Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3132302e302f32342d3234203d3e20333938343635.roa
File:                     3230362e3230362e3132302e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          OmTtC9XxTAgGtHebuK+IvJb8oEQcYfR2yGmWA1CXcf8=
Subject key identifier:   4A:91:85:D9:75:19:BD:76:E4:2F:93:3C:0E:47:9A:95:18:98:15:E9
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       7A57E32207BC5F901922EBF2DB54B989F274CCA9
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3132302e302f32342d3234203d3e20333938343635.roa
Signing time:             Fri 12 Aug 2022 17:06:34 +0000
ROA not before:           Fri 12 Aug 2022 17:01:34 +0000
ROA not after:            Fri 11 Aug 2023 17:06:34 +0000
asID:                     398465
IP address blocks:        206.206.120.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:57:e3:22:07:bc:5f:90:19:22:eb:f2:db:54:b9:89:f2:74:cc:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Aug 12 17:01:34 2022 GMT
            Not After : Aug 11 17:06:34 2023 GMT
        Subject: CN=4A9185D97519BD76E42F933C0E479A95189815E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:65:7f:1c:c2:aa:05:16:94:e0:16:a9:79:f8:
                    d6:bd:dd:d3:60:28:31:c0:8a:c5:a5:58:04:b7:13:
                    35:8a:86:af:df:3d:99:0d:ea:81:5c:5e:c9:bd:91:
                    c9:46:75:d8:12:17:7c:d2:ec:95:83:ed:f1:af:8e:
                    31:d9:e7:d2:4c:41:94:8c:82:1a:06:d2:7d:18:02:
                    5a:2e:b1:cf:e1:7f:f0:9b:a7:64:41:98:ac:5e:79:
                    e6:e1:f9:39:0c:ca:26:62:e7:ae:fe:c7:bb:67:3e:
                    1f:81:f8:f9:b6:bb:05:77:12:56:d9:24:cb:7f:43:
                    79:26:25:e3:f9:c5:aa:64:88:47:73:22:45:70:0b:
                    63:de:1f:c3:78:f0:ac:96:3f:a4:f0:75:05:81:c0:
                    ea:0c:f1:5c:90:1b:2d:d5:68:57:44:b3:a9:37:8f:
                    af:6d:1f:92:fb:00:4c:00:87:a1:1c:a9:a7:5a:fe:
                    f8:ec:2f:21:04:6c:2e:fe:82:9e:ee:fe:7a:3f:1a:
                    6b:5b:8d:b5:99:93:43:23:46:4a:6f:36:6b:5d:8d:
                    12:a4:6f:c2:e2:15:68:e7:83:2a:30:c9:0e:d9:23:
                    5d:ed:09:72:04:ab:b3:59:01:b7:cc:5f:76:17:43:
                    f1:c1:20:3c:12:e0:e8:75:c5:86:2e:9c:50:29:c4:
                    26:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:91:85:D9:75:19:BD:76:E4:2F:93:3C:0E:47:9A:95:18:98:15:E9
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3132302e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:35:76:22:3b:8f:b7:f5:4f:c2:89:be:9b:1f:48:79:5a:34:
         c8:db:23:e4:4a:1c:e8:9e:6c:4f:a0:6e:2c:c6:78:82:06:4f:
         2b:8d:bc:6c:22:2c:20:3b:2e:dd:a2:9e:ad:e5:a6:e3:28:98:
         a2:16:f1:09:d7:bd:70:82:85:01:8d:49:2d:58:7c:d5:ab:13:
         32:7c:e2:10:45:e1:9d:5d:5c:1c:ac:a7:50:40:a8:1b:be:61:
         53:a8:b1:0d:19:fe:0d:c9:97:5a:43:30:15:1d:2d:16:5a:ab:
         1b:aa:8b:2f:c9:d8:20:60:3b:23:54:c1:d3:a0:83:fd:8e:2a:
         e9:cd:83:cd:77:7d:46:87:c7:44:85:e6:38:09:85:4f:15:7e:
         8b:d7:cc:1d:0e:c3:7c:1f:56:06:f6:55:a3:48:37:45:22:94:
         9e:ef:04:64:14:b3:0c:6e:23:ba:0d:a3:55:81:20:ba:f4:4e:
         ad:5a:b2:8a:98:17:cd:08:16:e5:6b:67:35:a9:86:dd:d5:81:
         8a:fe:2b:cf:e5:32:ac:8b:c7:b8:37:8a:f5:64:91:91:0f:86:
         50:8b:64:0b:42:8e:e5:a4:4c:46:e3:81:3c:5d:d1:9f:6a:0b:
         ee:1b:21:59:66:a3:da:40:59:f7:ac:78:4b:3b:4e:4f:36:62:
         ab:77:e5:b0
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUelfjIge8X5AZIuvy21S5ifJ0zKkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzVhYzRmOTM5OWUxMDJhMWYxNjE3Mzg0
MjBlM2Q2MzIwMzkyODA3MDQwHhcNMjIwODEyMTcwMTM0WhcNMjMwODExMTcwNjM0
WjAzMTEwLwYDVQQDEyg0QTkxODVEOTc1MTlCRDc2RTQyRjkzM0MwRTQ3OUE5NTE4
OTgxNUU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmV/HMKqBRaU
4BapefjWvd3TYCgxwIrFpVgEtxM1ioav3z2ZDeqBXF7JvZHJRnXYEhd80uyVg+3x
r44x2efSTEGUjIIaBtJ9GAJaLrHP4X/wm6dkQZisXnnm4fk5DMomYueu/se7Zz4f
gfj5trsFdxJW2STLf0N5JiXj+cWqZIhHcyJFcAtj3h/DePCslj+k8HUFgcDqDPFc
kBst1WhXRLOpN4+vbR+S+wBMAIehHKmnWv747C8hBGwu/oKe7v56PxprW421mZND
I0ZKbzZrXY0SpG/C4hVo54MqMMkO2SNd7QlyBKuzWQG3zF92F0PxwSA8EuDodcWG
LpxQKcQmVwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFEqRhdl1Gb125C+TPA5HmpUY
mBXpMB8GA1UdIwQYMBaAFDZYbDCQKAc8purTaI49iJMIc2WHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzAv
MzY1ODZDMzA5MDI4MDczQ0E2RUFEMzY4OEUzRDg4OTMwODczNjU4Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNWFjNGY5Mzk5ZTEwMmExZjE2MTczODQyMGUzZDYzMjAzOTI4MDcwNC5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWVj
NWYyODQwNjI1YS8wLzMyMzAzNjJlMzIzMDM2MmUzMTMyMzAyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzM5MzgzNDM2MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADOzngwDQYJKoZIhvcN
AQELBQADggEBAGY1diI7j7f1T8KJvpsfSHlaNMjbI+RKHOiebE+gbizGeIIGTyuN
vGwiLCA7Lt2inq3lpuMomKIW8QnXvXCChQGNSS1YfNWrEzJ84hBF4Z1dXBysp1BA
qBu+YVOosQ0Z/g3Jl1pDMBUdLRZaqxuqiy/J2CBgOyNUwdOgg/2OKunNg813fUaH
x0SF5jgJhU8VfovXzB0Ow3wfVgb2VaNIN0UilJ7vBGQUswxuI7oNo1WBILr0Tq1a
soqYF80IFuVrZzWpht3VgYr+K8/lMqyLx7g3ivVkkZEPhlCLZAtCjuWkTEbjgTxd
0Z9qC+4bIVlmo9pAWfeseEs7Tk82Yqt35bA=
-----END CERTIFICATE-----