Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36342e302f32342d3234203d3e20313430393437.roa
File:                     3230362e3230362e36342e302f32342d3234203d3e20313430393437.roa (raw, json)
Hash identifier:          pKdlkmnEa1T0YuUHA/hYl9m0lioJ8MUTaq7ejheqdXE=
Subject key identifier:   C6:04:39:C8:A8:94:64:7A:8A:8E:45:A9:F2:81:51:01:4A:24:EF:5B
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       6575D5F11630F5DBEDD7D3A92F56C43FE08686F1
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36342e302f32342d3234203d3e20313430393437.roa
Signing time:             Mon 11 Jul 2022 08:30:45 +0000
ROA not before:           Mon 11 Jul 2022 08:25:45 +0000
ROA not after:            Mon 10 Jul 2023 08:30:45 +0000
asID:                     140947
IP address blocks:        206.206.64.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:75:d5:f1:16:30:f5:db:ed:d7:d3:a9:2f:56:c4:3f:e0:86:86:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:45 2022 GMT
            Not After : Jul 10 08:30:45 2023 GMT
        Subject: CN=C60439C8A894647A8A8E45A9F28151014A24EF5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e3:94:56:d2:db:8f:b6:69:24:63:8f:92:d8:
                    aa:e9:e3:7f:4a:dd:09:05:8a:fb:e8:fc:cf:81:8f:
                    db:fd:be:26:cd:de:a5:0b:3b:d6:86:fe:bc:46:b4:
                    f3:8d:bc:7f:b4:d8:95:f8:cd:07:8d:82:94:23:56:
                    93:03:07:fd:59:f1:a6:c7:9b:cd:18:77:ea:1b:16:
                    96:df:1f:be:4b:ad:86:c2:79:e5:1a:5e:87:e3:b7:
                    fa:1c:ce:5d:74:76:b8:4d:17:4f:13:66:b1:68:2f:
                    bb:aa:af:07:7d:88:ee:7a:15:8e:04:91:87:57:09:
                    86:25:aa:03:2e:ba:7d:a2:74:63:1c:45:e3:8a:0f:
                    d1:63:31:56:1b:e0:5f:27:7d:fb:4a:43:7a:37:26:
                    64:87:d6:a5:17:d0:ac:42:d0:73:9b:a5:22:69:a7:
                    4a:a1:ce:f3:21:ba:34:4a:a2:77:1a:7d:3d:c4:02:
                    f0:90:2b:1f:cb:ed:a5:96:26:d0:8d:9b:75:6e:97:
                    b2:29:be:4c:28:dc:c5:46:98:3f:b4:a7:85:6a:3d:
                    99:01:d3:60:5d:ab:69:01:e5:a7:3b:a4:39:7b:f6:
                    9b:6f:ac:91:57:00:29:0d:c6:1d:33:7e:69:c1:64:
                    a1:3e:81:a2:4b:49:53:72:73:f1:ff:91:b0:3c:90:
                    29:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:04:39:C8:A8:94:64:7A:8A:8E:45:A9:F2:81:51:01:4A:24:EF:5B
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36342e302f32342d3234203d3e20313430393437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e0:c4:8a:07:be:68:1c:dc:b4:4f:82:ea:6b:d2:71:7a:8d:1f:
         fb:57:08:c8:17:4d:84:0f:56:3f:78:2e:de:23:1d:1a:9d:ef:
         57:98:95:b4:a8:f3:5b:29:c7:25:1b:91:7d:4a:c2:fd:c0:f7:
         62:03:94:28:39:ae:33:12:c0:8d:1f:eb:fe:19:41:87:51:7c:
         75:e3:96:56:2d:b0:1b:06:a2:3a:24:fd:d9:af:0c:e0:c7:28:
         7c:22:54:98:77:7f:ea:ed:4f:a2:33:e9:d1:e5:c6:f5:cd:bb:
         71:8a:9d:f0:12:f7:32:16:eb:3b:ae:b4:9d:77:20:01:7f:5b:
         b7:20:7f:29:c3:2f:6e:d2:8c:32:e1:fe:ee:dd:09:68:fc:aa:
         db:4d:88:e7:dd:06:d2:52:aa:83:a0:2a:33:59:6c:69:2b:dc:
         72:af:e2:06:6d:87:05:3d:d1:67:a5:1b:c7:97:ee:a1:39:81:
         64:22:92:1c:17:62:06:a1:81:84:4c:5e:26:f4:2d:f5:ba:6b:
         e6:3d:19:03:72:50:76:4b:33:b7:e2:f2:dc:5a:9d:40:20:19:
         ba:2b:42:66:69:e1:38:ba:6a:55:65:e6:bc:86:fe:cc:f8:d9:
         48:70:4a:a7:91:2f:c4:ef:1a:e0:4e:20:de:59:ed:44:b2:21:
         cd:70:b6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----