Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37322e302f32342d3234203d3e203631333137.roa
File:                     3230362e3230362e37322e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          xJVKxFn9lM64RCh4gtXT3UjBrKeryENWe7au+/CzpxU=
Subject key identifier:   0C:8E:16:B4:52:51:14:72:E4:33:FC:8F:FA:BA:F3:4E:4F:F6:8E:81
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       2971968126BC89AD90B3572744F8C99DABE95A3F
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37322e302f32342d3234203d3e203631333137.roa
Signing time:             Mon 15 Aug 2022 20:38:42 +0000
ROA not before:           Mon 15 Aug 2022 20:33:42 +0000
ROA not after:            Mon 14 Aug 2023 20:38:42 +0000
asID:                     61317
IP address blocks:        206.206.72.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:71:96:81:26:bc:89:ad:90:b3:57:27:44:f8:c9:9d:ab:e9:5a:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Aug 15 20:33:42 2022 GMT
            Not After : Aug 14 20:38:42 2023 GMT
        Subject: CN=0C8E16B452511472E433FC8FFABAF34E4FF68E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5b:41:27:7c:67:52:88:48:20:41:3e:e9:92:
                    8a:c8:1b:e7:69:79:5c:e9:b6:ba:c7:a7:6b:cc:f6:
                    cf:75:08:c8:71:de:79:00:b7:7c:de:bb:81:12:4c:
                    6f:8f:4d:32:90:18:8f:db:78:73:52:70:bf:90:9a:
                    dd:00:ff:8f:fe:1f:f5:83:36:9a:cc:f5:5f:ea:be:
                    f6:ab:8a:53:de:e5:64:ea:b5:8a:1e:6c:31:62:14:
                    17:db:de:f4:c0:41:83:49:e4:e6:84:db:ca:8e:0f:
                    7d:74:f1:3a:5b:f3:d8:22:e8:81:d2:d6:a1:22:a7:
                    82:34:13:03:d8:80:16:4b:44:b8:79:68:4e:eb:03:
                    ca:46:31:c4:18:86:c4:12:e6:17:c0:47:f4:e5:bb:
                    71:67:0f:09:c1:86:f4:58:73:c3:da:3a:77:8b:a2:
                    85:3b:47:f5:48:58:20:6e:9d:bb:8c:01:92:4a:94:
                    d1:cc:9e:0e:d9:41:c5:df:82:56:b4:49:fb:0c:8f:
                    01:fa:c5:4c:5f:57:6a:a0:34:f0:ed:4c:ad:32:db:
                    88:71:87:11:07:d6:60:8f:1a:c7:9a:5a:e6:e8:7a:
                    d0:5a:bf:43:3e:2f:e7:7d:42:4a:fe:02:b4:1b:16:
                    cd:f1:32:25:c3:ce:2f:8c:d7:c5:9a:c8:65:1e:d9:
                    2e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8E:16:B4:52:51:14:72:E4:33:FC:8F:FA:BA:F3:4E:4F:F6:8E:81
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37322e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:89:d7:bd:8b:c9:3e:1b:2c:7d:b9:7f:93:78:47:ef:a6:59:
         8c:8b:ec:f1:1d:33:ce:ea:ee:e2:9a:1c:45:96:20:15:b1:bf:
         e1:2a:c0:7d:a8:1a:a3:4d:99:cf:39:dc:38:9c:e2:ab:39:67:
         cf:9e:0e:41:ff:64:71:d2:d0:06:f8:b8:8f:4f:da:2e:c1:ba:
         23:4b:58:37:82:1e:8b:95:eb:c8:3e:6f:db:2f:37:3d:b0:10:
         a3:98:80:e8:27:19:5d:c8:fa:d8:98:44:3f:0c:71:a9:45:1f:
         4b:ff:16:10:10:01:8c:47:3c:11:8f:37:fd:99:3b:80:42:d3:
         3d:7d:03:c7:7e:20:0f:64:1e:57:dc:2b:34:19:d8:ae:9b:87:
         9b:28:23:60:e4:e9:0d:a4:c3:5a:a9:d8:9b:3a:23:16:bf:fa:
         49:29:4f:8a:2d:4c:85:4e:13:73:03:25:8d:cf:a2:ae:cd:91:
         2e:a9:81:bd:b0:4d:f1:f7:6e:32:9b:42:35:15:08:52:a8:80:
         d3:97:74:b5:a5:40:29:0f:85:7c:52:47:86:88:7c:91:ff:c6:
         92:f6:3b:3b:94:38:d2:2f:ec:53:c5:f7:12:f3:c8:68:9c:b9:
         36:d5:bc:3d:46:e2:a0:ea:06:43:21:cc:08:24:2b:9c:81:b8:
         55:37:ed:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----