Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36362e302f32342d3234203d3e2037303138.roa
File:                     3230362e3230362e36362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          n0+e8HKUv7gBXcN6pi6HuE0rVNpY9iQ5smcOtnOg+tg=
Subject key identifier:   17:5C:48:6D:05:74:E8:AE:02:AF:4E:19:AA:07:61:C0:E8:B3:CA:69
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       466C8B7DA5444473E983AEB2131DF46462EAA470
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36362e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 11 Jul 2022 08:30:48 +0000
ROA not before:           Mon 11 Jul 2022 08:25:48 +0000
ROA not after:            Mon 10 Jul 2023 08:30:48 +0000
asID:                     7018
IP address blocks:        206.206.66.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:6c:8b:7d:a5:44:44:73:e9:83:ae:b2:13:1d:f4:64:62:ea:a4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:48 2022 GMT
            Not After : Jul 10 08:30:48 2023 GMT
        Subject: CN=175C486D0574E8AE02AF4E19AA0761C0E8B3CA69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:3a:4b:96:0c:8b:82:0d:66:57:93:8a:d4:40:
                    50:75:f1:27:69:c0:fc:79:60:d7:64:7e:1c:ee:e9:
                    30:87:37:5e:5e:ed:44:d3:1a:8e:a1:f3:3e:53:c5:
                    34:3e:2d:5d:a5:76:46:8a:6c:ed:25:a9:30:a8:02:
                    e8:31:a2:f0:88:29:30:e5:d4:47:78:2e:76:fe:be:
                    9d:95:b2:da:40:be:d7:97:cd:09:59:0d:32:59:53:
                    1c:db:fb:42:83:58:d8:86:50:e9:0a:be:24:97:85:
                    ff:ca:49:40:72:82:18:c8:cd:eb:d2:5c:b0:8b:4e:
                    77:cb:49:0a:e9:1d:03:73:99:fb:b0:fa:24:ca:39:
                    37:02:5f:80:66:a4:c9:4f:7f:a3:52:1a:83:81:8b:
                    bd:3a:7d:a0:b1:10:70:d7:7d:0b:b9:e8:99:3f:5d:
                    c3:02:3a:58:55:78:23:74:40:d2:df:40:74:70:1c:
                    09:9d:62:cf:7c:e9:57:95:78:05:d4:72:97:9b:18:
                    f0:a4:2a:50:b5:9e:eb:2e:73:0e:51:d4:25:70:0b:
                    17:40:f3:aa:72:ac:eb:d3:a1:9b:56:69:e9:c8:89:
                    f4:c0:18:68:dc:f4:e5:62:ff:9d:3f:b7:b2:aa:d0:
                    f7:84:55:08:b8:26:fe:e8:4d:f4:be:5e:4d:0a:6d:
                    97:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:5C:48:6D:05:74:E8:AE:02:AF:4E:19:AA:07:61:C0:E8:B3:CA:69
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36362e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:21:e9:f0:f1:ca:f7:a6:75:fe:af:09:39:8a:05:ee:c5:d0:
         5c:16:d2:2a:cf:64:22:52:44:7b:9e:14:67:6f:5c:1f:26:67:
         43:63:57:0d:33:f9:18:2c:1d:2c:02:6d:26:60:64:df:26:32:
         f2:bc:28:d4:ed:e1:c2:f0:a0:fe:bd:fe:a0:32:95:0d:76:fe:
         1e:75:62:73:41:0e:f4:3c:f1:e3:c0:5f:ad:15:1c:05:ec:55:
         88:d5:f8:0c:f2:37:71:8e:c2:b6:db:3d:43:22:a5:e6:40:0d:
         be:a9:09:aa:76:0a:98:7a:a0:fa:c7:88:7d:cb:69:d3:62:64:
         fb:27:0c:7b:bb:65:5b:5a:ae:99:63:0a:a9:fe:d8:8a:2d:cf:
         28:dc:fd:03:9e:f7:f4:92:72:dc:d2:c7:eb:61:d2:08:d7:32:
         29:87:91:25:f7:66:77:bb:aa:5d:45:7b:2b:6d:48:ae:5f:70:
         b2:76:9a:fb:ca:52:bd:88:0e:6d:5b:ab:74:71:6b:e1:a2:ed:
         80:3b:1d:6a:ff:67:5e:4b:fb:68:77:2a:71:3f:8f:24:d2:bd:
         8b:e2:05:8b:e0:81:be:93:2e:26:b5:27:fe:f8:fe:e7:e4:66:
         4f:1c:bd:07:38:13:ad:86:3d:50:cf:71:5f:c7:b3:81:2a:08:
         97:3b:cf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----