Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS55154.roa
File:                     AS55154.roa (raw, json)
Hash identifier:          IYKbFrxEJQMlAbJCCIVYn833U91Pj5DSozZoyYQL4h8=
Subject key identifier:   A8:24:8A:13:B4:95:18:3F:E7:21:10:86:00:0E:46:2E:17:64:DA:BC
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       75FACDDAF7484060EC3F89AC7EC1729CD1B6AB88
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS55154.roa
Signing time:             Mon 28 Nov 2022 09:41:21 +0000
ROA not before:           Mon 28 Nov 2022 09:36:21 +0000
ROA not after:            Mon 27 Nov 2023 09:41:21 +0000
asID:                     55154
IP address blocks:        206.206.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:fa:cd:da:f7:48:40:60:ec:3f:89:ac:7e:c1:72:9c:d1:b6:ab:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:21 2022 GMT
            Not After : Nov 27 09:41:21 2023 GMT
        Subject: CN=A8248A13B495183FE7211086000E462E1764DABC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:47:d9:e1:d4:9d:e7:ee:ae:50:91:0f:7e:38:
                    ca:5b:9d:47:99:8d:54:5e:fc:5e:6d:7d:02:d9:ca:
                    0a:4e:f5:cd:a8:b4:f6:85:04:e1:e3:2d:e7:36:1c:
                    2f:3d:ec:72:0a:87:cd:4c:c8:ec:db:f1:5e:38:ad:
                    b3:d7:93:5b:c8:1f:66:40:13:fa:01:19:41:a3:3a:
                    f7:81:04:ab:6c:2f:0a:6e:0e:fa:c4:c2:a1:04:8a:
                    bf:c4:03:db:d8:b5:77:82:7c:32:fc:db:e3:2a:3a:
                    e7:05:bf:7e:76:6a:ac:d1:a0:aa:b9:ff:c9:bf:3e:
                    f6:95:4e:f7:98:ef:33:e4:a4:3b:cf:13:3d:b8:2f:
                    c6:03:9d:59:bd:48:5d:f5:31:cc:b8:cf:e9:0d:60:
                    48:0b:8e:32:b1:2e:e8:99:fd:11:fe:a3:c1:8e:ca:
                    d6:8d:f7:78:fa:a8:29:bd:04:f4:20:ad:4e:66:e5:
                    95:0a:bd:03:16:c4:72:d5:c7:0a:fc:2e:aa:6a:91:
                    e8:e3:a6:20:64:81:2e:5a:d4:09:f7:89:e6:f3:5a:
                    d8:c0:b4:3c:09:17:b5:65:38:7f:68:55:27:f3:53:
                    5b:f1:90:71:a6:aa:13:31:b9:e7:3a:fd:3d:5f:d3:
                    19:64:cf:4e:4a:5e:cb:2d:98:79:00:9d:dc:de:fc:
                    e2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:24:8A:13:B4:95:18:3F:E7:21:10:86:00:0E:46:2E:17:64:DA:BC
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS55154.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:d5:6b:77:3d:ea:b5:d3:0e:9c:aa:f8:e5:f9:f1:b1:fc:4f:
         12:a4:66:a1:f0:ac:30:c1:fd:3c:33:8a:f3:58:ac:0f:2f:b2:
         f3:eb:fb:86:cc:46:6b:76:b5:e5:b1:6b:6c:51:a3:03:0c:fe:
         f6:4c:f1:d1:98:fa:e3:ad:a0:f0:91:d2:1f:19:c8:63:d2:4d:
         5c:82:90:e9:ca:c5:85:a8:82:cc:eb:e7:6f:4d:94:3e:c6:d8:
         45:b6:87:47:e1:f9:9f:9f:d2:b2:15:3e:a8:e6:d2:7a:e9:c2:
         4d:4d:9a:38:53:1c:47:ec:a1:10:70:23:31:0f:f0:40:aa:69:
         43:e3:4d:22:c9:30:f2:13:f5:5f:57:f4:5f:67:c7:b1:e3:95:
         4d:9e:15:4f:84:52:1f:89:59:95:35:bd:43:d5:28:c6:6b:3e:
         3c:c2:27:a1:9c:cf:c3:51:e2:8a:66:51:8f:dd:15:2a:1c:4f:
         06:4e:72:16:39:a9:b2:53:51:56:47:01:87:3f:36:fb:dc:dc:
         57:e1:b2:7e:28:43:d9:c2:a3:9c:fc:b5:36:68:7d:09:a7:24:
         04:d8:e1:1e:01:e5:76:6e:2b:6e:33:08:d4:7e:f6:47:52:d3:
         86:8f:9b:73:f8:6a:8e:f2:a0:ef:66:fd:3d:44:15:a8:63:d7:
         18:f6:b1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----