4c:cb:30:7e:17:a1:
                    38:93:2e:5e:c5:21:a5:51:6c:b7:e1:60:e3:27:92:
                    0b:c9:88:46:01:e7:9d:ec:b3:2c:ea:4f:23:51:29:
                    c6:de:55:18:ce:0e:cd:3a:4e:f2:9c:d3:19:50:c2:
                    ae:77:74:34:16:c0:08:0b:fb:13:c8:9b:c6:15:7c:
                    5d:da:d1:83:2d:a8:0e:1a:6f:7f:59:1a:2b:5d:fa:
                    72:34:25:a6:35:95:aa:3f:49:63:16:79:fd:12:14:
                    34:61:e0:93:f5:5e:6e:fb:03:6a:3b:5d:55:04:5f:
                    f8:7e:3f:f3:08:af:2b:2a:e8:21:d1:b3:6f:a4:1c:
                    33:09:1a:d1:be:2e:02:3a:41:6a:e4:43:2f:46:7f:
                    47:e7:66:ad:ae:91:4b:80:5d:df:e6:bb:c2:92:d0:
                    60:4e:5c:80:b9:69:e1:0c:53:13:54:18:f1:27:d7:
                    23:45:eb:74:37:28:e5:6c:c8:13:18:16:54:31:8b:
                    44:40:b2:56:3d:d5:da:25:e7:3f:0f:21:96:ed:ce:
                    9d:ef:cf:b8:49:aa:40:d2:92:62:0f:0c:71:91:d1:
                    00:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:45:64:B8:CE:39:CD:D1:0F:A1:DD:F6:1B:73:B3:A9:F2:99:CC:63
            X509v3 Authority Key Identifier:
                keyid:2C:A7:EC:D4:19:E2:8C:D5:86:D4:08:C2:CC:54:15:7A:7A:58:6F:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/13/2CA7ECD419E28CD586D408C2CC54157A7A586FB6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.co/repo/HYSP/11/2CA7ECD419E28CD586D408C2CC54157A7A586FB6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/13/3130342e33372e34322e302f32342d3234203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:e0:a1:d4:f1:44:0c:da:bb:c5:25:e8:4c:a3:56:89:8b:d4:
         8d:a2:9c:2f:9d:6e:0e:94:f1:94:cd:74:41:f1:b7:b8:80:ce:
         8c:53:56:9d:d4:06:ba:8a:84:ec:4c:49:1a:9d:8a:8c:1c:dd:
         9f:75:d9:f1:01:ba:ed:3c:81:c4:7b:6d:98:f0:0c:14:3a:a6:
         8a:9c:01:57:79:b3:9d:54:9d:de:ff:34:7f:2b:82:6d:b1:26:
         1e:e3:17:c9:2f:d2:2c:75:61:69:fc:6c:b1:69:7b:5c:8b:cd:
         9f:f6:7e:ce:88:91:5f:fb:4e:61:0e:f2:ed:3f:19:6b:4d:b8:
         1d:12:e5:58:96:15:fd:d8:23:38:8f:24:b1:0c:b2:30:3c:f4:
         74:c6:c7:8e:eb:dc:63:3c:9f:d2:6d:2d:cb:69:14:73:54:17:
         19:db:a8:a1:57:5b:8a:45:b7:cf:31:61:8f:11:e4:eb:cd:a7:
         34:b8:2e:72:04:08:0f:6c:db:47:3a:94:b2:c9:c0:70:30:da:
         52:bd:40:ef:33:e6:d4:9c:a7:ae:8f:21:65:b9:18:82:50:b2:
         03:c5:c7:04:75:14:9e:ee:fb:2d:80:ac:dc:2b:a1:b6:7f:fe:
         29:34:df:4a:fe:f0:47:c8:2e:8e:8a:37:b8:a3:13:f9:64:58:
         0d:dd:53:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:28 2023 by rpki-client on console-fra.rpki-client.org