Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37302e302f32342d3234203d3e203631333137.roa
File:                     3230362e3230362e37302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          hKsjPPwOQ77b0rX4QIwEAUi/uBV5z3Tm+oq70hX5aJs=
Subject key identifier:   D9:76:A6:7D:03:8C:2D:26:06:0D:4F:C4:27:4F:A7:29:30:F1:70:AB
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       1363BFF6F1ED49DDFC7E68733B0A6BB23D682CD1
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37302e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 15 Aug 2022 14:58:12 +0000
ROA not before:           Mon 15 Aug 2022 14:53:12 +0000
ROA not after:            Mon 14 Aug 2023 14:58:12 +0000
asID:                     61317
IP address blocks:        206.206.70.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:63:bf:f6:f1:ed:49:dd:fc:7e:68:73:3b:0a:6b:b2:3d:68:2c:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Aug 15 14:53:12 2022 GMT
            Not After : Aug 14 14:58:12 2023 GMT
        Subject: CN=D976A67D038C2D26060D4FC4274FA72930F170AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:34:17:30:12:99:cb:c3:f6:b5:52:5d:42:6e:
                    93:bd:1e:e1:54:94:09:d4:33:dc:c5:6a:58:62:c0:
                    76:9a:64:8e:7c:64:85:73:b6:37:d5:d8:2d:7e:36:
                    2d:72:4e:aa:80:ca:18:e2:80:0b:07:69:79:eb:e4:
                    67:65:94:70:98:05:4d:57:9c:88:03:0c:64:10:1b:
                    b2:d2:2d:c4:93:40:a9:d6:a4:e8:a4:cc:8a:00:ad:
                    f4:6f:2f:cb:06:40:9d:91:2b:19:de:cd:3c:ad:e1:
                    87:9b:1c:8d:9f:29:0d:85:4b:01:5d:b3:36:39:e5:
                    ae:e8:c3:96:b9:db:8c:28:a0:a2:48:64:29:be:b5:
                    72:86:ec:d8:b4:b6:82:5c:d3:da:f5:e2:41:b6:3f:
                    c2:58:cf:3b:03:b7:06:0a:96:91:fa:cc:8f:d5:ac:
                    fd:d1:7f:1a:7f:24:e6:1d:db:c7:4e:e9:f5:4f:3e:
                    63:a0:46:88:8b:9d:e3:db:40:55:58:cb:65:a2:87:
                    9e:12:a8:2c:21:32:f9:45:16:32:53:38:25:1c:3f:
                    de:15:04:a9:59:8a:da:3a:d2:7e:69:4a:87:26:19:
                    d6:4a:42:b4:66:a7:5a:de:06:54:ae:3f:6e:37:58:
                    4f:e5:47:e9:e1:8c:77:c4:ad:f8:da:52:47:25:5c:
                    3b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:76:A6:7D:03:8C:2D:26:06:0D:4F:C4:27:4F:A7:29:30:F1:70:AB
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:0e:16:9d:ae:11:6f:a1:7a:06:59:86:5a:de:30:2a:24:e3:
         e2:d0:fe:ae:f0:3e:b4:a6:a7:c2:fc:ab:c8:c0:d2:c3:78:89:
         75:42:53:36:42:4d:83:88:db:16:ae:5a:67:b1:db:1b:3d:21:
         ec:ca:90:0d:38:ca:d9:07:ca:5f:fc:3d:cb:0d:91:db:f7:54:
         82:78:5a:6c:84:58:a4:68:2d:62:00:53:c6:af:ab:43:ad:5c:
         be:75:d8:ce:3c:6c:85:a7:7a:f3:f4:29:86:c6:08:6a:33:1b:
         48:a8:2b:d6:59:df:7d:bc:16:24:68:43:c2:66:9a:f2:7b:e2:
         84:10:38:4a:c8:15:60:f3:06:e8:d6:96:40:24:08:16:9d:33:
         37:c2:bf:1c:e5:a9:78:39:81:19:9a:a1:67:5a:97:b9:a2:f3:
         33:d0:0b:e3:80:ba:1f:9f:ed:8a:e9:e3:c3:78:9f:4b:45:9a:
         de:76:35:9f:09:a3:3c:b0:96:4e:10:6f:f9:ce:36:35:d6:74:
         04:c9:13:f8:7b:e8:07:2a:e3:f7:4f:f6:bb:87:33:68:b2:1f:
         c2:df:3d:62:ab:76:75:c1:a9:b0:bb:f3:00:40:62:ab:14:d8:
         3c:99:cd:2d:4b:d4:d6:7c:73:1a:df:83:fa:94:4b:98:24:6c:
         13:53:2a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----