Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3130382e302f32342d3234203d3e2037303239.roa
File:                     3230362e3230362e3130382e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          LRqeJr3jsv9+vxK2SfmbCPLnMwrIgo/3jRxTL2eNS1Y=
Subject key identifier:   F5:7D:4E:BD:D6:6E:DE:63:E7:42:0E:24:F4:D7:06:46:EC:A2:02:65
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       20D949F363434DF849FF017AE7213D962CC830DC
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3130382e302f32342d3234203d3e2037303239.roa
Signing time:             Fri 12 Aug 2022 17:06:57 +0000
ROA not before:           Fri 12 Aug 2022 17:01:57 +0000
ROA not after:            Fri 11 Aug 2023 17:06:57 +0000
asID:                     7029
IP address blocks:        206.206.108.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:d9:49:f3:63:43:4d:f8:49:ff:01:7a:e7:21:3d:96:2c:c8:30:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Aug 12 17:01:57 2022 GMT
            Not After : Aug 11 17:06:57 2023 GMT
        Subject: CN=F57D4EBDD66EDE63E7420E24F4D70646ECA20265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:9a:2d:51:aa:f3:0c:f6:48:99:9f:ba:a7:32:
                    f6:d7:04:a5:17:a5:bd:a8:ec:eb:87:36:b3:3b:97:
                    60:32:21:62:0f:c6:d2:ee:4d:a1:c5:e1:2b:8e:04:
                    ae:53:1b:8c:8e:a4:04:55:2f:1f:d7:49:c4:16:c0:
                    a7:5f:56:a3:99:f1:f9:bf:23:30:73:2a:a8:02:83:
                    1f:d1:ca:0c:5e:31:70:04:f2:de:2f:43:51:0b:91:
                    74:88:df:b9:66:de:ee:ed:28:f2:81:c3:35:9b:06:
                    89:e9:61:25:06:21:0f:1e:4a:a5:28:37:f4:0c:ee:
                    f0:56:44:7c:65:df:bd:2e:a6:0e:36:9e:0b:6f:cb:
                    08:98:0e:4e:61:40:74:0a:ab:16:e4:ca:5a:56:75:
                    3c:e4:31:b4:5c:2b:78:1a:fb:a5:de:91:d8:b1:c5:
                    1f:16:ad:13:2c:a3:7d:05:ba:7e:53:f2:5b:e5:bc:
                    ed:f2:33:b6:f0:69:41:f9:9a:ce:ce:d7:70:1c:22:
                    26:57:28:9b:62:e2:b4:aa:89:74:45:c9:bb:a1:47:
                    08:70:97:57:f6:b8:29:c5:ac:51:0d:61:0c:90:76:
                    63:43:5c:61:41:e7:1e:7c:8b:e0:d8:48:e1:3f:9b:
                    04:e7:a1:ad:c6:28:a8:e1:eb:d9:a3:14:94:e1:77:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7D:4E:BD:D6:6E:DE:63:E7:42:0E:24:F4:D7:06:46:EC:A2:02:65
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3130382e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:92:5d:7b:93:f1:e1:15:d4:c8:6d:66:3c:27:b9:a1:25:57:
         d9:0e:92:6f:6c:1c:46:6a:bd:0a:dd:1e:c9:d8:4d:bf:4e:c3:
         1b:1f:9b:1b:8e:7b:27:08:2b:d3:2e:17:6b:b3:2d:de:ec:74:
         38:da:b7:31:a8:ca:19:9a:f9:88:81:7b:67:cd:2a:1c:34:d0:
         82:1c:63:65:1f:3b:33:11:2d:ad:fa:96:bd:68:eb:a1:f9:0c:
         50:43:d2:3a:fd:6c:c2:85:18:58:d5:93:b7:16:05:12:52:d1:
         af:a1:59:29:b7:d9:4b:53:06:2b:25:88:ae:41:d4:fc:70:d7:
         80:8a:ff:6f:7e:07:cd:00:df:b2:08:67:12:ce:8f:41:90:8e:
         8e:4c:88:1e:a1:eb:eb:ff:24:2f:5b:88:03:e7:b2:05:3a:90:
         d9:bb:06:bb:55:19:71:22:19:34:f2:d0:bf:95:16:8a:45:6e:
         b6:2a:bb:2f:5f:13:a0:a3:3f:e8:aa:dd:e3:4e:25:c8:4d:b5:
         96:03:f2:e8:aa:8e:d5:8e:f1:e5:0c:8e:c2:bc:86:e7:b6:6d:
         7d:6a:24:1d:16:5d:87:0c:d4:40:93:5c:20:4b:26:10:f4:c5:
         f6:ea:5f:d4:e2:9b:d0:57:28:f8:7b:a0:5d:5a:bd:af:a2:c0:
         79:87:d8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----