Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS12271.roa
File:                     AS12271.roa (raw, json)
Hash identifier:          ISSxWVQSoJSUID9GtIhQCBY9x4WS4jCqSqIWH9BhDGk=
Subject key identifier:   10:C9:55:6C:92:0D:70:1C:1A:39:8E:27:98:9A:89:61:8C:69:CF:0C
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       255EF14A9B0712DF6E8F66FDE7D401F187D49C2D
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS12271.roa
Signing time:             Mon 28 Nov 2022 09:41:22 +0000
ROA not before:           Mon 28 Nov 2022 09:36:22 +0000
ROA not after:            Mon 27 Nov 2023 09:41:22 +0000
asID:                     12271
IP address blocks:        216.122.160.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:5e:f1:4a:9b:07:12:df:6e:8f:66:fd:e7:d4:01:f1:87:d4:9c:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:22 2022 GMT
            Not After : Nov 27 09:41:22 2023 GMT
        Subject: CN=10C9556C920D701C1A398E27989A89618C69CF0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:db:c9:e7:54:4d:0f:8b:2b:b0:25:41:a7:d7:
                    99:39:0a:21:95:48:a7:74:84:58:c8:d4:0c:7e:78:
                    64:a4:43:c4:e5:ce:85:ca:1a:06:bc:4c:79:83:6e:
                    cb:83:fc:37:76:9b:e2:2f:34:96:42:94:d8:3e:17:
                    66:f0:e5:ab:41:bf:1c:53:d8:7d:41:9f:10:3f:e0:
                    aa:76:a5:8c:b7:d1:c8:b0:a5:c3:af:7a:29:dc:02:
                    5d:fa:47:f3:e3:d1:19:3d:c9:f6:44:66:b9:eb:5c:
                    28:2b:6a:33:31:3d:96:97:02:62:99:72:c8:e7:84:
                    2d:97:8c:e8:1a:b3:f2:d8:ba:fa:03:6c:dd:20:d2:
                    c8:d5:a6:4d:2c:ba:05:d1:23:8c:89:b8:68:d7:5b:
                    ff:55:ea:e6:17:b7:9b:91:cb:47:79:7d:4a:4b:42:
                    36:6c:b0:ad:7f:63:23:73:00:ff:9d:66:08:b8:6e:
                    f0:b9:b6:ce:bc:40:d1:56:0b:db:e2:64:25:1d:9f:
                    52:c7:ea:d3:01:b2:56:11:1e:42:c5:aa:27:e0:c2:
                    26:e1:50:b8:4e:77:21:cd:65:83:7d:1d:92:2f:5e:
                    bf:9c:96:ce:b7:56:5b:b8:87:2b:ca:46:34:05:f7:
                    d2:4a:bf:45:fb:57:06:fa:94:cd:33:55:1c:31:ec:
                    74:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:C9:55:6C:92:0D:70:1C:1A:39:8E:27:98:9A:89:61:8C:69:CF:0C
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS12271.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:5b:b8:d6:4c:af:d4:b2:62:74:cf:94:b6:16:6f:ea:d5:8a:
         73:1f:3a:4b:aa:c9:8b:de:36:13:1f:da:6b:5d:9c:b8:62:f1:
         c0:03:47:5f:3e:a6:ed:95:36:2b:00:e6:25:a8:a3:f7:45:64:
         28:ad:c6:9b:a4:6f:8e:a3:0b:d0:4b:4b:69:29:b0:18:1b:98:
         be:7e:f2:2f:6e:2b:59:3b:2e:94:b3:a1:c4:14:48:c8:fa:3a:
         d8:1c:4b:d9:c4:a2:d7:15:a6:26:83:d0:f5:0b:27:f1:91:e9:
         bd:94:d1:9d:94:ba:13:30:83:b7:a4:6e:76:70:9f:71:83:58:
         b0:19:bd:49:fb:71:62:2d:c7:98:aa:3f:d1:ea:19:34:d1:2a:
         e8:2e:6b:1a:68:c6:6d:17:a4:be:05:58:46:fd:38:61:ab:66:
         6b:c7:ab:f5:ba:43:3d:d3:8e:34:31:13:ad:2b:b8:2c:6f:6b:
         37:23:fe:f5:aa:1a:a3:8c:f6:94:a3:d5:d1:bd:59:a8:00:6e:
         76:b2:f0:4d:7c:c2:d5:a0:5c:4b:41:ff:e2:fa:96:26:d5:da:
         00:f1:a1:be:40:eb:a8:2e:77:67:13:f1:6e:5a:6e:f2:13:12:
         c4:ff:44:cd:1d:76:80:f4:db:ce:c7:b5:90:dc:de:ac:ad:c4:
         a4:06:2e:c5
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUJV7xSpsHEt9uj2b959QB8YfUnC0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzU5NjU0M2E0YzkwYzM5OGFkN2VmNjk5
YmRlOGM3OWVkZDJlMGI4YWMwHhcNMjIxMTI4MDkzNjIyWhcNMjMxMTI3MDk0MTIy
WjAzMTEwLwYDVQQDEygxMEM5NTU2QzkyMEQ3MDFDMUEzOThFMjc5ODlBODk2MThD
NjlDRjBDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNvJ51RND4sr
sCVBp9eZOQohlUindIRYyNQMfnhkpEPE5c6FyhoGvEx5g27Lg/w3dpviLzSWQpTY
Phdm8OWrQb8cU9h9QZ8QP+CqdqWMt9HIsKXDr3op3AJd+kfz49EZPcn2RGa561wo
K2ozMT2WlwJimXLI54Qtl4zoGrPy2Lr6A2zdINLI1aZNLLoF0SOMibho11v/Verm
F7ebkctHeX1KS0I2bLCtf2MjcwD/nWYIuG7wubbOvEDRVgvb4mQlHZ9Sx+rTAbJW
ER5Cxaon4MIm4VC4TnchzWWDfR2SL16/nJbOt1ZbuIcrykY0BffSSr9F+1cG+pTN
M1UcMex07wIDAQABo4ICfjCCAnowHQYDVR0OBBYEFBDJVWySDXAcGjmOJ5iaiWGM
ac8MMB8GA1UdIwQYMBaAFEzEOYug/lCqoIv6I/5wGtDCBgR/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzEv
NENDNDM5OEJBMEZFNTBBQUEwOEJGQTIzRkU3MDFBRDBDMjA2MDQ3Ri5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNTk2NTQzYTRjOTBjMzk4YWQ3ZWY2OTliZGU4Yzc5ZWRkMmUwYjhhYy5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MGYxYTgwYTAxODFlYzVmMjg0
MDYyNWEvMS9BUzEyMjcxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HqgMA0GCSqGSIb3DQEBCwUAA4IB
AQA8W7jWTK/UsmJ0z5S2Fm/q1YpzHzpLqsmL3jYTH9prXZy4YvHAA0dfPqbtlTYr
AOYlqKP3RWQorcabpG+OowvQS0tpKbAYG5i+fvIvbitZOy6Us6HEFEjI+jrYHEvZ
xKLXFaYmg9D1Cyfxkem9lNGdlLoTMIO3pG52cJ9xg1iwGb1J+3FiLceYqj/R6hk0
0SroLmsaaMZtF6S+BVhG/Thhq2Zrx6v1ukM90440MROtK7gsb2s3I/71qhqjjPaU
o9XRvVmoAG52svBNfMLVoFxLQf/i+pYm1doA8aG+QOuoLndnE/FuWm7yExLE/0TN
HXaA9NvOx7WQ3N6srcSkBi7F
-----END CERTIFICATE-----