Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS204843.roa
File:                     AS204843.roa (raw, json)
Hash identifier:          0ZNPZQUACX0yVPGDdqvETxCkUCZ7MSNzVM7CDiKT6j4=
Subject key identifier:   EB:20:3E:1C:8E:09:8A:F6:7C:06:F4:A7:FA:31:09:BD:C4:AA:E7:7E
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       265E593DED9BC2E1FDD4469981F2DA6D29A926C5
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS204843.roa
Signing time:             Sat 12 Nov 2022 14:21:45 +0000
ROA not before:           Sat 12 Nov 2022 14:16:45 +0000
ROA not after:            Sat 11 Nov 2023 14:21:45 +0000
asID:                     204843
IP address blocks:        206.206.119.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5e:59:3d:ed:9b:c2:e1:fd:d4:46:99:81:f2:da:6d:29:a9:26:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Nov 12 14:16:45 2022 GMT
            Not After : Nov 11 14:21:45 2023 GMT
        Subject: CN=EB203E1C8E098AF67C06F4A7FA3109BDC4AAE77E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a4:37:b7:53:12:11:f3:19:85:b1:4d:a4:7b:
                    e7:70:bf:91:c1:c1:a7:a8:fc:a2:c8:80:3b:94:dd:
                    0b:e3:f8:69:36:53:b6:b9:d3:26:64:d7:f4:b7:4c:
                    34:02:90:f4:62:48:b1:19:1d:04:7f:e7:6e:76:9d:
                    2b:c0:5d:3e:97:4c:1e:97:71:ea:55:ce:15:c5:a0:
                    fb:88:63:de:ab:60:cc:0b:f4:b1:16:8f:8f:26:e3:
                    38:93:55:7d:f9:5d:03:20:f2:f2:57:f2:e6:44:40:
                    d8:f5:60:39:5e:fd:25:b1:ff:32:ed:fa:d2:e4:37:
                    40:7e:06:c6:66:4f:15:af:58:f7:a1:aa:16:fa:2a:
                    2b:fe:df:5b:3a:f7:70:9b:fc:80:58:ff:b3:5a:17:
                    59:91:40:b3:59:76:5e:43:be:d7:a7:ab:fa:99:ba:
                    25:47:08:7b:0f:9d:c1:6d:33:f3:fe:b2:fd:70:7c:
                    41:d6:2c:42:4e:4c:af:70:f4:8f:0c:31:02:3f:19:
                    da:2f:0a:fb:1b:0c:06:bc:59:6c:74:98:94:8c:09:
                    0b:2d:32:54:06:a4:b1:19:0a:ca:d1:44:81:49:d8:
                    20:83:5e:39:ae:89:58:d2:1c:42:7a:1a:2d:99:bd:
                    4b:65:a1:c9:21:f5:cf:0d:b4:d6:13:74:c4:08:b1:
                    21:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:20:3E:1C:8E:09:8A:F6:7C:06:F4:A7:FA:31:09:BD:C4:AA:E7:7E
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS204843.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d7:a7:40:e9:2a:7c:8c:1c:31:82:b2:47:34:03:8f:e7:64:
         f5:82:e7:c3:3c:72:9e:6c:6b:f7:ae:40:98:01:1c:8f:32:a2:
         48:fd:8b:f6:32:31:d0:72:d6:ac:08:d9:eb:10:66:3f:09:8d:
         bf:27:da:2e:26:f5:dc:85:59:0d:3e:c4:bc:4d:af:7e:ec:06:
         9a:df:99:e8:e4:fc:16:47:45:ea:2d:fa:35:a2:d6:b3:db:9b:
         6a:a2:16:f9:a8:cc:6f:ec:22:eb:39:9d:3c:84:a8:5c:f6:f8:
         5d:12:93:06:19:52:fd:d3:d1:d6:11:96:b3:c5:fd:9a:dc:cd:
         67:45:cb:ff:94:d3:3e:48:8c:32:ee:2a:36:51:4b:ae:7a:4a:
         de:37:99:77:94:a4:18:2c:81:6c:c6:ed:c7:c2:33:48:d2:61:
         79:cd:6a:60:97:23:8a:50:d2:45:67:e7:9e:ba:c8:19:93:1a:
         1e:5d:f9:9a:b9:4e:21:c1:78:7c:01:dd:33:36:81:50:4f:77:
         5c:c4:71:bd:e9:d7:66:12:70:e1:9e:de:51:8b:c5:b8:2d:b1:
         10:02:63:7c:ac:ac:50:19:c1:1c:85:67:c8:1d:04:d2:72:67:
         e7:bc:a5:ac:1c:d8:c5:a7:c4:d9:4d:af:7e:ce:54:40:93:d9:
         89:3c:4a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----