Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS20473.roa
File:                     AS20473.roa (raw, json)
Hash identifier:          qnupgU1NwTcnTK94rSJRXpgdXFZyrXV3gzughEbeNew=
Subject key identifier:   93:E5:55:8B:B5:66:10:AA:49:FD:2B:4C:5A:37:A0:42:9D:08:61:BB
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       3D94C56D127A517CAB5088E4E44226AC1824F17F
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS20473.roa
Signing time:             Mon 28 Nov 2022 09:41:21 +0000
ROA not before:           Mon 28 Nov 2022 09:36:21 +0000
ROA not after:            Mon 27 Nov 2023 09:41:21 +0000
asID:                     20473
IP address blocks:        216.122.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:94:c5:6d:12:7a:51:7c:ab:50:88:e4:e4:42:26:ac:18:24:f1:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:21 2022 GMT
            Not After : Nov 27 09:41:21 2023 GMT
        Subject: CN=93E5558BB56610AA49FD2B4C5A37A0429D0861BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:02:fa:92:9c:26:35:b9:ed:e3:24:e9:03:64:
                    30:68:7f:5d:17:72:38:be:df:20:53:72:25:da:32:
                    04:1f:f5:06:39:bc:43:d8:80:8e:9b:dc:36:f3:8b:
                    8a:fb:25:90:81:95:b2:f6:20:7f:e7:ac:e7:e4:d9:
                    39:a5:0b:9f:7f:86:c7:78:40:a7:74:18:38:f6:ff:
                    a2:0c:e9:cd:ed:66:36:dc:6e:6c:f4:51:61:e2:ff:
                    2e:af:dd:48:69:26:de:90:b1:93:05:be:25:c8:47:
                    28:a3:5e:2f:a0:de:03:fb:e9:94:d7:f9:5f:0b:3a:
                    cd:03:79:0c:9a:01:9e:dd:14:d7:6b:fe:8b:33:48:
                    5f:85:1a:f4:2f:99:96:b3:2e:02:9b:db:b2:93:d6:
                    23:0e:ed:23:0e:97:22:c0:24:93:0c:8f:c6:69:25:
                    9e:dd:80:6b:54:09:77:4a:d2:49:fb:7e:2d:a4:48:
                    e1:a2:4d:ab:b7:ce:59:86:f8:1f:25:b0:35:52:6f:
                    e3:ae:9e:5e:a6:9d:1e:10:d9:45:bc:b1:b1:5d:fb:
                    48:e2:09:a5:82:e4:9b:f1:fd:6f:41:0d:c3:2e:ed:
                    4e:d1:fd:7b:99:68:3e:b4:4d:60:77:3a:38:1c:bd:
                    61:e8:c0:6f:ee:f1:c9:ad:50:c6:15:df:15:d9:cf:
                    2b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E5:55:8B:B5:66:10:AA:49:FD:2B:4C:5A:37:A0:42:9D:08:61:BB
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS20473.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:84:1b:f1:fa:7b:11:95:7c:83:f3:62:3b:ee:9a:93:20:bf:
         cf:bd:2f:59:36:1e:7a:14:a5:af:98:e5:be:17:a5:0f:c2:31:
         fe:55:5e:7a:e3:6a:36:e1:1d:a2:43:ba:40:c4:01:af:f5:bc:
         bb:ef:1d:2a:c4:20:8e:9d:e9:6e:b9:92:2e:81:4d:cb:a4:e9:
         f4:77:8d:92:69:fb:ac:53:a7:89:3f:46:b9:e0:fc:8c:12:b8:
         60:77:d5:e3:a7:b1:f8:9a:53:2f:03:ec:df:6d:a5:b0:fb:f7:
         b1:c4:3e:3a:9d:b5:0f:e5:e5:b6:5c:9f:7a:55:3e:d2:8d:d0:
         d7:d6:a7:ab:87:9b:6f:23:7f:e1:7b:65:7b:ee:46:be:64:f7:
         75:0b:07:08:42:a1:bb:fe:3a:46:42:71:0a:b4:a8:31:63:f7:
         95:21:58:7f:00:59:24:d2:20:07:14:0f:e4:5f:45:a5:a7:ce:
         46:b6:d4:8a:26:04:1c:63:df:69:7c:64:40:17:0a:34:7a:76:
         be:0a:2a:94:b1:66:82:28:4b:e3:e8:d3:f8:e5:aa:14:38:70:
         f8:67:7b:d7:f7:cc:68:24:cc:dd:0b:b5:aa:54:55:26:74:8b:
         8f:38:9d:50:2e:cf:4f:81:b1:3c:03:ee:0f:a7:39:b2:29:c3:
         d5:68:ef:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----