Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS61138.roa
File:                     AS61138.roa (raw, json)
Hash identifier:          30+ksItxBc03DWZTBhZq7WpLJlUNkuC7GhRf0bEeI7A=
Subject key identifier:   36:69:AE:12:1F:9A:27:EA:F3:37:96:56:51:DA:48:1C:96:7A:4D:6D
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       28E9B4262C0DECF30C563D2E86762D56008DEB45
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS61138.roa
Signing time:             Wed 26 Oct 2022 18:10:44 +0000
ROA not before:           Wed 26 Oct 2022 18:05:44 +0000
ROA not after:            Wed 25 Oct 2023 18:10:44 +0000
asID:                     61138
IP address blocks:        206.206.79.0/24 maxlen: 24
                          206.206.99.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:e9:b4:26:2c:0d:ec:f3:0c:56:3d:2e:86:76:2d:56:00:8d:eb:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Oct 26 18:05:44 2022 GMT
            Not After : Oct 25 18:10:44 2023 GMT
        Subject: CN=3669AE121F9A27EAF337965651DA481C967A4D6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2c:eb:49:80:15:d6:f2:f5:9c:17:2f:08:31:
                    cf:75:70:16:de:e1:5c:c0:ca:a9:6b:c5:7f:de:2a:
                    82:75:75:48:a4:1f:09:d4:97:cb:8e:8e:1f:e7:3f:
                    21:06:c0:b3:8f:20:3e:5e:0d:1b:96:de:78:3d:28:
                    88:60:ed:06:5a:b5:7d:3d:d7:cc:68:72:74:9e:c3:
                    af:7d:0b:5a:6c:33:12:37:37:fb:56:39:46:1e:6e:
                    bf:39:b4:2f:26:86:b6:d7:e8:c1:7f:60:30:76:8e:
                    b6:01:e3:af:28:a9:bb:3f:0b:66:5c:b1:80:d0:be:
                    99:4a:85:5d:39:cc:3b:4d:a8:54:bb:da:0c:cf:30:
                    fa:fd:87:4b:2f:9d:0a:6a:d8:11:f8:8d:55:11:41:
                    b8:f8:15:4a:52:d1:2c:65:81:56:ba:ee:df:8a:2e:
                    5f:9e:8c:3a:cb:74:51:65:cb:dd:23:5a:c3:7a:76:
                    72:ec:21:ab:c2:06:6c:83:2f:c0:ce:e7:e6:e5:49:
                    e9:8b:21:1c:51:2b:f7:16:90:fb:1a:b4:d1:d7:78:
                    d0:69:0b:90:d5:92:5e:3e:df:66:d3:a8:64:5b:b4:
                    15:c2:7c:58:3b:3c:ef:32:65:4f:57:d2:e7:e1:96:
                    b2:3b:4e:a1:3a:17:7d:15:e8:59:60:67:4e:a1:a9:
                    9c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:69:AE:12:1F:9A:27:EA:F3:37:96:56:51:DA:48:1C:96:7A:4D:6D
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS61138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.79.0/24
                  206.206.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e5:d9:6d:29:9f:3c:a6:da:9c:95:54:70:ce:bf:f6:2a:fc:98:
         f9:40:d1:b6:c4:82:f8:64:7c:29:ba:2c:f6:53:49:f9:33:ed:
         41:67:ea:03:52:de:ae:6f:14:da:d3:e7:22:0e:18:27:6a:50:
         64:22:ce:b9:54:ba:8a:34:76:60:ea:25:c1:b3:6e:0f:ca:b2:
         97:8f:f9:91:d9:a2:f7:a4:10:1a:cf:c6:4e:cc:62:4e:67:d7:
         e2:f3:f4:fc:ca:6c:62:b8:6f:fb:7a:3f:e8:17:4a:35:02:34:
         d4:27:ce:be:4d:96:6e:9e:09:13:23:74:09:eb:b9:33:c5:a5:
         4c:25:99:2a:a1:b3:60:97:46:aa:b4:62:12:39:e2:44:79:77:
         5b:ba:2e:95:52:1d:07:8b:34:27:8d:b3:6d:0a:f5:a2:16:8f:
         31:60:4f:7c:a0:bb:64:eb:61:7b:c5:78:94:5e:97:cb:f9:1d:
         03:08:0c:95:4c:8f:ee:97:78:09:0b:31:1b:6c:f4:58:84:30:
         52:46:2b:93:6b:1a:9b:b1:e9:be:d8:91:9f:5c:78:4c:e7:19:
         5e:74:3d:f9:55:d4:3c:1c:35:b6:be:ab:d0:92:4e:d8:f8:2a:
         1b:ac:76:8d:1e:c6:87:3a:a4:be:93:87:e8:fa:be:2d:7e:1f:
         cb:94:03:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----