Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36352e302f32342d3234203d3e203631333137.roa
File:                     3230362e3230362e36352e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          XTInmMBY9+ndzw9ij1Us31863DUjYWw+erOMVMe6DgY=
Subject key identifier:   73:D1:8C:23:E6:A2:BD:C7:BC:CC:10:7F:DA:A7:55:06:AC:06:36:BE
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       2D29FB88361C5709C6FD07C1040918FAFF361DCF
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36352e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 11 Jul 2022 08:30:41 +0000
ROA not before:           Mon 11 Jul 2022 08:25:41 +0000
ROA not after:            Mon 10 Jul 2023 08:30:41 +0000
asID:                     61317
IP address blocks:        206.206.65.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:29:fb:88:36:1c:57:09:c6:fd:07:c1:04:09:18:fa:ff:36:1d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:41 2022 GMT
            Not After : Jul 10 08:30:41 2023 GMT
        Subject: CN=73D18C23E6A2BDC7BCCC107FDAA75506AC0636BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:14:9a:e5:59:bb:64:44:7a:d3:f3:ea:0d:12:
                    9c:ee:6e:38:71:d1:14:a9:a5:19:93:86:a8:85:28:
                    7f:0b:59:e0:66:59:62:b2:98:f4:bb:bc:61:0a:7e:
                    67:fa:96:fd:06:6a:b2:da:c4:3e:0e:37:5e:6f:ac:
                    24:9c:df:08:11:f2:9c:44:1f:59:81:84:ba:ba:21:
                    22:3a:d3:39:9c:cf:67:b6:44:1f:3d:db:b8:f5:90:
                    1c:d1:38:c5:66:5a:dc:80:a2:23:d5:a5:b7:69:c2:
                    ef:42:23:df:19:42:51:8e:f6:29:1e:93:f9:6f:98:
                    94:e4:65:f0:f1:d8:f7:fa:c6:da:ba:12:94:1f:26:
                    60:d0:3f:26:cd:bd:12:6a:72:55:f9:fc:1b:c2:5b:
                    e4:f8:68:1c:01:47:c7:d7:19:f2:bc:2d:c2:bf:61:
                    af:59:31:6e:9b:44:00:eb:d3:f9:5f:07:5d:9b:a9:
                    4f:d5:91:5a:7d:54:df:73:9e:63:4a:7e:40:8c:4b:
                    55:30:49:76:e3:ea:a9:27:af:1b:fc:ee:a1:60:ff:
                    70:76:b0:ff:60:5d:a5:1c:08:bd:47:c7:c9:81:3e:
                    07:1c:48:43:47:02:95:d0:2d:81:b8:56:4c:09:16:
                    35:d4:3f:a2:03:96:46:26:b3:44:d5:6e:18:dc:f6:
                    e1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D1:8C:23:E6:A2:BD:C7:BC:CC:10:7F:DA:A7:55:06:AC:06:36:BE
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36352e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:71:52:18:9a:ca:6e:44:22:34:9b:a7:4c:c1:d4:52:b3:52:
         81:80:92:df:aa:cb:cb:f3:ae:21:9a:7b:d8:1d:fd:6b:de:fe:
         47:94:a4:0a:3d:7a:9e:17:19:3b:b4:15:99:bf:b8:ff:8b:fa:
         29:e0:ed:1c:b7:2f:de:35:cd:0a:07:0d:85:6b:9e:20:80:17:
         1a:d7:bf:e8:4c:5d:24:c0:0e:0f:8b:4e:6c:7c:37:7c:68:be:
         2f:e7:3d:44:12:cf:05:1b:13:23:86:e9:45:f1:13:b8:5b:a4:
         fd:14:3d:a4:93:57:d4:8a:9f:49:69:7f:27:44:fa:5a:43:b9:
         cc:01:9b:92:ff:7e:c7:91:79:e0:e9:ff:6c:53:f0:7c:92:62:
         17:14:d9:bf:e0:0f:c1:b4:f1:68:27:a1:5e:5f:69:b3:0c:3f:
         1b:cf:9f:fd:86:72:50:ae:f9:25:2b:19:24:2f:a2:2c:bc:9a:
         ac:9f:cc:03:9b:0b:4e:ad:15:14:04:68:74:34:60:57:dc:0c:
         57:6c:c0:18:eb:c5:e2:4c:76:ba:2c:82:c9:c3:82:99:92:90:
         b5:ad:dc:25:79:64:f5:24:ed:85:10:8d:81:86:93:dd:ed:a3:
         d0:45:ac:c7:36:9b:00:03:f0:3b:93:c0:6e:24:2b:68:4d:54:
         7b:a1:35:e6
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIULSn7iDYcVwnG/QfBBAkY+v82Hc8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzVhYzRmOTM5OWUxMDJhMWYxNjE3Mzg0
MjBlM2Q2MzIwMzkyODA3MDQwHhcNMjIwNzExMDgyNTQxWhcNMjMwNzEwMDgzMDQx
WjAzMTEwLwYDVQQDEyg3M0QxOEMyM0U2QTJCREM3QkNDQzEwN0ZEQUE3NTUwNkFD
MDYzNkJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRSa5Vm7ZER6
0/PqDRKc7m44cdEUqaUZk4aohSh/C1ngZllispj0u7xhCn5n+pb9Bmqy2sQ+Djde
b6wknN8IEfKcRB9ZgYS6uiEiOtM5nM9ntkQfPdu49ZAc0TjFZlrcgKIj1aW3acLv
QiPfGUJRjvYpHpP5b5iU5GXw8dj3+sbauhKUHyZg0D8mzb0SanJV+fwbwlvk+Ggc
AUfH1xnyvC3Cv2GvWTFum0QA69P5Xwddm6lP1ZFafVTfc55jSn5AjEtVMEl24+qp
J68b/O6hYP9wdrD/YF2lHAi9R8fJgT4HHEhDRwKV0C2BuFZMCRY11D+iA5ZGJrNE
1W4Y3PbhUQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFHPRjCPmor3HvMwQf9qnVQas
Bja+MB8GA1UdIwQYMBaAFDZYbDCQKAc8purTaI49iJMIc2WHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzAv
MzY1ODZDMzA5MDI4MDczQ0E2RUFEMzY4OEUzRDg4OTMwODczNjU4Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNWFjNGY5Mzk5ZTEwMmExZjE2MTczODQyMGUzZDYzMjAzOTI4MDcwNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWVj
NWYyODQwNjI1YS8wLzMyMzAzNjJlMzIzMDM2MmUzNjM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMTMzMzEzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAM7OQTANBgkqhkiG9w0BAQsF
AAOCAQEAM3FSGJrKbkQiNJunTMHUUrNSgYCS36rLy/OuIZp72B39a97+R5SkCj16
nhcZO7QVmb+4/4v6KeDtHLcv3jXNCgcNhWueIIAXGte/6ExdJMAOD4tObHw3fGi+
L+c9RBLPBRsTI4bpRfETuFuk/RQ9pJNX1IqfSWl/J0T6WkO5zAGbkv9+x5F54On/
bFPwfJJiFxTZv+APwbTxaCehXl9psww/G8+f/YZyUK75JSsZJC+iLLyarJ/MA5sL
Tq0VFARodDRgV9wMV2zAGOvF4kx2uiyCycOCmZKQta3cJXlk9STthRCNgYaT3e2j
0EWsxzabAAPwO5PAbiQraE1Ue6E15g==
-----END CERTIFICATE-----