Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3131362e302f32322d3232203d3e20323131353835.roa
File:                     3230362e3230362e3131362e302f32322d3232203d3e20323131353835.roa (raw, json)
Hash identifier:          ZK68mczBwqmIP2dq3PDtd2w3GM2BTQPOS4kwTVaHagU=
Subject key identifier:   7F:C6:31:0D:C6:79:C5:3E:BB:1F:D2:0D:11:0F:7C:7D:48:8D:D8:69
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       31A48A9957A89A876B82342DC6B949EC2B13A8F9
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3131362e302f32322d3232203d3e20323131353835.roa
Signing time:             Sat 06 Aug 2022 11:47:11 +0000
ROA not before:           Sat 06 Aug 2022 11:42:11 +0000
ROA not after:            Sat 05 Aug 2023 11:47:11 +0000
asID:                     211585
IP address blocks:        206.206.116.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a4:8a:99:57:a8:9a:87:6b:82:34:2d:c6:b9:49:ec:2b:13:a8:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Aug  6 11:42:11 2022 GMT
            Not After : Aug  5 11:47:11 2023 GMT
        Subject: CN=7FC6310DC679C53EBB1FD20D110F7C7D488DD869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6b:4c:33:54:0a:48:f3:e8:25:88:b5:35:0a:
                    5b:01:1b:79:a5:f8:5f:cc:d3:83:78:40:43:13:68:
                    1f:16:60:62:89:19:a9:df:c2:6c:86:2b:59:a9:4a:
                    5f:2f:9b:2f:60:20:2b:2b:1e:9b:65:4f:1a:9e:f4:
                    aa:08:ec:d4:9f:e8:42:52:f1:82:e6:2f:17:07:60:
                    f9:c9:ff:f9:b6:bc:7d:dd:12:53:2f:d2:bc:93:81:
                    f6:5a:58:09:d9:9d:47:df:db:4a:2c:af:4d:69:ec:
                    7b:24:0d:16:c2:e2:57:57:44:88:a6:ad:73:ef:cb:
                    ab:f0:b2:2a:fd:58:56:ab:6a:df:b9:41:b7:cc:26:
                    c3:c2:36:b3:4b:3b:f2:43:39:81:b4:63:0f:84:c9:
                    8e:67:8b:14:ef:2e:2a:b0:d2:de:62:dc:1d:81:e5:
                    a6:f0:20:8e:08:8b:9e:2a:0d:3c:5a:62:eb:fd:77:
                    33:8b:0b:80:48:1a:c0:33:e4:66:0d:fe:31:0f:fb:
                    1b:82:77:6c:80:3c:d4:6c:ed:2b:d0:7a:25:5f:08:
                    c4:76:dc:c6:73:ec:cc:f9:91:da:73:4a:1c:f6:9c:
                    3b:10:d9:1a:5f:a1:12:2b:b6:29:7c:11:0a:e7:79:
                    32:5f:f9:22:f6:f7:4d:b0:9c:8d:cc:f5:2d:7a:c4:
                    e0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C6:31:0D:C6:79:C5:3E:BB:1F:D2:0D:11:0F:7C:7D:48:8D:D8:69
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3131362e302f32322d3232203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         51:78:42:e2:c3:01:12:e3:7f:f4:da:37:82:c3:69:e7:8f:44:
         0a:a3:d0:ae:27:93:b3:c5:df:bb:b6:65:28:4e:57:1c:43:11:
         85:ce:b1:e7:03:c6:3c:73:27:84:09:c8:5f:7f:dc:60:32:16:
         a8:b6:7b:aa:e7:0f:21:df:6d:2d:e3:1d:9b:5e:ba:74:be:b0:
         4c:ae:ec:94:0a:a6:6e:34:c0:cd:72:a8:7d:e0:e2:70:69:92:
         66:e4:7d:18:28:8d:3e:40:fc:96:6a:cf:f6:5b:49:fa:15:1d:
         81:49:05:b3:2d:f7:37:bb:f2:81:2c:3c:1b:39:63:73:d6:be:
         4d:0d:25:9e:a4:a1:b5:16:67:e7:0d:eb:8b:21:9c:50:48:69:
         68:af:dd:9e:86:1f:ab:da:5b:b7:0c:f9:54:43:97:5b:82:4e:
         c1:39:54:6c:38:1f:7f:b7:ed:d5:5c:02:09:7f:35:fb:f0:4d:
         91:96:e6:43:de:8f:8b:84:3e:ba:51:09:be:4b:f2:64:eb:e4:
         9d:ff:40:09:47:10:f7:82:f2:72:82:60:2c:7f:bc:00:09:e6:
         de:51:3a:49:52:c0:7c:2b:87:e8:50:37:9e:a7:d9:b5:e6:7e:
         d8:54:ed:30:c5:4a:c5:ed:41:c6:9e:ec:a4:0f:bd:1d:9e:9c:
         a2:64:21:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----