Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS136923.roa
File:                     AS136923.roa (raw, json)
Hash identifier:          FAfeoALx+5QFtu5cfQ6q0T/3zdaguPyz04HZx8uGQfY=
Subject key identifier:   2A:48:A7:57:E0:6A:D3:F6:0A:0E:6B:84:87:8B:77:72:EA:61:8B:FA
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       3F4AD826F5179C812733073EF46B3B43417AAE53
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS136923.roa
Signing time:             Thu 10 Nov 2022 14:17:19 +0000
ROA not before:           Thu 10 Nov 2022 14:12:19 +0000
ROA not after:            Thu 09 Nov 2023 14:17:19 +0000
asID:                     136923
IP address blocks:        206.206.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4a:d8:26:f5:17:9c:81:27:33:07:3e:f4:6b:3b:43:41:7a:ae:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Nov 10 14:12:19 2022 GMT
            Not After : Nov  9 14:17:19 2023 GMT
        Subject: CN=2A48A757E06AD3F60A0E6B84878B7772EA618BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:40:2c:3e:d3:2f:a3:9c:ae:af:ba:96:53:ff:
                    26:4e:d7:82:e7:d1:e6:e2:8e:73:a3:34:f1:6a:a4:
                    ef:59:bf:de:37:fd:2b:8f:0d:23:20:0a:e7:61:78:
                    fb:b0:05:b9:3d:58:8b:1e:f4:c7:1f:19:78:9c:1d:
                    a9:f5:83:3a:bd:c5:09:5e:58:77:01:f5:9c:3b:d9:
                    ca:91:7e:8a:86:5c:33:81:3d:f8:84:59:22:56:5f:
                    27:82:9a:4b:5a:87:79:04:09:b7:62:41:2c:af:fd:
                    dd:c9:c6:45:a4:f5:cd:dd:19:73:3a:c8:22:53:79:
                    66:f7:1d:f9:57:c8:95:14:ad:c0:6c:8d:63:da:b9:
                    20:a4:47:0f:22:41:e7:3a:9c:23:fa:b3:20:ef:16:
                    82:dc:2c:5b:e1:d5:6b:d5:bf:75:b2:94:9b:db:1d:
                    77:dd:1c:6c:e7:55:b6:ee:0a:5d:5a:2c:65:ac:35:
                    16:b8:86:d0:22:12:23:d0:79:cf:73:ce:b9:f4:2b:
                    88:35:57:9f:eb:52:85:9f:f4:b6:29:d5:f5:fe:e6:
                    98:07:31:5f:71:0b:f4:9f:78:b9:ee:3d:64:82:4e:
                    c7:3f:4f:19:3c:9e:18:d2:73:9b:28:20:0f:fc:0c:
                    d6:1e:cb:49:6d:09:c4:b6:d8:43:67:88:f7:06:2d:
                    ce:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:48:A7:57:E0:6A:D3:F6:0A:0E:6B:84:87:8B:77:72:EA:61:8B:FA
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS136923.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:94:46:87:27:44:f2:59:18:0c:87:d6:a7:d2:c4:67:db:2b:
         53:42:94:56:94:20:84:89:7c:ed:33:52:ed:4e:7c:3a:47:20:
         4f:77:f1:a8:7d:49:09:c6:ae:71:60:f2:a9:34:a4:4c:06:78:
         1f:93:31:1b:87:51:7f:a3:f2:d7:76:09:64:ef:2c:87:3f:7c:
         84:ee:5f:da:32:a3:9a:c5:1a:8b:f4:6a:ed:02:1a:36:52:36:
         4c:27:92:31:e2:97:e8:59:c6:89:33:7a:f5:1f:0f:53:a3:99:
         ae:84:4e:52:71:80:da:16:bf:46:d2:60:f1:88:1d:36:91:a5:
         02:78:e7:b9:66:14:fe:db:2b:fa:49:e0:22:37:dd:d5:e5:1c:
         89:40:e0:cb:b4:64:33:a5:d8:94:f4:0f:96:6e:4f:27:45:74:
         ae:21:5e:67:1d:60:86:6c:7d:32:cb:47:24:c9:b5:2d:25:1c:
         cc:28:42:b6:76:54:4f:fb:65:00:e2:9f:06:45:2a:c5:a6:27:
         46:51:47:68:df:eb:8d:4b:49:7f:92:3e:09:ac:12:0f:a1:4a:
         c7:86:cf:29:5f:b2:85:eb:da:23:f2:5b:09:8c:c7:0a:3f:01:
         bf:1a:91:f5:54:01:26:af:60:47:7b:b4:a5:03:92:ae:33:9f:
         db:ec:80:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----