Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37312e302f32342d3234203d3e20333938343635.roa
File:                     3230362e3230362e37312e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          sYmseLmj7tUTGl+sBppQC0wP4o6wFYz1HPgAQ2f1jcQ=
Subject key identifier:   55:F4:BD:07:0D:03:6B:7F:EF:70:50:0C:18:45:0D:72:D7:FF:B4:EB
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       4F5205BA9102C5A218BCF6A925F87262E420DDF3
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37312e302f32342d3234203d3e20333938343635.roa
Signing time:             Mon 11 Jul 2022 08:30:57 +0000
ROA not before:           Mon 11 Jul 2022 08:25:57 +0000
ROA not after:            Mon 10 Jul 2023 08:30:57 +0000
asID:                     398465
IP address blocks:        206.206.71.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:52:05:ba:91:02:c5:a2:18:bc:f6:a9:25:f8:72:62:e4:20:dd:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:57 2022 GMT
            Not After : Jul 10 08:30:57 2023 GMT
        Subject: CN=55F4BD070D036B7FEF70500C18450D72D7FFB4EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3f:fd:6e:ba:57:0f:ff:d3:9e:c9:d9:ff:22:
                    39:b7:ca:e1:08:30:a5:70:9d:fe:23:bb:81:78:8b:
                    99:2f:ae:32:85:37:0c:1d:77:30:42:04:dd:40:2f:
                    29:8b:57:f6:5c:9a:d3:c7:c7:06:16:79:f6:06:d3:
                    cc:b6:2f:78:e1:5c:6c:f8:3b:52:b8:2a:ed:fa:eb:
                    fb:77:ff:16:50:1a:7b:e1:01:23:7f:58:d2:4b:c7:
                    bc:b7:8a:b7:1c:5c:47:bd:6e:c4:b6:68:00:32:0d:
                    a5:07:95:64:21:68:b4:3c:00:47:cc:a2:00:9c:bc:
                    e5:03:d6:db:4c:a8:ee:c1:28:79:a3:fc:9f:c5:db:
                    ae:b0:cb:42:15:01:ba:ba:3a:9e:7f:80:7f:ea:ae:
                    f6:b8:30:d0:c2:cc:6a:c1:60:05:c4:d3:0a:a0:16:
                    96:82:40:11:9c:60:86:83:b5:3f:c7:3c:db:5e:ae:
                    4b:7f:c8:b5:cd:15:ad:7c:ab:c6:10:9b:7b:07:7e:
                    9c:f7:3c:53:1f:9f:e6:21:50:93:97:84:c4:7b:fb:
                    11:04:ad:12:7d:d1:fd:e8:23:15:28:e4:73:da:53:
                    66:d5:05:52:a6:4f:dc:a7:b1:e6:47:d4:b3:21:a8:
                    9d:5f:69:ac:95:b9:50:0d:83:5f:f2:9b:52:83:ac:
                    49:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:F4:BD:07:0D:03:6B:7F:EF:70:50:0C:18:45:0D:72:D7:FF:B4:EB
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37312e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:c9:27:93:8a:d3:3d:a9:7b:3c:af:90:12:3c:aa:b7:76:a3:
         00:0c:5a:8f:79:7d:60:cc:37:b1:98:92:7f:23:95:df:a5:2a:
         ca:30:99:2b:1e:bd:43:74:6a:b2:58:7d:5b:ef:68:ff:9b:65:
         67:3b:8d:01:5d:9d:66:b4:7c:6e:bd:a3:fd:fd:96:50:4d:b1:
         b8:c3:b9:99:eb:54:e6:7a:1b:3b:f9:f3:87:6e:04:a9:ac:d7:
         78:c5:d5:c3:43:c0:49:24:8a:f3:16:f9:af:1e:19:4c:bd:71:
         28:f9:a5:ab:e1:61:c0:f6:61:4f:8e:9b:30:19:9e:55:0f:fb:
         d5:d4:42:9e:ce:a8:67:39:0e:89:3f:1f:54:98:e4:7f:c6:e0:
         b1:c2:1c:24:20:75:64:24:29:1f:dc:41:d3:c5:2a:c4:b9:2e:
         2c:6c:e5:d6:88:bc:6a:f8:2b:49:74:51:c8:eb:9a:f3:c1:04:
         2e:29:88:43:52:9a:80:e0:a0:5b:1b:05:c7:6b:eb:f9:d4:a4:
         a6:1b:3b:3b:cb:10:87:4e:66:05:50:94:25:ae:ff:aa:fd:20:
         a7:aa:4c:f2:d4:b3:d5:93:2b:57:e9:b5:87:6b:d8:33:d1:05:
         4e:69:2f:60:c5:3e:06:e2:ad:63:7b:6b:f2:99:47:62:35:53:
         90:f2:b1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----