Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS14445.roa
File:                     AS14445.roa (raw, json)
Hash identifier:          Q7DcVlb6KVGIOWZPpF2WkCLGtycm2OWq26da2BVqB4k=
Subject key identifier:   DF:D0:F4:33:97:D4:89:BA:09:9B:11:25:0B:29:22:DD:BC:F3:68:64
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       1B46CCA210728BFAB03050D7180CFC29BABA85CC
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS14445.roa
Signing time:             Mon 28 Nov 2022 09:41:22 +0000
ROA not before:           Mon 28 Nov 2022 09:36:22 +0000
ROA not after:            Mon 27 Nov 2023 09:41:22 +0000
asID:                     14445
IP address blocks:        206.206.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:46:cc:a2:10:72:8b:fa:b0:30:50:d7:18:0c:fc:29:ba:ba:85:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:22 2022 GMT
            Not After : Nov 27 09:41:22 2023 GMT
        Subject: CN=DFD0F43397D489BA099B11250B2922DDBCF36864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:e1:6b:6f:0a:fe:62:7c:76:d7:23:f0:d5:
                    71:0b:da:cc:d3:0a:bd:11:a6:53:2c:c3:f4:10:d0:
                    06:bd:76:9c:a5:50:e3:20:bc:fb:76:d0:79:10:74:
                    22:e6:a0:3b:45:57:b8:57:54:df:05:bc:05:bc:31:
                    73:0a:40:6d:b2:79:c6:3e:35:04:7c:86:b9:f9:e4:
                    22:aa:70:ce:7a:1f:f7:1e:78:11:0f:3f:94:8c:0b:
                    0e:de:32:e8:73:f7:84:2b:9f:19:f5:f5:ca:0f:b0:
                    09:85:d6:9e:a3:e4:7c:23:d2:36:3b:5c:e9:76:60:
                    a3:90:9a:ef:7f:68:84:7c:dd:a8:a7:ba:07:06:b6:
                    bd:a9:c7:3b:70:cf:84:56:0b:e9:9f:46:7e:50:6e:
                    b4:ef:93:11:a3:b5:a7:98:b6:36:07:6b:d0:d9:c5:
                    f2:dc:55:3a:dd:32:e7:bd:13:80:3d:33:ed:14:24:
                    14:dc:ad:96:af:4b:4e:74:ae:5f:64:26:cf:5f:00:
                    4d:b3:fa:3b:bb:32:d3:60:27:0f:85:e5:a8:6e:2d:
                    1b:4e:c7:e1:4c:c3:27:60:a6:e4:6c:6b:8a:67:fa:
                    d3:cc:09:7c:f6:43:df:10:05:3c:57:16:f5:1a:d0:
                    46:30:6a:2d:47:04:9b:d5:44:ce:0e:08:91:dd:92:
                    87:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D0:F4:33:97:D4:89:BA:09:9B:11:25:0B:29:22:DD:BC:F3:68:64
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS14445.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:4e:96:0c:4c:0d:08:a4:e5:4c:fe:21:cc:21:cb:39:8f:2e:
         2c:95:db:a7:52:1a:90:04:f4:6c:c5:d1:e8:1d:fa:b0:7b:4f:
         9b:b8:66:86:21:48:46:f8:43:d2:9b:64:88:00:a3:e2:b2:5c:
         25:67:24:88:7d:10:18:03:c2:60:81:29:7e:74:11:c1:7b:d0:
         fd:34:d2:7f:79:bf:c8:fd:dd:2e:3d:aa:41:b8:a8:26:47:1b:
         10:e6:13:27:85:d9:7f:37:4f:5c:84:43:06:ec:7f:01:1c:61:
         1d:b6:4c:53:06:57:34:8b:c7:9c:e2:84:4c:ff:05:1b:ec:63:
         05:b3:d6:f0:12:7b:3c:7d:a4:5a:74:02:d3:d9:34:20:c8:8c:
         3e:6e:d8:f4:4c:85:cd:e4:40:a7:bc:a7:e7:42:a9:94:d6:e0:
         78:e8:16:ca:5a:55:b4:ac:66:9f:87:37:88:22:b3:7e:e7:69:
         1b:38:fc:f9:3f:4c:a2:1f:3a:c7:cd:fa:16:a0:8f:9a:b9:6e:
         af:76:4d:2a:23:24:d3:cb:f6:d8:14:15:a8:ca:b1:cb:a8:5c:
         a9:9f:39:84:27:19:1b:44:e5:86:7d:08:34:ac:5e:7b:fc:3e:
         b5:f1:d8:35:52:c2:c5:13:29:b8:c2:72:90:55:89:f2:34:9e:
         b9:84:76:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----