Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS11572.roa
File:                     AS11572.roa (raw, json)
Hash identifier:          WMeEcR3JXhOzZP4+PQ0E/C4CmKdL10uGxs2zWNp7R2s=
Subject key identifier:   35:4F:13:49:F4:C2:3C:AB:1E:FC:BF:7F:A5:6A:52:15:4E:F2:5A:A6
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       654BDFD194FCD06946325344CF956F86512D6EB9
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS11572.roa
Signing time:             Mon 28 Nov 2022 09:41:21 +0000
ROA not before:           Mon 28 Nov 2022 09:36:21 +0000
ROA not after:            Mon 27 Nov 2023 09:41:21 +0000
asID:                     11572
IP address blocks:        206.206.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:4b:df:d1:94:fc:d0:69:46:32:53:44:cf:95:6f:86:51:2d:6e:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:21 2022 GMT
            Not After : Nov 27 09:41:21 2023 GMT
        Subject: CN=354F1349F4C23CAB1EFCBF7FA56A52154EF25AA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:42:17:a6:dc:0d:99:0c:b1:da:ef:fd:9c:ec:
                    8e:63:cf:81:e9:f9:e6:ad:11:da:f3:9e:89:80:94:
                    82:bf:d5:99:b9:89:a7:b0:28:a3:9f:d6:40:ba:cc:
                    8b:fa:ea:07:4a:20:63:53:6c:12:81:ed:56:d0:14:
                    7b:72:30:0a:9d:24:4f:a7:8f:fa:94:63:f7:3b:00:
                    06:6a:0c:08:85:93:c9:74:0f:cf:b0:9a:53:32:56:
                    49:e3:da:e6:79:df:6f:6d:0c:83:83:68:01:30:81:
                    3b:93:61:8f:60:6b:c8:9b:9c:be:57:16:46:44:2e:
                    e2:9b:84:82:c7:f7:a3:56:67:01:ad:b0:96:7a:c6:
                    b8:de:5a:fe:d2:e3:94:c8:a6:68:98:2d:f7:90:2f:
                    13:13:5e:ed:3d:a8:14:cf:fb:65:e4:f0:11:51:98:
                    7a:ae:32:a2:f9:68:72:2d:fc:5e:47:9d:ff:a4:fa:
                    d5:06:1d:25:e6:b3:39:4f:0b:8d:32:56:47:60:f1:
                    10:b6:78:ed:c4:60:c6:06:fa:25:6a:e0:72:eb:2b:
                    59:7f:2d:8b:6b:9c:1f:c2:90:ab:88:61:72:88:f5:
                    ab:b3:61:52:00:e8:f1:27:fe:7b:0a:3b:ba:27:67:
                    ac:17:f7:c1:40:27:dc:47:03:78:6f:74:b4:53:4e:
                    26:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4F:13:49:F4:C2:3C:AB:1E:FC:BF:7F:A5:6A:52:15:4E:F2:5A:A6
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS11572.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:34:82:da:d4:80:a7:82:dc:b2:07:da:b9:39:90:c1:5b:1a:
         35:ef:bb:33:03:76:3d:44:30:b6:de:0b:31:25:fe:5a:b0:b3:
         1d:da:29:70:b9:7e:c1:79:c0:59:78:7c:84:8b:3e:04:db:ad:
         5e:d5:c3:79:58:ab:3d:d9:5a:c1:e4:20:a0:b6:74:d0:ca:a0:
         aa:b9:36:c4:c1:a5:b2:01:d5:39:0e:63:01:22:6f:e3:32:34:
         28:b1:87:55:d7:be:74:ce:20:f7:08:52:8f:77:e1:22:34:1e:
         89:cd:ee:a6:92:dc:78:07:8e:68:b9:5a:4a:d9:ad:ad:06:90:
         b5:12:fa:b1:54:c8:dd:20:3d:73:89:17:eb:6a:ae:6c:61:5c:
         68:4f:68:b0:02:f6:80:13:f1:cb:a0:03:33:49:b6:6f:02:36:
         62:2d:4f:9d:44:c1:68:97:27:76:53:af:06:4d:20:dc:cb:25:
         0e:59:12:8c:bf:36:ce:76:3b:33:d9:8a:76:a1:20:39:dd:d1:
         32:69:86:69:d5:74:1a:c3:76:64:00:58:52:ed:70:76:b9:59:
         c7:24:f6:f2:d5:2f:92:90:48:1f:3d:7a:6c:95:f5:ca:70:d2:
         5e:9c:d0:3d:ad:06:32:b4:8d:1b:b7:98:56:ea:8c:81:e5:a7:
         7e:49:74:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----