Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36392e302f32342d3234203d3e2031323939.roa
File:                     3230362e3230362e36392e302f32342d3234203d3e2031323939.roa (raw, json)
Hash identifier:          0sZ6NlSaN6oiJWr7vxDtQi+pzMpc3C0tU/x1YrHyKeo=
Subject key identifier:   EB:C1:71:F3:3B:57:BF:0D:78:4C:7C:3C:94:16:C4:BB:8E:F0:B2:E6
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       15D6D12FCFD58A6F961AD8EFCFAC87A06CC5632F
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36392e302f32342d3234203d3e2031323939.roa
Signing time:             Mon 11 Jul 2022 08:30:41 +0000
ROA not before:           Mon 11 Jul 2022 08:25:41 +0000
ROA not after:            Mon 10 Jul 2023 08:30:41 +0000
asID:                     1299
IP address blocks:        206.206.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:d6:d1:2f:cf:d5:8a:6f:96:1a:d8:ef:cf:ac:87:a0:6c:c5:63:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:41 2022 GMT
            Not After : Jul 10 08:30:41 2023 GMT
        Subject: CN=EBC171F33B57BF0D784C7C3C9416C4BB8EF0B2E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:56:35:f6:ad:36:3d:e8:1e:c0:57:f5:8d:cd:
                    e6:a8:5e:d9:5a:71:31:b8:c0:87:50:15:d2:d2:7d:
                    9b:5f:a2:17:ab:bd:87:63:5f:6e:10:cb:76:0f:88:
                    b1:78:c3:4f:e9:30:3e:14:1a:33:e6:f5:14:29:d5:
                    a5:9a:bf:8f:2d:54:e9:98:d2:d1:dd:0c:22:a8:da:
                    c5:8e:da:c6:60:94:37:62:e6:2a:51:5e:d1:87:6e:
                    63:fd:79:e6:8a:dd:76:33:73:1c:5f:67:31:a4:b1:
                    f4:25:51:c4:a4:c8:7f:dc:59:b4:1a:62:c0:6a:19:
                    0b:b4:3f:48:4f:ec:03:0e:0a:95:e1:1e:a1:a2:0c:
                    50:ea:85:1e:0a:88:c5:8f:da:2e:c3:b4:ce:85:49:
                    8a:ed:4e:9e:7b:f2:50:68:76:c0:9b:59:90:c0:01:
                    4e:67:f8:0c:89:b5:16:b9:2e:21:01:43:0a:af:e2:
                    16:f4:29:37:eb:4f:06:11:9a:18:51:c5:bd:8d:35:
                    90:47:87:c7:d6:3a:60:91:49:87:e9:a4:a0:e1:b7:
                    fb:ea:68:57:af:c0:ba:d5:fa:e7:39:89:be:95:cd:
                    32:e5:34:0e:5c:c4:5b:97:52:ad:ee:3e:4e:32:1b:
                    45:81:09:ac:2c:e1:8b:a5:92:81:6f:78:14:76:4f:
                    c1:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C1:71:F3:3B:57:BF:0D:78:4C:7C:3C:94:16:C4:BB:8E:F0:B2:E6
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36392e302f32342d3234203d3e2031323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:0f:6c:36:52:0a:4d:65:bd:8e:10:00:2e:69:ce:a1:ea:c8:
