Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS400377.roa
File:                     AS400377.roa (raw, json)
Hash identifier:          iJoQ5JZruywadUC2Uhs0rxCMenAhoRhILqcnv8YwVRA=
Subject key identifier:   E7:FB:5A:9F:08:33:D6:B8:AF:E4:66:79:60:44:B0:3C:F9:01:CC:1A
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       0E6C9C63A4E38689F7E6CC80A124599ED0E28E36
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS400377.roa
Signing time:             Mon 28 Nov 2022 09:41:21 +0000
ROA not before:           Mon 28 Nov 2022 09:36:21 +0000
ROA not after:            Mon 27 Nov 2023 09:41:21 +0000
asID:                     400377
IP address blocks:        206.206.78.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6c:9c:63:a4:e3:86:89:f7:e6:cc:80:a1:24:59:9e:d0:e2:8e:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:21 2022 GMT
            Not After : Nov 27 09:41:21 2023 GMT
        Subject: CN=E7FB5A9F0833D6B8AFE466796044B03CF901CC1A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:25:e9:97:f7:77:d4:4b:1a:82:f2:88:a7:7b:
                    ee:31:86:a7:a7:db:43:78:21:34:3a:fb:bd:2c:24:
                    b4:bd:e7:9b:42:bf:ab:1a:82:a8:06:e0:4a:f2:86:
                    4d:09:25:7b:a7:44:1f:72:63:cf:d5:29:97:e9:29:
                    48:07:f5:3e:d9:be:fa:92:03:36:f1:b4:09:8d:c8:
                    51:79:c5:f1:8d:ce:c9:a1:85:19:f0:4f:15:fa:43:
                    41:f0:aa:b9:be:f4:12:fd:a7:46:01:71:17:19:0b:
                    ee:61:06:06:6c:80:f8:da:df:c4:f5:d4:82:1e:75:
                    86:ab:11:3d:ba:80:24:72:61:fd:7f:38:c7:a8:46:
                    dd:36:20:b3:37:ad:27:ae:e4:58:a1:c7:62:5d:e8:
                    65:da:1a:03:23:82:fb:cf:eb:02:6c:73:94:14:6a:
                    e0:a2:42:48:97:2d:0a:70:04:3c:f2:17:98:92:f4:
                    f3:0c:fa:19:df:b5:e9:1d:63:5f:d5:8f:45:49:7e:
                    2a:56:df:fb:75:49:79:1e:f7:a3:7e:7a:3c:83:0c:
                    27:00:e5:5f:9b:76:84:38:53:42:6f:81:1b:9d:ed:
                    59:ac:c4:5e:3e:a7:ac:23:dc:4a:45:bb:e1:d7:d3:
                    44:4a:96:1c:d9:f3:36:c7:a3:a5:23:79:fa:0b:fe:
                    f9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FB:5A:9F:08:33:D6:B8:AF:E4:66:79:60:44:B0:3C:F9:01:CC:1A
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS400377.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:64:f3:40:9f:45:20:43:b7:6b:79:3d:79:3f:c4:d9:18:97:
         3d:57:d7:0b:b0:c9:8a:63:da:54:a4:89:36:21:ed:db:f0:00:
         b2:d7:51:0f:f8:94:8c:d5:26:2d:f7:85:b3:3b:e1:4e:3c:38:
         57:83:cf:8d:9f:3d:41:3a:6e:dc:ba:04:60:97:c6:5f:46:cd:
         3a:b9:ea:b9:1a:c4:90:1a:df:57:c1:e1:c5:7c:ef:08:f6:bf:
         71:42:06:49:20:af:3a:f9:1a:67:c4:66:d9:12:90:f5:89:ad:
         e6:a4:eb:7d:75:07:9e:99:9d:55:23:3c:c2:2e:0d:52:cf:73:
         08:01:2b:d0:e6:04:10:e9:82:bc:00:6b:a7:7d:9a:41:db:72:
         98:06:45:1f:d2:ac:67:04:d4:97:a2:32:ac:6d:9d:5c:25:26:
         df:41:82:26:4f:f3:f8:5f:44:7d:41:26:23:72:8b:73:23:3d:
         7e:65:9d:c1:02:10:a5:eb:40:70:2e:3e:1f:5d:5d:cb:d5:19:
         11:ef:01:1f:1d:fd:d5:15:a3:1f:52:7c:b8:33:ec:93:9d:27:
         cd:74:59:33:f7:cd:bd:01:44:1d:68:ae:0a:27:64:2f:3f:d1:
         f4:05:63:35:6e:4a:75:76:d9:11:5e:cd:97:43:af:93:c1:4f:
         03:98:d8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----