Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/HYSP/11/3130342e33372e34322e302f32342d3234203d3e203530303538.roa
File:                     3130342e33372e34322e302f32342d3234203d3e203530303538.roa (raw, json)
Hash identifier:          YfOiI6jj1yNaOxBDjT8Rchy7NwSLoZtoqVYsAaZH378=
Subject key identifier:   2D:8A:51:2B:06:9F:15:C8:0A:9C:AC:EE:C8:38:90:D0:7C:12:A3:99
Certificate issuer:       /CN=5AEF4E0CA78DCCA0F6D0DB991B78251144F2A630
Certificate serial:       1BDF88D29C036ADC68EE60811C0867F30AC04BED
Authority key identifier: 5A:EF:4E:0C:A7:8D:CC:A0:F6:D0:DB:99:1B:78:25:11:44:F2:A6:30
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/5AEF4E0CA78DCCA0F6D0DB991B78251144F2A630.cer
Subject info access:      rsync://rpki.co/repo/HYSP/11/3130342e33372e34322e302f32342d3234203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 03:25:18 +0000
ROA not before:           Sat 08 Apr 2023 03:20:18 +0000
ROA not after:            Sat 06 Apr 2024 03:25:18 +0000
asID:                     50058
IP address blocks:        104.37.42.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:df:88:d2:9c:03:6a:dc:68:ee:60:81:1c:08:67:f3:0a:c0:4b:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AEF4E0CA78DCCA0F6D0DB991B78251144F2A630
        Validity
            Not Before: Apr  8 03:20:18 2023 GMT
            Not After : Apr  6 03:25:18 2024 GMT
        Subject: CN=2D8A512B069F15C80A9CACEEC83890D07C12A399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:df:1e:25:77:9f:5a:fe:91:96:ec:b3:26:c6:
                    39:2c:8b:6b:9b:16:eb:25:57:56:72:18:bb:8f:0a:
                    37:7f:f8:6c:3f:b5:17:1b:a8:28:2f:ad:1d:41:00:
                    3a:75:5e:a7:d3:63:c5:48:47:d6:e3:4a:81:fa:e2:
                    f3:3a:ee:6c:77:9a:89:ea:f0:f8:ea:71:37:9d:f2:
                    4d:92:53:94:2d:c8:41:46:97:bb:bd:33:05:9e:9c:
                    79:e0:74:90:d3:73:3e:3b:97:dd:0b:72:87:9f:66:
                    07:4f:b1:ef:92:6a:9a:e7:19:0e:84:a2:a8:c0:5f:
                    1b:39:5c:38:67:46:7e:f2:f8:ef:79:a2:f2:45:db:
                    30:4e:9a:a2:36:fb:0e:09:fc:a1:53:9e:73:47:dc:
                    17:30:84:f9:1d:46:a5:4b:56:ed:63:7a:23:c5:6f:
                    78:fb:2d:a3:37:c2:a2:22:65:2d:73:2f:50:46:11:
                    10:ce:cf:92:50:84:05:59:cb:e9:48:63:01:3c:e3:
                    62:05:c3:fe:52:7f:0a:d1:bb:f3:eb:c5:5d:82:cc:
                    15:da:de:9b:f2:21:79:b7:3e:20:1e:53:6a:38:d3:
                    5e:aa:56:87:c4:63:55:f9:73:51:85:67:36:46:73:
                    9d:72:50:e8:0d:06:ae:61:fd:45:2a:a9:aa:12:8f:
                    7e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8A:51:2B:06:9F:15:C8:0A:9C:AC:EE:C8:38:90:D0:7C:12:A3:99
            X509v3 Authority Key Identifier:
                keyid:5A:EF:4E:0C:A7:8D:CC:A0:F6:D0:DB:99:1B:78:25:11:44:F2:A6:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/HYSP/11/5AEF4E0CA78DCCA0F6D0DB991B78251144F2A630.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/5AEF4E0CA78DCCA0F6D0DB991B78251144F2A630.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/HYSP/11/3130342e33372e34322e302f32342d3234203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.37.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:0a:a7:f9:96:e6:bb:1e:c0:d5:73:f3:00:9f:2e:0d:7d:b1:
         d6:d9:93:0d:f8:9e:1c:a7:75:1d:ec:27:55:14:20:7b:64:f1:
         9b:9a:f7:28:c0:c1:e2:a3:e7:08:a3:da:5f:12:28:da:7c:a5:
         dc:70:1b:56:07:c9:2f:93:73:86:6f:59:a6:a2:2c:47:1b:5f:
         46:3c:7f:46:5b:cb:e0:4e:98:8d:e9:a9:9f:8d:24:7f:cf:44:
         b2:f3:7d:a7:4b:f5:38:d5:68:04:87:7a:cf:5a:02:29:6c:aa:
         c6:9e:7e:11:aa:84:72:18:fa:72:75:7c:50:98:c3:51:24:a8:
         88:5a:d6:6e:97:ad:65:16:84:66:15:05:b9:00:93:8a:57:1d:
         85:64:8a:01:b6:cc:73:12:d5:50:5e:f7:f9:ee:de:71:24:63:
         06:e8:f0:48:a6:4f:c5:43:a4:00:4f:93:57:9a:3e:10:0b:e6:
         48:c6:e4:52:0c:c5:44:d3:74:3e:4b:d6:fe:83:72:78:93:15:
         9b:4d:9c:59:9c:5f:78:15:56:9b:c6:38:c1:0b:f0:a3:be:80:
         20:bf:54:80:84:93:a2:bb:bf:10:c2:dc:51:aa:94:d7:37:21:
         72:f4:07:71:36:15:bc:b8:eb:06:e8:c5:07:17:77:ae:5f:ad:
         01:74:d3:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:31 2023 by rpki-client on console-fra.rpki-client.org