Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS206092.roa
File:                     AS206092.roa (raw, json)
Hash identifier:          ZXrpSuio1Dpz9/2tPzf+tv7BfhZxxapzr+6euwTKdR8=
Subject key identifier:   A2:F0:CD:80:30:A4:43:47:10:05:6E:77:17:13:C1:15:5F:64:49:6D
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       40D11F15FA46129BCA39FD2DBF8A6808E4A16AC9
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS206092.roa
Signing time:             Mon 28 Nov 2022 09:41:21 +0000
ROA not before:           Mon 28 Nov 2022 09:36:21 +0000
ROA not after:            Mon 27 Nov 2023 09:41:21 +0000
asID:                     206092
IP address blocks:        206.206.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d1:1f:15:fa:46:12:9b:ca:39:fd:2d:bf:8a:68:08:e4:a1:6a:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:21 2022 GMT
            Not After : Nov 27 09:41:21 2023 GMT
        Subject: CN=A2F0CD8030A4434710056E771713C1155F64496D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bf:95:c6:8e:12:18:1a:30:92:17:77:33:26:
                    b2:6a:85:24:97:98:f2:1d:c8:46:68:d6:cd:c6:69:
                    46:91:b6:2c:52:7c:e9:af:e2:8c:bb:2f:02:f4:e2:
                    2f:2d:72:05:60:3b:02:91:7c:dd:31:8a:90:ee:04:
                    f6:63:9a:07:8f:3f:31:3c:35:bf:df:52:27:26:57:
                    f4:ae:5b:c7:b4:57:45:1e:4a:a7:4f:db:24:5f:4f:
                    75:3d:05:f5:3f:75:39:9f:12:df:09:09:3c:da:48:
                    04:e3:93:9a:83:ce:bd:f5:85:92:37:d3:b7:e6:10:
                    b0:c0:d6:3e:0c:86:19:85:b2:6b:61:ea:1d:ce:15:
                    89:59:5d:05:98:ab:f2:96:1a:0c:e4:22:bb:5f:e3:
                    9d:e7:b8:1e:95:c2:4f:4f:11:22:91:83:9c:61:8d:
                    f4:63:2f:86:00:dc:95:7d:62:f4:df:06:ac:47:13:
                    eb:78:e5:a3:86:c7:cb:0d:08:c0:75:d4:52:a2:1f:
                    c6:90:47:d6:15:9f:b3:3a:99:83:ed:b0:ae:81:58:
                    ce:56:98:0c:5a:e4:06:f1:fd:db:de:b1:e6:d1:50:
                    29:18:37:28:4d:8a:ed:f4:81:12:a9:33:3d:c8:26:
                    fb:95:06:7d:a4:7a:e5:29:10:a1:23:08:53:22:24:
                    3a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F0:CD:80:30:A4:43:47:10:05:6E:77:17:13:C1:15:5F:64:49:6D
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS206092.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:07:b1:18:df:d0:8d:a3:f2:46:05:44:93:74:7d:1f:dc:3e:
         a6:a8:3d:e5:35:8c:97:14:5d:7f:87:2c:c2:88:cb:31:10:2c:
         3d:31:73:dc:a8:c1:66:01:f2:d1:5b:8c:ab:da:e8:16:d9:53:
         7a:4e:af:2e:9a:eb:8b:46:13:a7:e9:15:d4:66:b6:08:a9:5f:
         74:e7:15:1e:69:99:7f:b7:77:99:17:58:7c:6e:27:53:45:a0:
         d9:c2:74:fe:3c:fc:f8:54:b9:a1:e6:c4:5a:b5:d4:19:e4:fc:
         4d:39:7e:e3:bc:8a:08:20:ce:2a:6c:26:9b:42:87:cf:42:c2:
         61:c5:24:3e:00:e9:9f:a3:55:97:0b:44:7e:2c:08:a5:b7:3c:
         c3:1f:6a:bc:7f:c3:91:94:24:b1:35:ce:f7:0d:54:9d:a5:dd:
         f9:8f:60:83:2a:62:32:20:bf:45:60:da:2f:e0:34:53:f7:6e:
         2e:14:94:a8:7d:41:8a:a4:27:9a:96:15:fb:64:30:50:40:fe:
         68:2c:f6:f9:a7:b3:bd:6f:02:8b:44:ee:f6:b4:12:b6:43:1f:
         25:6e:02:5b:c6:c5:08:d5:bd:01:8f:bc:aa:95:3a:59:eb:7e:
         ca:06:67:a9:37:c6:92:cf:3d:63:73:7b:21:26:d2:08:e0:e4:
         c3:3e:8b:9f
-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIUQNEfFfpGEpvKOf0tv4poCOShaskwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzU5NjU0M2E0YzkwYzM5OGFkN2VmNjk5
YmRlOGM3OWVkZDJlMGI4YWMwHhcNMjIxMTI4MDkzNjIxWhcNMjMxMTI3MDk0MTIx
WjAzMTEwLwYDVQQDEyhBMkYwQ0Q4MDMwQTQ0MzQ3MTAwNTZFNzcxNzEzQzExNTVG
NjQ0OTZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzL+Vxo4SGBow
khd3MyayaoUkl5jyHchGaNbNxmlGkbYsUnzpr+KMuy8C9OIvLXIFYDsCkXzdMYqQ
7gT2Y5oHjz8xPDW/31InJlf0rlvHtFdFHkqnT9skX091PQX1P3U5nxLfCQk82kgE
45Oag8699YWSN9O35hCwwNY+DIYZhbJrYeodzhWJWV0FmKvylhoM5CK7X+Od57ge
lcJPTxEikYOcYY30Yy+GANyVfWL03wasRxPreOWjhsfLDQjAddRSoh/GkEfWFZ+z
OpmD7bCugVjOVpgMWuQG8f3b3rHm0VApGDcoTYrt9IESqTM9yCb7lQZ9pHrlKRCh
IwhTIiQ6MwIDAQABo4ICfzCCAnswHQYDVR0OBBYEFKLwzYAwpENHEAVudxcTwRVf
ZEltMB8GA1UdIwQYMBaAFEzEOYug/lCqoIv6I/5wGtDCBgR/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzEv
NENDNDM5OEJBMEZFNTBBQUEwOEJGQTIzRkU3MDFBRDBDMjA2MDQ3Ri5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNTk2NTQzYTRjOTBjMzk4YWQ3ZWY2OTliZGU4Yzc5ZWRkMmUwYjhhYy5j
ZXIwcAYIKwYBBQUHAQsEZDBiMGAGCCsGAQUFBzALhlRyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MGYxYTgwYTAxODFlYzVmMjg0
MDYyNWEvMS9BUzIwNjA5Mi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAM7OSjANBgkqhkiG9w0BAQsFAAOC
AQEAaQexGN/QjaPyRgVEk3R9H9w+pqg95TWMlxRdf4cswojLMRAsPTFz3KjBZgHy
0VuMq9roFtlTek6vLprri0YTp+kV1Ga2CKlfdOcVHmmZf7d3mRdYfG4nU0Wg2cJ0
/jz8+FS5oebEWrXUGeT8TTl+47yKCCDOKmwmm0KHz0LCYcUkPgDpn6NVlwtEfiwI
pbc8wx9qvH/DkZQksTXO9w1UnaXd+Y9ggypiMiC/RWDaL+A0U/duLhSUqH1BiqQn
mpYV+2QwUED+aCz2+aezvW8Ci0Tu9rQStkMfJW4CW8bFCNW9AY+8qpU6Wet+ygZn
qTfGks89Y3N7ISbSCODkwz6Lnw==
-----END CERTIFICATE-----