Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS56655.roa
File:                     AS56655.roa (raw, json)
Hash identifier:          69mXNlcC0EMTPHQnhvFK/eHZIeCTguY5juIGth6Wb6s=
Subject key identifier:   C0:30:42:85:5C:CF:7D:43:A2:52:3B:AF:71:64:E7:34:96:8A:71:0E
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       22A82F34775E61792E23BFE8F3D5156B0C0B9DE3
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS56655.roa
Signing time:             Mon 28 Nov 2022 09:41:22 +0000
ROA not before:           Mon 28 Nov 2022 09:36:22 +0000
ROA not after:            Mon 27 Nov 2023 09:41:22 +0000
asID:                     56655
IP address blocks:        216.122.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:a8:2f:34:77:5e:61:79:2e:23:bf:e8:f3:d5:15:6b:0c:0b:9d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:22 2022 GMT
            Not After : Nov 27 09:41:22 2023 GMT
        Subject: CN=C03042855CCF7D43A2523BAF7164E734968A710E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d1:ee:e8:99:f8:8f:35:26:29:c7:3c:a3:b6:
                    42:b2:d2:9e:e5:5d:48:82:50:b0:77:1f:6f:c2:32:
                    96:d2:42:eb:97:96:55:ac:38:e3:cf:ef:b3:e6:29:
                    c9:38:8d:11:c1:f8:b4:ac:05:ee:f4:59:bd:e0:5f:
                    1a:7c:6a:91:ea:f6:5d:4f:41:c7:2e:e9:bf:43:ac:
                    7b:8f:3f:0a:8b:e3:3e:f5:7d:83:94:df:90:63:39:
                    3b:8c:74:81:d4:1e:50:ff:9c:5f:6f:61:30:90:f4:
                    f2:e2:34:bd:65:5c:7a:80:df:b0:98:34:f0:ae:4f:
                    44:22:18:6d:e0:2c:6b:40:4c:84:41:46:bc:61:6b:
                    ef:e4:2b:6e:f8:87:08:58:06:54:db:df:da:8d:7e:
                    97:18:53:24:28:36:1e:2a:30:96:63:fb:49:59:d0:
                    54:2b:e9:91:39:e8:76:76:0d:bb:ff:b3:05:bc:b9:
                    56:47:37:fd:ff:8c:ac:62:0e:1c:8c:1c:6e:81:4e:
                    a4:4c:08:37:20:be:7d:23:9d:58:73:2d:2a:1f:4d:
                    13:77:c0:9f:a3:b9:85:88:c5:a4:08:cb:cb:c3:db:
                    f0:6f:d6:e4:32:db:cd:3b:d1:1b:c2:36:95:7e:8e:
                    8c:24:8f:51:7c:39:56:d9:a9:a1:08:5b:22:bf:41:
                    2a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:30:42:85:5C:CF:7D:43:A2:52:3B:AF:71:64:E7:34:96:8A:71:0E
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS56655.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:29:3d:b0:a5:0b:69:16:2e:fc:f0:b6:78:11:1b:a2:e4:81:
         94:e7:de:0d:05:34:83:fa:87:69:c6:fd:22:74:ef:0f:32:10:
         87:bb:9a:01:96:18:e2:3c:0c:6d:af:6f:63:3c:73:80:68:47:
         66:61:c8:37:9d:37:7e:00:0c:ef:8b:d5:d0:d7:45:02:d9:c5:
         2c:ea:de:eb:48:7d:ed:13:24:0a:01:3e:96:94:2b:9e:18:42:
         a4:2b:eb:e3:db:dd:82:22:2f:e2:48:71:37:9a:e5:1a:60:43:
         9e:50:08:da:d7:6f:17:7f:4d:ed:d2:1a:1b:72:13:59:79:e8:
         e6:14:0d:26:44:e5:5d:10:c6:f1:e3:7e:d0:ef:06:bf:94:73:
         c8:7f:97:7a:5a:cb:09:54:ec:39:56:13:c5:f8:42:aa:00:8d:
         6b:e8:f2:b0:38:5c:24:24:18:42:1e:62:c8:bd:94:5c:65:79:
         76:b7:79:02:05:d1:8c:3d:6a:f0:58:92:e8:43:5b:be:1a:99:
         09:41:ef:75:b8:a2:46:1c:9e:02:62:7f:0c:d3:4f:b3:09:b6:
         c2:2d:a5:89:34:c8:75:dc:94:9c:ea:c5:7e:57:ee:e8:f0:ce:
         1a:a9:1a:2b:e3:3f:b3:48:80:c1:cc:62:e8:a5:0a:2f:70:2f:
         26:5b:36:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----