Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS32244.roa
File:                     AS32244.roa (raw, json)
Hash identifier:          1j40ksySrPLYa5zEW7Xi27zmaOWEpXr+M67oKuzZPpw=
Subject key identifier:   3C:3B:CB:F4:E7:FD:AF:2A:EB:F6:21:F9:63:49:6C:55:2A:79:10:0A
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       27ABB4568BB30713FE87EA7DD68B3547725031DC
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS32244.roa
Signing time:             Mon 28 Nov 2022 09:41:21 +0000
ROA not before:           Mon 28 Nov 2022 09:36:21 +0000
ROA not after:            Mon 27 Nov 2023 09:41:21 +0000
asID:                     32244
IP address blocks:        206.206.100.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ab:b4:56:8b:b3:07:13:fe:87:ea:7d:d6:8b:35:47:72:50:31:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:21 2022 GMT
            Not After : Nov 27 09:41:21 2023 GMT
        Subject: CN=3C3BCBF4E7FDAF2AEBF621F963496C552A79100A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9e:db:ac:ca:c7:a7:58:b1:a9:f2:16:97:1e:
                    ca:16:67:e0:a4:a9:a8:3b:9d:52:d6:6f:e0:40:8a:
                    2b:b5:84:09:a9:4e:3f:b5:1d:ac:a3:61:95:a5:e5:
                    b8:32:70:1b:45:37:23:80:1b:44:72:33:18:a2:6e:
                    b6:34:d2:00:82:c4:89:79:60:a2:2b:dc:b6:9b:10:
                    32:91:10:75:1a:29:82:94:f7:b0:29:5a:11:69:da:
                    70:a0:0e:a5:ba:8b:9c:ef:36:fb:45:d4:fb:27:58:
                    76:a6:c4:9e:10:48:4a:47:d1:61:2c:99:61:ad:d4:
                    c5:02:dd:fc:5b:22:20:33:8d:6b:71:a7:3f:f2:9a:
                    26:c3:a3:06:a7:40:5b:6c:15:81:e0:6d:21:c9:6b:
                    72:6a:c6:f9:6b:c3:6b:bc:bb:ac:b5:18:c7:e3:a5:
                    23:b6:5b:6a:f8:81:48:b9:e7:ba:6b:5d:36:87:85:
                    6a:72:13:cb:34:18:76:48:06:64:54:42:aa:7b:6b:
                    f7:48:a6:bb:2e:d6:41:52:5e:04:f1:c5:8d:fe:29:
                    2f:16:2c:0e:a4:56:50:7a:fb:86:16:dc:ba:c9:5e:
                    8e:db:23:7c:df:6e:1a:b7:cf:9f:0e:88:f4:f0:52:
                    12:a1:cc:bc:70:51:03:02:03:4f:e8:3a:f9:74:84:
                    14:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:3B:CB:F4:E7:FD:AF:2A:EB:F6:21:F9:63:49:6C:55:2A:79:10:0A
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS32244.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0e:5f:d8:8d:d8:f6:c0:91:1f:c0:ce:34:82:96:55:ae:db:7d:
         ca:bd:0b:6d:0b:12:85:5f:c0:a5:db:10:26:61:a7:52:f8:9b:
         3c:7d:27:1a:ff:e9:a2:52:b5:3e:0d:75:33:7e:bf:e4:ea:68:
         bd:68:b4:b1:13:e9:3c:4d:bc:3c:e7:d3:56:9d:25:36:68:e4:
         19:11:95:4d:4d:8a:cd:8c:8f:a2:c7:1a:b0:9b:01:96:5d:c1:
         5f:a7:c3:8e:1a:47:30:18:c8:19:92:0c:86:fe:8c:54:61:10:
         60:7a:e9:97:af:24:a1:a3:bb:4e:0a:7c:75:b0:0e:8b:bd:42:
         0f:09:71:0c:a4:7a:b7:57:54:72:b3:6e:97:0c:2d:16:8e:5d:
         ac:fa:2c:6d:52:5f:c4:5b:5b:9c:d2:2c:e0:f1:b9:d7:8f:78:
         49:25:e1:a1:3a:00:c0:05:fc:5b:3b:82:65:d7:5e:c4:ab:68:
         b5:11:b6:a3:83:1a:0e:ab:17:28:c9:4c:4b:24:79:f3:dd:b1:
         e4:fa:aa:20:a9:19:ca:5e:4a:47:f9:46:de:d5:e2:8f:61:7d:
         1f:94:71:93:b0:97:af:e4:c5:7d:0f:c9:7e:fb:1c:b5:2a:aa:
         5d:c8:3e:49:1e:39:ba:58:07:4c:88:cf:a3:0e:34:7f:45:fd:
         c0:a4:af:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----