Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/11/3130342e33372e34322e302f32332d3233203d3e203530303538.roa
File:                     3130342e33372e34322e302f32332d3233203d3e203530303538.roa (raw, json)
Hash identifier:          a6TBukOHgkEep1UPZ0XnnNCyD2/tOGKO2IaqjlFpvrU=
Subject key identifier:   A2:18:8E:67:BE:27:A1:11:4B:3F:65:0C:EF:23:F4:F3:C8:18:4B:A1
Certificate issuer:       /CN=5AEF4E0CA78DCCA0F6D0DB991B78251144F2A630
Certificate serial:       6DB7EA7BB3A126D17AE7DEBA2400C0B2A9E5D303
Authority key identifier: 5A:EF:4E:0C:A7:8D:CC:A0:F6:D0:DB:99:1B:78:25:11:44:F2:A6:30
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/5AEF4E0CA78DCCA0F6D0DB991B78251144F2A630.cer
Subject info access:      rsync://rpki.co/repo/HYSP/11/3130342e33372e34322e302f32332d3233203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 03:25:18 +0000
ROA not before:           Sat 08 Apr 2023 03:20:18 +0000
ROA not after:            Sat 06 Apr 2024 03:25:18 +0000
asID:                     50058
IP address blocks:        104.37.42.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b7:ea:7b:b3:a1:26:d1:7a:e7:de:ba:24:00:c0:b2:a9:e5:d3:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AEF4E0CA78DCCA0F6D0DB991B78251144F2A630
        Validity
            Not Before: Apr  8 03:20:18 2023 GMT
            Not After : Apr  6 03:25:18 2024 GMT
        Subject: CN=A2188E67BE27A1114B3F650CEF23F4F3C8184BA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:29:15:98:ac:19:5a:ae:e4:07:37:fe:7c:38:
                    be:c5:72:d1:56:87:89:dd:19:12:03:95:28:f1:bb:
                    b0:f6:17:1e:60:85:5e:b4:e3:17:ee:a4:d8:a2:54:
                    7d:aa:71:65:84:bd:45:11:a6:ef:ec:eb:c0:86:66:
                    68:5d:61:98:e1:09:5f:fb:ac:74:58:53:61:ad:e8:
                    f6:f5:4b:06:d6:33:8e:bb:8a:26:a0:32:92:c8:6d:
                    33:38:9b:5e:a9:e1:b8:2f:33:93:e3:bd:07:1b:9c:
                    c7:5b:45:18:c6:c8:d7:39:04:4a:ca:fe:99:83:e4:
                    a6:31:24:c5:3c:32:d0:9c:fb:bb:3e:6f:8b:61:ad:
                    13:e8:c4:f2:55:c7:98:74:07:42:a4:19:ef:3a:7d:
                    a3:dc:d8:1c:ba:ae:b0:f3:e3:df:42:27:a8:49:7a:
                    8c:e6:fb:16:d1:72:6a:b3:a3:2a:7b:39:2f:3b:8e:
                    65:c0:af:45:5d:a4:e9:63:d1:1f:72:e7:bc:50:6c:
                    ba:83:20:fb:0b:c7:11:74:8a:ae:42:7e:8b:0a:21:
                    f1:18:1e:c7:39:31:5f:f0:96:fa:ba:3d:50:f6:15:
                    fb:94:10:8c:9e:84:d0:48:eb:05:ca:da:e4:d8:b3:
                    5e:67:c5:9c:0b:66:3e:3e:07:78:09:eb:96:89:86:
                    d7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:18:8E:67:BE:27:A1:11:4B:3F:65:0C:EF:23:F4:F3:C8:18:4B:A1
            X509v3 Authority Key Identifier:
