Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS14445.roa
File:                     AS14445.roa (raw, json)
Hash identifier:          HJbJbGMG5HwIsC88OrIAuRkLJFUJsMatwe5UAyKxMJ4=
Subject key identifier:   A2:82:41:9E:20:BC:70:2B:A6:C6:3C:D6:72:EB:66:17:6E:12:2B:7D
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       1477774B60D3F67544DFAE83FF57FA44A30CEF07
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS14445.roa
Signing time:             Thu 27 Oct 2022 17:51:57 +0000
ROA not before:           Thu 27 Oct 2022 17:46:57 +0000
ROA not after:            Thu 26 Oct 2023 17:51:57 +0000
asID:                     14445
IP address blocks:        206.206.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:77:77:4b:60:d3:f6:75:44:df:ae:83:ff:57:fa:44:a3:0c:ef:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Oct 27 17:46:57 2022 GMT
            Not After : Oct 26 17:51:57 2023 GMT
        Subject: CN=A282419E20BC702BA6C63CD672EB66176E122B7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:3c:b6:11:af:c5:19:b7:74:47:7d:36:8f:
                    b6:a6:f4:d5:a0:f4:70:0b:79:73:ae:4f:6f:97:fd:
                    c3:34:ae:03:1f:c8:d2:a9:29:b9:ac:a9:4c:40:f6:
                    2e:29:9f:57:8e:19:ae:ed:3e:87:69:8d:89:f3:46:
                    df:21:24:8a:58:71:3d:e7:dc:38:82:70:9f:14:7c:
                    73:e0:21:fb:74:b9:b5:df:c7:29:72:17:52:5f:45:
                    a1:f3:d9:c4:c7:91:5a:b0:a9:59:48:61:e5:7e:6c:
                    0c:d1:7a:db:25:7f:94:0c:d6:9e:a2:da:51:83:9e:
                    42:b6:3e:b6:e8:49:fa:51:da:64:ba:99:bd:fe:0a:
                    69:a8:6b:97:c9:31:7e:11:68:e2:5f:73:86:c5:2d:
                    9b:f1:4f:39:a1:a9:91:47:eb:1e:69:b2:84:db:d9:
                    5a:6a:2b:32:2f:01:d9:48:df:fc:f4:52:8b:42:06:
                    9c:6c:e9:8b:1e:fd:52:04:81:3b:03:12:24:93:ab:
                    a8:cb:a6:9c:e8:3f:01:d5:f2:9d:45:1b:87:84:7e:
                    0f:22:68:12:a2:ca:fb:5b:f0:55:1b:99:1a:55:b8:
                    bc:80:ec:b7:1e:db:f4:8a:f3:83:d2:f4:8d:3a:76:
                    80:b4:e4:de:cc:02:9b:9d:ed:20:ab:a9:0f:6c:d4:
                    3d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:82:41:9E:20:BC:70:2B:A6:C6:3C:D6:72:EB:66:17:6E:12:2B:7D
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS14445.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:05:ef:70:fe:09:16:e6:72:7d:e1:d3:38:ff:57:5d:92:dc:
         a1:ec:11:2e:56:2b:8b:29:1c:8e:d0:2c:be:34:14:f6:e2:b8:
         43:0f:04:4d:fb:cf:07:df:48:fe:c5:e8:0f:14:56:ce:17:bd:
         bc:00:7b:da:22:3d:33:2c:7a:b6:8b:ef:97:c7:91:fa:b8:dd:
         6c:eb:ef:0d:80:7c:2e:44:e3:44:f2:6c:20:53:a9:04:55:16:
         c0:a3:29:a5:0d:2c:aa:e4:41:17:b2:69:fa:02:63:62:24:a9:
         ed:cc:07:3e:e9:03:3e:0d:80:01:57:ce:9a:32:2d:66:10:28:
         d9:45:0b:7f:f5:79:75:4b:6b:be:95:83:da:57:6a:39:0b:f7:
         02:ef:36:90:b6:0a:c1:d7:d8:6e:dc:ac:37:c3:5b:d5:64:c3:
         b5:14:24:e6:15:4b:53:b2:1b:45:46:23:51:ed:50:63:2a:91:
         3f:0b:40:02:03:3b:ca:18:db:10:e5:9e:07:08:f8:13:98:84:
         e9:14:11:c4:7d:b6:53:5d:ae:2f:80:32:ee:5f:db:2c:0b:c3:
         d7:74:36:72:6a:9b:66:c9:b0:77:24:09:b9:d3:2b:3a:f7:21:
         9d:97:9e:ee:bb:23:e3:cc:5f:6c:d5:8a:5c:cd:53:f3:20:3a:
         50:49:5b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----