Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS400377.roa
File:                     AS400377.roa (raw, json)
Hash identifier:          +0rGRBMZFJq0ysSF3oyOPo02rX3y0Id7jp6tjV2J0E8=
Subject key identifier:   09:8B:A1:AF:5F:7B:A6:92:EC:20:EF:37:FA:CE:54:27:0C:D3:91:B8
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       518A88FF6C8DCB893DA034D5378654399105808B
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS400377.roa
Signing time:             Mon 12 Sep 2022 13:32:12 +0000
ROA not before:           Mon 12 Sep 2022 13:27:12 +0000
ROA not after:            Mon 11 Sep 2023 13:32:12 +0000
asID:                     400377
IP address blocks:        206.206.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8a:88:ff:6c:8d:cb:89:3d:a0:34:d5:37:86:54:39:91:05:80:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Sep 12 13:27:12 2022 GMT
            Not After : Sep 11 13:32:12 2023 GMT
        Subject: CN=098BA1AF5F7BA692EC20EF37FACE54270CD391B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:89:24:36:f2:75:20:bb:a8:89:3e:b4:c5:9a:
                    fb:bb:c4:50:5c:11:5e:d2:f2:77:55:30:10:47:7b:
                    71:07:af:2d:96:a0:17:85:e9:f5:9c:1e:fc:ed:86:
                    81:c2:cd:c3:a8:a3:63:8b:33:b1:9f:b4:07:97:b4:
                    a5:17:e9:43:0f:82:7a:6f:4a:2e:66:06:01:2f:60:
                    56:82:34:23:36:12:df:8f:15:63:b7:bf:4f:82:0f:
                    64:53:a1:69:48:86:52:8e:53:7d:13:cf:99:49:ff:
                    56:03:fb:c8:61:66:b0:3e:d6:26:ee:24:e6:ca:92:
                    a8:21:32:83:f0:8d:d4:33:af:9a:56:18:cc:42:0b:
                    aa:02:fb:f7:7c:ee:b9:45:1a:ee:fe:e8:08:2a:ec:
                    96:87:6d:68:68:5b:6f:13:f3:f8:5d:7a:9c:f6:ef:
                    05:3a:ee:d2:10:0c:84:91:ed:16:2b:cb:f8:1b:2c:
                    23:35:1e:a2:65:99:8e:ab:3e:b9:f9:eb:62:31:d9:
                    f4:9b:35:4f:a5:04:e2:0b:17:c2:8b:53:cd:6e:18:
                    ec:48:ad:ec:dd:91:cd:30:6d:3d:e0:6c:7e:16:f0:
                    9a:d2:be:d3:42:07:0e:fb:c7:7b:64:37:71:8a:10:
                    e5:b5:c4:77:44:33:15:03:b3:7f:34:ec:63:0e:5f:
                    b2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:8B:A1:AF:5F:7B:A6:92:EC:20:EF:37:FA:CE:54:27:0C:D3:91:B8
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS400377.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:6d:d0:b0:14:40:eb:c5:ef:c5:24:d2:44:cf:5c:15:58:95:
         7e:60:ba:15:5d:37:d4:05:d8:d0:6e:f3:98:c1:47:87:7c:41:
         8a:08:ae:a3:bd:f6:79:ac:63:51:53:77:3c:d3:88:d5:b5:7c:
         e6:a4:6e:ab:ca:e3:41:2c:db:ae:f8:2f:93:4a:cb:20:52:8c:
         fc:3b:a1:c9:4b:6f:a9:f9:5b:8d:ae:26:53:f5:af:1d:40:ae:
         55:63:6d:3d:80:5e:60:bc:e1:49:69:3a:09:8e:97:ab:69:28:
         ee:12:08:1f:18:ef:bb:8d:6f:a9:e3:4e:b5:07:e9:b2:61:41:
         e4:1d:6d:d0:c8:aa:d8:b0:11:45:fd:3f:26:db:af:84:ca:57:
         01:cd:6e:f2:69:e0:ee:6c:a8:5d:1a:f9:3d:de:01:c2:22:63:
         4e:75:01:66:3d:55:60:5e:42:d7:a4:93:63:23:4d:ed:69:bc:
         9a:08:32:e3:a2:00:a4:7e:87:a5:5f:5f:2d:b4:81:cb:cf:b5:
         96:90:6e:9e:b5:4e:e8:9d:ed:ed:0a:66:48:4b:37:bc:cb:bd:
         de:fe:97:52:b9:42:f4:ec:0f:44:f8:d8:60:ef:e3:7a:c4:f2:
         89:40:a1:bf:cf:06:41:a9:01:41:ea:2b:3f:b5:36:2e:5f:cd:
         de:27:37:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----