Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS32613.roa
File:                     AS32613.roa (raw, json)
Hash identifier:          QzRHugstfMtcJGc6GEOO0An0trEp87O7xPJm9eaTgsI=
Subject key identifier:   DF:55:54:F5:47:5E:6B:34:0F:70:E9:CC:AC:EA:DF:BC:70:C9:A9:BB
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       246FD610DE84DB5689730B312CAEA85D7B6D057A
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS32613.roa
Signing time:             Mon 28 Nov 2022 09:41:21 +0000
ROA not before:           Mon 28 Nov 2022 09:36:21 +0000
ROA not after:            Mon 27 Nov 2023 09:41:21 +0000
asID:                     32613
IP address blocks:        216.122.180.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:6f:d6:10:de:84:db:56:89:73:0b:31:2c:ae:a8:5d:7b:6d:05:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:21 2022 GMT
            Not After : Nov 27 09:41:21 2023 GMT
        Subject: CN=DF5554F5475E6B340F70E9CCACEADFBC70C9A9BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c4:f1:d8:29:ec:00:3e:b5:da:dd:b4:48:ec:
                    ab:d8:a6:0e:eb:f0:07:7a:1d:29:f1:d6:59:dd:d6:
                    de:18:53:af:6d:79:76:42:c9:09:d7:c9:2b:96:0f:
                    04:31:b8:e8:5c:d6:14:b2:ef:f0:88:f9:18:89:33:
                    5a:02:f9:89:39:15:3f:d7:fa:fa:48:79:1f:2a:10:
                    2a:26:6a:d0:68:90:df:ef:48:d0:8f:7b:5d:d6:76:
                    87:9c:7a:16:8e:10:67:37:1a:42:87:72:eb:22:b0:
                    b9:dc:8a:0c:8d:93:f0:f7:7f:e2:b1:3c:4d:e2:10:
                    87:08:5a:2b:84:13:92:97:8c:89:25:67:ff:0f:94:
                    c3:ca:c0:1d:4d:c5:a4:74:9b:fa:70:6b:ce:4f:89:
                    31:61:25:90:a8:d0:89:1e:f0:f7:bc:13:7b:fc:53:
                    5a:75:14:79:b8:ee:d5:1e:b2:67:0b:a0:79:a8:31:
                    fd:63:55:f1:8b:15:a3:fe:8b:6d:55:ce:55:0b:58:
                    e7:e9:f1:89:2e:f8:fb:cd:dd:00:bb:b8:fc:57:7f:
                    25:cb:09:eb:4a:0f:77:ac:a5:0a:0c:58:6c:46:3e:
                    e2:1b:3c:d1:fc:d5:e3:07:f5:c2:64:5b:f5:ac:6f:
                    dd:61:26:aa:17:96:ae:8b:c9:0e:73:ce:16:cb:f9:
                    2e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:55:54:F5:47:5E:6B:34:0F:70:E9:CC:AC:EA:DF:BC:70:C9:A9:BB
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS32613.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.180.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:16:75:b0:6e:6b:aa:a2:fe:24:07:90:32:c3:90:31:f4:4b:
         aa:ce:c3:1f:45:12:bf:ab:c3:fc:2a:a8:29:76:f1:5a:ba:13:
         24:a9:69:37:e7:64:7e:f5:7e:af:48:44:9a:4d:52:3f:c9:33:
         af:e1:56:c1:d5:5f:67:2b:31:d1:6f:1c:ec:91:3c:bc:a9:88:
         78:4e:ff:d8:4b:1c:91:6f:19:45:02:34:4a:27:5c:c1:0f:23:
         a1:d3:ad:e3:08:89:d0:38:d8:1d:d5:e2:8e:58:6e:06:30:16:
         b6:b2:66:cd:e7:b3:df:84:7d:a7:b0:d5:c8:dc:93:ef:39:14:
         75:aa:b9:50:d4:55:4d:b9:a3:c4:a1:cc:c6:65:11:ec:5d:d6:
         81:e7:23:e7:72:16:b7:55:de:f5:5f:30:cf:ce:07:8e:b9:59:
         d6:70:50:cf:47:fa:15:0b:3e:3f:5e:5f:84:d0:7b:a2:95:b1:
         bf:99:91:78:a4:2d:59:fc:94:8a:1a:9c:1a:2d:19:b9:42:e2:
         44:26:81:8c:e2:85:c2:ab:ca:bd:0c:74:3d:41:96:c0:1b:e1:
         78:56:e9:61:ef:8d:7c:b4:dc:22:aa:9d:fd:be:ad:68:61:b5:
         2f:86:c5:38:37:e2:d2:f6:9e:09:e9:58:27:82:d7:13:5f:7c:
         b1:9a:78:9d
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUJG/WEN6E21aJcwsxLK6oXXttBXowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzU5NjU0M2E0YzkwYzM5OGFkN2VmNjk5
YmRlOGM3OWVkZDJlMGI4YWMwHhcNMjIxMTI4MDkzNjIxWhcNMjMxMTI3MDk0MTIx
WjAzMTEwLwYDVQQDEyhERjU1NTRGNTQ3NUU2QjM0MEY3MEU5Q0NBQ0VBREZCQzcw
QzlBOUJCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cTx2CnsAD61
2t20SOyr2KYO6/AHeh0p8dZZ3dbeGFOvbXl2QskJ18krlg8EMbjoXNYUsu/wiPkY
iTNaAvmJORU/1/r6SHkfKhAqJmrQaJDf70jQj3td1naHnHoWjhBnNxpCh3LrIrC5
3IoMjZPw93/isTxN4hCHCForhBOSl4yJJWf/D5TDysAdTcWkdJv6cGvOT4kxYSWQ
qNCJHvD3vBN7/FNadRR5uO7VHrJnC6B5qDH9Y1XxixWj/ottVc5VC1jn6fGJLvj7
zd0Au7j8V38lywnrSg93rKUKDFhsRj7iGzzR/NXjB/XCZFv1rG/dYSaqF5aui8kO
c84Wy/kuCwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFN9VVPVHXms0D3DpzKzq37xw
yam7MB8GA1UdIwQYMBaAFEzEOYug/lCqoIv6I/5wGtDCBgR/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzEv
NENDNDM5OEJBMEZFNTBBQUEwOEJGQTIzRkU3MDFBRDBDMjA2MDQ3Ri5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNTk2NTQzYTRjOTBjMzk4YWQ3ZWY2OTliZGU4Yzc5ZWRkMmUwYjhhYy5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MGYxYTgwYTAxODFlYzVmMjg0
MDYyNWEvMS9BUzMyNjEzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Hq0MA0GCSqGSIb3DQEBCwUAA4IB
AQBsFnWwbmuqov4kB5Ayw5Ax9EuqzsMfRRK/q8P8KqgpdvFauhMkqWk352R+9X6v
SESaTVI/yTOv4VbB1V9nKzHRbxzskTy8qYh4Tv/YSxyRbxlFAjRKJ1zBDyOh063j
CInQONgd1eKOWG4GMBa2smbN57PfhH2nsNXI3JPvORR1qrlQ1FVNuaPEoczGZRHs
XdaB5yPncha3Vd71XzDPzgeOuVnWcFDPR/oVCz4/Xl+E0HuilbG/mZF4pC1Z/JSK
GpwaLRm5QuJEJoGM4oXCq8q9DHQ9QZbAG+F4Vulh7418tNwiqp39vq1oYbUvhsU4
N+LS9p4J6VgngtcTX3yxmnid
-----END CERTIFICATE-----