Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS136923.roa
File:                     AS136923.roa (raw, json)
Hash identifier:          cpJVijjVa0S+3Waec28toC5ETaXA8s2IJi3p8FL3QM4=
Subject key identifier:   AB:9D:04:15:82:E2:F4:8C:90:DC:53:CA:EC:EA:41:29:95:21:99:56
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       1C49F74BE329559F2EB842E55F212AC4E6C1B1D6
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS136923.roa
Signing time:             Mon 28 Nov 2022 09:41:21 +0000
ROA not before:           Mon 28 Nov 2022 09:36:21 +0000
ROA not after:            Mon 27 Nov 2023 09:41:21 +0000
asID:                     136923
IP address blocks:        206.206.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:49:f7:4b:e3:29:55:9f:2e:b8:42:e5:5f:21:2a:c4:e6:c1:b1:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:21 2022 GMT
            Not After : Nov 27 09:41:21 2023 GMT
        Subject: CN=AB9D041582E2F48C90DC53CAECEA412995219956
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4b:f0:6e:10:56:23:4c:85:49:96:b1:18:fe:
                    fa:0e:f4:4c:d1:07:ef:f6:ac:3b:49:eb:c5:ec:f4:
                    7f:15:bb:3d:18:38:6b:19:b0:1e:d9:09:9a:de:f4:
                    d6:74:33:be:93:a8:4e:65:63:7c:11:ac:71:9a:3c:
                    c2:e7:e2:81:38:85:ab:9b:f3:77:79:53:b9:0f:02:
                    75:5e:2a:2a:b0:51:b7:99:a4:01:71:44:c8:fb:1b:
                    c6:c4:80:e8:af:9f:a6:89:37:4a:14:0f:70:a7:51:
                    c9:5a:5c:e4:a4:48:c4:b4:74:cf:8b:63:9c:1e:8e:
                    1c:72:e7:39:50:45:d3:86:e7:6f:67:15:11:34:b3:
                    c5:49:11:10:bc:d1:a1:37:2e:89:11:eb:17:19:06:
                    63:37:96:5b:46:40:8f:d1:d5:86:b3:a9:80:90:4f:
                    25:75:91:02:23:fb:af:f9:7d:df:6a:1a:e2:81:14:
                    3a:37:0a:b2:fe:6c:80:3e:a4:40:9a:71:23:02:19:
                    93:c9:c8:8f:f3:8c:2c:82:b2:48:b1:b2:d1:7b:08:
                    6b:f2:2d:80:ad:64:2e:74:b9:9e:65:13:4d:ea:2d:
                    3e:c2:61:8a:ea:5b:46:89:57:c2:76:7a:b3:f6:cf:
                    79:e8:5b:93:8d:ec:56:5e:bc:e1:ac:34:8c:ff:7c:
                    4c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9D:04:15:82:E2:F4:8C:90:DC:53:CA:EC:EA:41:29:95:21:99:56
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS136923.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:31:69:af:9e:fe:c6:31:ac:9c:a9:0d:63:16:25:76:da:43:
         57:0b:6a:5c:bb:0b:90:75:2f:43:81:19:b5:3c:0a:ce:10:c6:
         85:17:b1:77:c5:2e:eb:f9:99:9c:e6:3b:6d:c8:c0:61:38:b9:
         48:26:5e:d6:6c:b5:0e:dc:84:21:9b:f2:96:21:cf:59:ae:5b:
         2d:4d:1e:4a:07:13:4d:0c:80:a2:91:57:23:70:76:49:99:48:
         51:70:f1:46:eb:1f:54:1d:91:76:81:db:8a:29:0f:e0:2a:cb:
         9b:6b:57:ba:39:51:5e:74:b6:8c:da:8a:83:83:b4:c9:1d:da:
         04:76:8d:7d:fc:e1:0c:5a:98:84:20:bd:45:6f:9b:54:16:ad:
         85:63:8c:e0:2f:32:a7:9d:94:26:4d:64:8b:da:11:75:1b:08:
         07:4c:d1:a2:e5:ac:b8:d5:e7:a7:76:34:0e:e2:23:b3:62:2c:
         a5:8d:00:47:16:49:8a:ae:77:5a:1d:41:b6:be:be:0e:07:5c:
         cd:ca:37:c5:b1:56:b0:ff:25:44:13:15:23:92:5f:8d:49:3d:
         0c:d8:f3:21:1d:96:15:5c:63:71:3a:ff:aa:19:32:2a:75:0c:
         ca:50:2c:d9:82:d3:d0:8b:68:70:c6:72:38:34:66:97:7f:27:
         47:03:25:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----