                keyid:5A:EF:4E:0C:A7:8D:CC:A0:F6:D0:DB:99:1B:78:25:11:44:F2:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/11/5AEF4E0CA78DCCA0F6D0DB991B78251144F2A630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/5AEF4E0CA78DCCA0F6D0DB991B78251144F2A630.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/11/3130342e33372e34322e302f32332d3233203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ad:2a:3b:cf:cb:9f:ca:ec:fd:c3:9b:7c:b3:63:78:1e:f1:32:
         80:a6:24:b8:6f:c6:b3:af:1c:76:bb:db:f3:eb:5f:bc:57:2b:
         c0:4b:64:96:45:e4:f7:00:1c:41:f1:f2:41:8c:f0:59:8e:ce:
         4c:13:3b:48:8b:0f:3f:c2:bc:37:a4:44:21:12:9b:4f:e5:70:
         e8:14:bc:d4:85:a4:e4:12:5d:d6:83:0f:7b:4c:0d:4a:89:f3:
         ae:4d:04:65:54:81:c4:d6:65:8f:eb:6e:4f:17:06:22:bf:d9:
         da:27:c3:e3:7d:25:d8:18:cd:4a:bb:9c:9b:61:05:14:65:06:
         e5:d0:50:ae:d1:e9:9d:49:af:52:6d:10:61:30:d0:0f:d2:b5:
         8f:34:0d:0f:c2:74:e0:72:0c:5b:02:68:ad:ec:6e:83:1f:79:
         69:b6:b2:a1:e1:93:42:8a:bb:ae:c4:4f:65:0a:8f:64:17:9d:
         5d:9f:16:be:22:97:1a:1a:37:0e:fc:c6:a8:7f:32:3d:56:ea:
         02:cb:97:b8:f1:48:4b:e1:22:f9:a5:5d:b2:0b:0b:86:fb:df:
         d7:b3:a6:a0:28:c9:62:c1:38:6b:14:02:16:be:12:2d:54:7e:
         82:3a:35:b2:fb:d7:30:a8:de:de:63:ee:50:06:ba:b3:98:91:
         1d:2c:84:5e
-----BEGIN CERTIFICATE-----
MIIE6jCCA9KgAwIBAgIUbbfqe7OhJtF65966JADAsqnl0wMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFFRjRFMENBNzhEQ0NBMEY2RDBEQjk5MUI3ODI1MTE0
NEYyQTYzMDAeFw0yMzA0MDgwMzIwMThaFw0yNDA0MDYwMzI1MThaMDMxMTAvBgNV
BAMTKEEyMTg4RTY3QkUyN0ExMTE0QjNGNjUwQ0VGMjNGNEYzQzgxODRCQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLKRWYrBlaruQHN/58OL7FctFW
h4ndGRIDlSjxu7D2Fx5ghV604xfupNiiVH2qcWWEvUURpu/s68CGZmhdYZjhCV/7
rHRYU2Gt6Pb1SwbWM467iiagMpLIbTM4m16p4bgvM5PjvQcbnMdbRRjGyNc5BErK
/pmD5KYxJMU8MtCc+7s+b4thrRPoxPJVx5h0B0KkGe86faPc2By6rrDz499CJ6hJ
eozm+xbRcmqzoyp7OS87jmXAr0VdpOlj0R9y57xQbLqDIPsLxxF0iq5CfosKIfEY
Hsc5MV/wlvq6PVD2FfuUEIyehNBI6wXK2uTYs15nxZwLZj4+B3gJ65aJhtf9AgMB
AAGjggH0MIIB8DAdBgNVHQ4EFgQUohiOZ74noRFLP2UM7yP088gYS6EwHwYDVR0j
BBgwFoAUWu9ODKeNzKD20NuZG3glEUTypjAwDgYDVR0PAQH/BAQDAgeAMFoGA1Ud
HwRTMFEwT6BNoEuGSXJzeW5jOi8vcnBraS5jby9yZXBvL0hZU1AvMTEvNUFFRjRF
MENBNzhEQ0NBMEY2RDBEQjk5MUI3ODI1MTE0NEYyQTYzMC5jcmwwgZMGCCsGAQUF
BwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyM2JkNDU0NzUyYmU2LzAv
NUFFRjRFMENBNzhEQ0NBMEY2RDBEQjk5MUI3ODI1MTE0NEYyQTYzMC5jZXIwcQYI
KwYBBQUHAQsEZTBjMGEGCCsGAQUFBzALhlVyc3luYzovL3Jwa2kuY28vcmVwby9I
WVNQLzExLzMxMzAzNDJlMzMzNzJlMzQzMjJlMzAyZjMyMzMyZDMyMzMyMDNkM2Uy
MDM1MzAzMDM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYB
BQUHAQcBAf8EEDAOMAwEAgABMAYDBAFoJSowDQYJKoZIhvcNAQELBQADggEBAK0q
O8/Ln8rs/cObfLNjeB7xMoCmJLhvxrOvHHa72/PrX7xXK8BLZJZF5PcAHEHx8kGM
8FmOzkwTO0iLDz/CvDekRCESm0/lcOgUvNSFpOQSXdaDD3tMDUqJ865NBGVUgcTW
ZY/rbk8XBiK/2donw+N9JdgYzUq7nJthBRRlBuXQUK7R6Z1Jr1JtEGEw0A/StY80
DQ/CdOByDFsCaK3sboMfeWm2sqHhk0KKu67ET2UKj2QXnV2fFr4ilxoaNw78xqh/
Mj1W6gLLl7jxSEvhIvmlXbILC4b739ezpqAoyWLBOGsUAha+Ei1UfoI6NbL71zCo
3t5j7lAGurOYkR0shF4=
-----END CERTIFICATE-----