Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3130392e302f32342d3234203d3e203535313534.roa
File:                     3230362e3230362e3130392e302f32342d3234203d3e203535313534.roa (raw, json)
Hash identifier:          MQDCwX1rXi+xQWk4fzCAaFBU2kF/S0g/ZvAEU99WD8M=
Subject key identifier:   BD:77:D4:ED:D5:E9:49:60:FA:53:8E:4F:3D:D0:B2:96:99:EE:02:4A
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       0A56F11EEEBA6D96ED6B2D7F9161F5C6A18B34A8
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3130392e302f32342d3234203d3e203535313534.roa
Signing time:             Mon 11 Jul 2022 08:30:43 +0000
ROA not before:           Mon 11 Jul 2022 08:25:43 +0000
ROA not after:            Mon 10 Jul 2023 08:30:43 +0000
asID:                     55154
IP address blocks:        206.206.109.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:56:f1:1e:ee:ba:6d:96:ed:6b:2d:7f:91:61:f5:c6:a1:8b:34:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:43 2022 GMT
            Not After : Jul 10 08:30:43 2023 GMT
        Subject: CN=BD77D4EDD5E94960FA538E4F3DD0B29699EE024A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c5:12:de:30:6d:82:e7:64:83:5d:42:46:9a:
                    f5:73:c6:e6:e6:6d:34:6a:c0:bc:89:e6:b1:7e:e4:
                    31:0d:cf:bc:61:87:a8:29:db:f0:25:b3:7c:03:d2:
                    8c:59:7c:ff:b4:ac:3e:6b:5b:34:3c:35:43:2a:c3:
                    f9:5a:e5:25:1e:49:65:ac:e7:36:6e:43:29:48:89:
                    36:e5:cd:d1:e7:b2:58:74:f0:6b:7e:d0:1c:61:57:
                    50:ab:04:56:ff:11:cb:98:ee:79:ab:0f:4e:05:22:
                    14:1b:ba:09:ef:59:41:b1:24:fa:e2:5c:08:a0:33:
                    98:58:b8:9c:76:9f:9f:ee:23:c3:97:4e:4f:b2:a8:
                    2b:89:1e:a5:db:83:c9:1c:56:01:3c:31:7f:d6:0a:
                    f4:f4:bb:c9:3e:2b:1f:67:94:40:19:70:f1:9c:8c:
                    87:31:14:6d:32:74:2d:01:ff:f8:c1:ea:f2:ea:0a:
                    e9:09:32:2d:33:68:fc:8d:3b:b2:ee:f0:28:e7:29:
                    26:f0:b5:66:d2:b4:3b:a6:22:2f:00:b7:0f:18:6a:
                    82:8a:f2:80:98:83:ea:16:11:99:60:7e:d2:72:c5:
                    c4:ad:4c:d2:08:a5:c2:09:72:7a:40:21:bf:c6:78:
                    43:4e:18:58:25:bf:52:32:7b:25:8a:84:d9:e5:12:
                    50:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:77:D4:ED:D5:E9:49:60:FA:53:8E:4F:3D:D0:B2:96:99:EE:02:4A
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3130392e302f32342d3234203d3e203535313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:6a:67:f7:5f:4e:55:56:4f:66:84:67:dc:e7:f2:0e:38:a8:
         40:6f:66:44:55:3c:a8:b3:b5:33:e1:9b:71:4f:6b:7d:79:e6:
         38:67:a6:da:3d:32:20:d7:63:0e:9d:78:ef:c0:13:c1:57:c3:
         ed:c5:55:af:ba:c0:cd:f7:8f:e5:c0:b9:7a:df:6f:26:80:f5:
         a4:42:25:ea:65:95:fa:6c:bb:0c:6b:65:ab:bb:6e:1a:3e:29:
         4d:09:06:2c:84:18:08:5f:46:1b:dc:bc:97:48:b3:44:f2:09:
         86:7b:b8:4a:b4:40:3d:7e:11:39:d1:45:30:d0:a1:db:7b:b8:
         82:e0:72:11:2d:98:73:9e:87:16:44:93:96:11:5d:ff:99:fe:
         70:04:5d:19:db:44:11:0b:06:6b:dd:97:64:41:6d:a4:ea:27:
         17:77:f5:7e:52:32:3e:fe:20:83:3d:e0:fc:eb:65:5f:b0:51:
         54:6e:82:66:bb:a8:03:b7:c0:b8:9c:bf:00:a7:c5:e0:b8:3c:
         29:91:77:2d:98:4f:c7:98:26:6a:f4:32:07:59:c1:4a:ed:e3:
         72:a0:39:71:f6:43:2b:7f:32:5f:71:be:40:f0:36:87:b8:4a:
         94:b9:68:f1:71:d4:c1:5f:f6:ed:6e:48:4c:ed:41:ba:0e:72:
         63:98:22:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----