Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36392e302f32342d3234203d3e2037303138.roa
File:                     3230362e3230362e36392e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          AZNteJjNaCFpIoKAE2Zy/auSH31j2JfeOZRTkN9x8lk=
Subject key identifier:   DC:83:51:1F:BB:54:C1:09:BF:38:11:A6:A2:C1:E3:61:D7:3F:6C:41
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       68943443D00570A1381D9D13273E03B6DEEAD072
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36392e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 11 Jul 2022 08:30:47 +0000
ROA not before:           Mon 11 Jul 2022 08:25:47 +0000
ROA not after:            Mon 10 Jul 2023 08:30:47 +0000
asID:                     7018
IP address blocks:        206.206.69.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:94:34:43:d0:05:70:a1:38:1d:9d:13:27:3e:03:b6:de:ea:d0:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:47 2022 GMT
            Not After : Jul 10 08:30:47 2023 GMT
        Subject: CN=DC83511FBB54C109BF3811A6A2C1E361D73F6C41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:30:01:f8:6f:c9:1e:b1:d8:2a:30:e5:ae:ce:
                    3a:0d:72:f7:19:2c:d4:c5:3d:ba:73:94:e6:b9:70:
                    5e:53:d2:03:e4:c9:a6:86:23:a2:ba:50:51:4a:dc:
                    92:96:84:69:e5:78:89:72:7d:e5:7c:bd:d1:83:a3:
                    2b:f5:40:21:49:53:0c:39:37:6b:b0:88:af:72:cd:
                    54:bd:56:33:04:a1:2d:3a:91:de:c9:10:b7:11:2b:
                    11:d0:ce:ba:45:ef:28:71:d4:4a:4c:30:8f:5d:69:
                    21:a0:78:ea:3d:95:ae:64:da:7f:61:51:c9:cf:43:
                    81:1b:50:b5:06:b3:f2:81:7d:13:c3:52:cc:b8:33:
                    7c:3b:08:da:13:4a:e0:cc:cf:54:44:1e:16:db:db:
                    25:22:b8:17:75:59:5a:15:10:bb:cd:c0:04:68:8b:
                    30:bd:18:16:95:4f:ce:ed:e4:75:46:b2:c5:3b:9a:
                    ca:69:7f:fd:df:da:44:28:db:59:cd:73:8a:dd:d4:
                    a0:db:e2:b5:29:4d:07:fb:0c:62:3a:c7:bf:da:fa:
                    3c:2d:c9:ff:a8:75:1d:b2:b1:71:fd:d9:28:ac:93:
                    35:27:91:98:1f:c9:9e:4b:5f:33:1e:37:0c:b0:d5:
                    97:2c:e9:94:54:44:09:ea:a7:b1:5e:c0:be:71:8d:
                    c7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:83:51:1F:BB:54:C1:09:BF:38:11:A6:A2:C1:E3:61:D7:3F:6C:41
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e36392e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:9a:f4:9b:4f:26:96:fc:f5:a4:f3:7f:ab:c8:97:db:ed:b1:
         3a:e8:3a:38:6f:94:80:90:70:d5:ce:09:86:db:d7:19:63:1d:
         bb:b6:dc:c3:4f:d4:3e:5f:d6:7f:56:62:3d:dc:3b:e1:33:18:
         9b:6c:eb:85:69:df:85:d6:de:3e:df:a8:3f:7c:e4:5c:7f:88:
         43:52:10:57:1c:2d:7c:9a:6a:2f:de:a5:99:08:ff:40:18:e6:
         2b:1a:05:c9:0e:e5:b4:a0:4f:aa:d9:e1:7d:22:8e:ac:19:c9:
         da:64:0d:1e:78:ad:80:47:33:78:c4:8c:20:62:b5:0b:4c:b5:
         28:7f:c8:9a:ab:a9:65:68:ad:ce:82:92:d0:a3:ac:41:6c:02:
         ef:2e:b3:8f:f9:09:52:64:76:dd:bf:c8:e3:6e:80:07:d3:42:
         a9:ba:b6:72:1e:b7:5e:51:3a:ce:65:0e:f7:5c:bb:1d:20:2e:
         3b:9e:4f:a2:2e:9e:36:8f:b7:7e:0b:30:d6:79:fc:a2:1e:8f:
         dd:d3:9e:1d:b5:d0:10:31:c0:af:ae:62:53:53:68:99:60:e4:
         f9:cb:8e:61:c4:8e:84:84:4d:5f:f1:8f:e6:52:27:a5:06:81:
         1d:81:b9:4f:76:f7:4a:bc:1e:77:5f:37:9b:ed:1b:40:9f:b6:
         5e:72:b3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----