         e4:d9:de:85:33:ee:a5:08:89:8b:e3:9a:15:b5:9d:04:47:13:
         51:b4:e9:d9:f9:de:ff:f0:ec:48:70:72:1c:38:64:e8:d3:39:
         8e:57:5f:4a:67:c2:a6:7e:5e:63:34:64:34:70:a2:0b:1f:9d:
         ae:0d:3d:d7:0e:3b:ba:53:f0:d3:5f:84:67:92:63:21:5e:d0:
         82:7b:35:dd:06:cd:34:ac:d9:f2:d1:5a:e8:20:45:13:7c:c3:
         88:21:04:af:86:ef:36:c2:df:96:80:aa:1a:a5:bb:4f:59:91:
         a9:14:9d:f1:de:c2:2b:8e:68:95:97:ba:29:12:fd:23:ee:29:
         04:18:36:4a:d6:0c:a5:60:e0:15:8d:33:f4:dc:4a:73:7e:7d:
         87:b5:5d:0c:e9:bd:e9:14:5a:08:eb:b8:9b:f5:99:40:8f:57:
         ea:bb:a9:b2:0b:b2:95:8b:86:de:0b:4c:c7:61:c1:73:67:0f:
         e7:d4:d8:d2:de:ed:12:85:ec:62:6f:ea:fe:6f:aa:f4:eb:01:
         f2:98:76:a5:fd:4c:ca:cc:cf:a5:74:1e:d4:89:07:89:48:5a:
         65:e4:9d:6d:02:6a:49:38:f4:df:21:f3:b6:82:6b:59:40:66:
         52:e8:57:87
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUFdbRL8/Vim+WGtjvz6yHoGzFYy8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzVhYzRmOTM5OWUxMDJhMWYxNjE3Mzg0
MjBlM2Q2MzIwMzkyODA3MDQwHhcNMjIwNzExMDgyNTQxWhcNMjMwNzEwMDgzMDQx
WjAzMTEwLwYDVQQDEyhFQkMxNzFGMzNCNTdCRjBENzg0QzdDM0M5NDE2QzRCQjhF
RjBCMkU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVY19q02Pege
wFf1jc3mqF7ZWnExuMCHUBXS0n2bX6IXq72HY19uEMt2D4ixeMNP6TA+FBoz5vUU
KdWlmr+PLVTpmNLR3QwiqNrFjtrGYJQ3YuYqUV7Rh25j/Xnmit12M3McX2cxpLH0
JVHEpMh/3Fm0GmLAahkLtD9IT+wDDgqV4R6hogxQ6oUeCojFj9ouw7TOhUmK7U6e
e/JQaHbAm1mQwAFOZ/gMibUWuS4hAUMKr+IW9Ck3608GEZoYUcW9jTWQR4fH1jpg
kUmH6aSg4bf76mhXr8C61frnOYm+lc0y5TQOXMRbl1Kt7j5OMhtFgQmsLOGLpZKB
b3gUdk/BdwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFOvBcfM7V78NeEx8PJQWxLuO
8LLmMB8GA1UdIwQYMBaAFDZYbDCQKAc8purTaI49iJMIc2WHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzAv
MzY1ODZDMzA5MDI4MDczQ0E2RUFEMzY4OEUzRDg4OTMwODczNjU4Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNWFjNGY5Mzk5ZTEwMmExZjE2MTczODQyMGUzZDYzMjAzOTI4MDcwNC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWVj
NWYyODQwNjI1YS8wLzMyMzAzNjJlMzIzMDM2MmUzNjM5MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzMjM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADOzkUwDQYJKoZIhvcNAQELBQAD
ggEBAEcPbDZSCk1lvY4QAC5pzqHqyOTZ3oUz7qUIiYvjmhW1nQRHE1G06dn53v/w
7Ehwchw4ZOjTOY5XX0pnwqZ+XmM0ZDRwogsfna4NPdcOO7pT8NNfhGeSYyFe0IJ7
Nd0GzTSs2fLRWuggRRN8w4ghBK+G7zbC35aAqhqlu09ZkakUnfHewiuOaJWXuikS
/SPuKQQYNkrWDKVg4BWNM/TcSnN+fYe1XQzpvekUWgjruJv1mUCPV+q7qbILspWL
ht4LTMdhwXNnD+fU2NLe7RKF7GJv6v5vqvTrAfKYdqX9TMrMz6V0HtSJB4lIWmXk
nW0Cakk49N8h87aCa1lAZlLoV4c=
-----END CERTIFICATE-----