Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3132362e302f32342d3234203d3e203534303039.roa
File:                     3230362e3230362e3132362e302f32342d3234203d3e203534303039.roa (raw, json)
Hash identifier:          iBpfqgHMMkAaWFw8vfqhfDEe51GrF8OuZ8I+EbmXKBs=
Subject key identifier:   86:66:FB:7E:F0:29:28:17:3F:E7:CB:AD:8A:41:82:81:FB:97:B9:9E
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       5078611AFD6711BB363700E2427FBA3CC4AF9E5F
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3132362e302f32342d3234203d3e203534303039.roa
Signing time:             Mon 11 Jul 2022 08:30:42 +0000
ROA not before:           Mon 11 Jul 2022 08:25:42 +0000
ROA not after:            Mon 10 Jul 2023 08:30:42 +0000
asID:                     54009
IP address blocks:        206.206.126.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:78:61:1a:fd:67:11:bb:36:37:00:e2:42:7f:ba:3c:c4:af:9e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:42 2022 GMT
            Not After : Jul 10 08:30:42 2023 GMT
        Subject: CN=8666FB7EF02928173FE7CBAD8A418281FB97B99E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e2:36:26:68:d3:32:92:fd:f5:36:47:7e:28:
                    5f:61:b6:8f:a3:8d:de:3d:f7:83:74:09:eb:1f:b5:
                    a6:62:47:f1:c2:8c:d5:5a:62:b1:a8:db:78:90:fd:
                    31:9e:15:4a:b8:e9:f6:93:5a:2d:10:a8:e6:d3:9d:
                    4f:6d:39:ca:c2:40:2d:0f:49:06:40:bb:1b:3c:03:
                    b3:51:b7:0e:e3:8e:88:3b:9a:08:8d:3a:2d:72:b3:
                    44:66:36:12:5b:b1:04:f2:ea:a9:bc:54:0a:50:29:
                    13:90:47:7e:9d:d0:21:84:84:89:6c:6e:8b:87:73:
                    71:7e:dc:ca:99:70:3f:5d:4a:3b:83:52:83:29:d4:
                    2e:18:9a:e6:a8:30:1b:5b:4d:d0:39:6d:54:cf:e8:
                    c6:16:d6:41:71:27:0e:83:b3:48:13:2e:61:b7:86:
                    1d:50:9a:0f:36:a8:e5:b5:24:fe:c3:3f:12:94:75:
                    ed:4f:b0:5f:c6:c9:3f:0f:ee:c7:dd:31:ef:26:fd:
                    93:32:e7:b8:b8:be:82:ae:d9:99:55:15:ad:66:c9:
                    bb:c1:58:96:be:39:0e:83:d3:f5:0b:fa:e1:04:d1:
                    ed:78:71:9b:ca:d3:34:59:60:9e:49:98:4f:1b:b0:
                    40:18:de:0f:fe:a3:b4:2c:79:c8:00:a2:72:1e:d3:
                    ee:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:66:FB:7E:F0:29:28:17:3F:E7:CB:AD:8A:41:82:81:FB:97:B9:9E
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e3132362e302f32342d3234203d3e203534303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:c9:46:21:cd:8d:4d:ad:7f:55:b3:a3:85:59:a5:7a:c2:6a:
         6c:ab:ce:09:cb:5f:6a:7a:dd:41:76:37:d5:51:c1:72:b9:b4:
         0a:e9:db:3a:35:e2:a9:04:c9:ef:04:a3:25:b2:c4:8f:d8:5c:
         e9:b5:eb:20:63:5a:5e:4c:40:75:fb:4e:97:04:09:3f:81:a3:
         b2:55:14:bd:a5:4b:73:f6:18:f3:d0:4e:92:ee:cc:fc:48:33:
         e7:45:3c:05:8e:61:2f:c7:17:dc:c0:68:ca:8e:b3:e4:53:45:
         dc:fc:ed:80:1c:a3:76:ad:06:7a:e1:d1:0b:43:aa:c2:d9:5b:
         33:ec:68:c6:45:c0:b8:f9:df:6c:97:24:4f:60:ee:84:51:ed:
         21:f1:2d:5d:4b:8c:08:25:80:d4:1c:bb:93:6b:61:b1:b3:d1:
         39:cc:43:f1:d0:6b:68:70:eb:d3:58:62:33:cb:e0:45:c5:ea:
         da:0c:a9:a6:31:d6:a1:86:3e:bb:ac:da:c8:22:aa:ea:ca:61:
         1a:91:83:1b:12:6d:99:3f:31:cf:6c:58:b6:95:dc:7f:af:70:
         70:08:0a:d8:39:47:ce:ac:8d:2e:5c:33:d7:ab:f7:b5:44:78:
         9e:ab:63:d9:16:98:5c:13:6c:c6:a0:34:8a:d2:b5:72:c4:ac:
         87:f1:1f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----