Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3230342e31302e3139322e302f32342d3234203d3e203330363434.roa
File:                     3230342e31302e3139322e302f32342d3234203d3e203330363434.roa (raw, json)
Hash identifier:          T6zOVY9+ycFBhWxTYpPLQ5+meU5X63d7zugXXI74zu0=
Subject key identifier:   09:9C:39:56:6B:35:D2:AF:93:32:2C:36:78:EB:E3:0E:67:29:D2:F7
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       7F131ECB46BFD881B266B0AD385CAAA913995708
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3230342e31302e3139322e302f32342d3234203d3e203330363434.roa
Signing time:             Tue 21 Feb 2023 17:17:15 +0000
ROA not before:           Tue 21 Feb 2023 17:12:15 +0000
ROA not after:            Tue 20 Feb 2024 17:17:15 +0000
asID:                     30644
IP address blocks:        204.10.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:13:1e:cb:46:bf:d8:81:b2:66:b0:ad:38:5c:aa:a9:13:99:57:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Feb 21 17:12:15 2023 GMT
            Not After : Feb 20 17:17:15 2024 GMT
        Subject: CN=099C39566B35D2AF93322C3678EBE30E6729D2F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:07:38:1a:b7:ea:37:fe:c6:e2:2b:2d:1f:
                    c0:01:3b:c0:b3:e8:9e:2d:da:28:47:f3:19:22:ab:
                    37:6b:2d:bc:ea:75:ae:48:4e:50:2e:40:1d:e3:1f:
                    59:8e:c9:3c:cd:08:a3:98:52:cc:fd:e2:da:55:cd:
                    44:82:b9:3e:48:ce:1d:ec:ea:e9:d1:fc:8b:ce:de:
                    3e:29:d6:ee:44:30:70:78:89:8a:26:fc:60:f4:bf:
                    02:5c:59:bf:70:98:07:8a:7a:af:38:f1:41:37:3f:
                    1d:e5:4a:46:56:c2:f1:81:e7:c8:24:1f:28:92:42:
                    91:b4:8c:3a:a9:0c:97:96:ca:e7:ec:55:b2:fa:fa:
                    1c:a5:b8:77:db:14:1d:8d:75:3b:15:88:4a:0f:af:
                    ab:43:e7:15:5a:0f:fc:5c:12:b2:a4:9c:f4:87:5a:
                    33:1f:77:7b:c1:cc:9e:20:03:4a:89:b4:bd:e5:89:
                    ef:68:01:ad:cd:ca:e0:c6:9a:ec:66:ac:3a:16:2e:
                    cb:5c:ae:6e:ee:32:20:38:23:0a:3a:77:a9:00:a6:
                    77:ab:45:cd:96:5f:c4:0c:6e:ff:17:6a:55:50:5d:
                    5b:45:3d:30:d7:e7:e3:32:c4:7b:b9:0e:fd:ce:aa:
                    a7:ba:87:d0:a1:1d:7d:02:e6:36:08:68:69:3f:19:
                    f5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:9C:39:56:6B:35:D2:AF:93:32:2C:36:78:EB:E3:0E:67:29:D2:F7
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3230342e31302e3139322e302f32342d3234203d3e203330363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:be:8a:53:c4:e9:be:b0:d9:44:08:f0:f3:fc:56:b3:6e:b5:
         36:24:97:45:dc:6b:aa:69:12:40:8c:65:dd:16:01:87:81:4f:
         7a:d3:2c:cb:74:18:61:cf:50:df:cc:30:cc:e7:c2:f1:aa:ea:
         48:d4:69:80:34:24:a2:2f:d0:6d:df:e9:8e:ec:c6:01:eb:38:
         02:49:97:ac:91:08:5c:b9:b5:3a:a5:2a:8d:08:25:68:27:6d:
         f3:ae:a2:3d:9f:ea:fc:77:a5:9b:ee:29:ac:93:d7:ad:d0:9e:
         01:ff:b8:da:cb:98:aa:35:68:bc:18:a5:fa:dd:3d:dc:8b:5e:
         c7:01:6a:91:08:11:1b:6f:2c:5a:cc:d0:b6:57:41:6b:cb:ec:
         e3:6c:05:72:e7:99:76:34:e2:26:82:ed:79:fa:ac:fa:18:8c:
         3d:3e:2d:80:c1:bd:0d:19:30:e9:c6:98:da:cb:b4:6b:45:f5:
         69:b6:b6:ea:00:4b:55:3b:9a:41:8a:07:2e:e7:f7:fd:b3:b0:
         a3:71:cc:3a:60:9a:7f:a2:75:95:c7:d2:53:88:19:13:5c:90:
         9b:24:bb:f6:24:a8:ba:41:e1:0e:4b:d7:aa:97:59:d0:27:a9:
         fe:d9:b0:ad:6b:71:87:7b:12:fd:02:6c:52:6a:1d:79:b6:7a:
         b0:ea:0e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----