Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37332e302f32342d3234203d3e2037303138.roa
File:                     3230362e3230362e37332e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          RHJglQw0wFnDpSx6DmddezyqOpm0zCGswj/caP6dBQw=
Subject key identifier:   11:4D:AE:72:16:DE:3D:3E:44:DC:EF:24:69:F8:9D:AF:B1:4A:C3:B3
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       4251738283C0C7CAEE44535F95D6380A834009B1
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37332e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 11 Jul 2022 08:31:00 +0000
ROA not before:           Mon 11 Jul 2022 08:26:00 +0000
ROA not after:            Mon 10 Jul 2023 08:31:00 +0000
asID:                     7018
IP address blocks:        206.206.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:51:73:82:83:c0:c7:ca:ee:44:53:5f:95:d6:38:0a:83:40:09:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:26:00 2022 GMT
            Not After : Jul 10 08:31:00 2023 GMT
        Subject: CN=114DAE7216DE3D3E44DCEF2469F89DAFB14AC3B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4a:39:48:f8:44:4b:5f:68:60:b1:3c:bf:04:
                    8f:be:be:95:6e:bd:78:93:cb:2c:13:52:e3:c8:dd:
                    da:0f:8d:4b:35:d5:20:21:c1:6d:03:84:ac:ed:bf:
                    a5:56:ee:37:f5:84:61:35:71:af:90:f6:1a:d8:92:
                    52:44:7f:7d:b3:3b:fa:5a:ba:38:18:13:dd:14:77:
                    e7:99:1f:71:24:c3:66:d8:7e:ca:71:38:fb:8c:48:
                    fc:5d:57:b9:ce:24:0f:1e:96:7b:72:0c:a8:01:d2:
                    99:97:c7:d8:da:33:dd:bd:a0:c0:56:28:1a:a4:eb:
                    bc:16:64:d0:f3:9c:55:d2:e6:83:bb:55:5c:c0:26:
                    77:a9:15:5d:3a:cf:15:2f:ad:70:ce:1f:fc:1e:91:
                    75:0e:7d:75:19:09:4e:92:cb:a1:e2:aa:58:a9:26:
                    32:0d:5b:f7:e6:b4:5b:db:90:c2:11:88:9e:be:f2:
                    c2:b2:95:20:20:57:05:9b:6b:16:1b:2e:e1:4e:84:
                    ce:77:db:1f:46:65:8e:fd:d6:4c:33:23:d8:e4:ec:
                    7b:aa:69:24:4d:21:95:c2:96:82:4e:af:c6:7e:0f:
                    b9:cf:dd:3f:2e:54:5f:77:20:b8:a7:82:25:e7:36:
                    8a:46:2f:b9:70:78:79:e0:83:5d:22:6a:e6:fb:3f:
                    03:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:4D:AE:72:16:DE:3D:3E:44:DC:EF:24:69:F8:9D:AF:B1:4A:C3:B3
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37332e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7c:d2:63:ed:22:cb:9c:0f:83:0d:13:96:f0:5e:66:98:13:90:
         3b:2b:75:97:bc:fc:9c:b2:3f:c5:b9:ca:5a:ed:a0:50:90:21:
         7d:74:2a:0d:28:9a:42:d6:f9:c8:15:92:c7:0e:86:ee:9b:40:
         bb:f0:63:9a:fb:8f:f0:d0:6e:85:91:00:02:24:5e:3d:48:88:
         4f:43:ef:a2:a7:b1:d9:56:c2:48:93:0f:b5:79:bb:57:06:62:
         c3:1d:e8:5b:a2:56:4e:0b:f7:fc:29:50:c1:e5:35:06:69:07:
         7d:29:f3:bc:aa:87:47:ef:d0:ef:09:2c:67:22:f5:18:b5:35:
         e7:be:0e:e1:5d:02:d4:2f:13:c0:ef:4e:13:1d:28:af:d1:01:
         67:06:c1:49:d3:2e:f9:97:4d:8c:21:f6:62:b6:aa:69:4c:0f:
         74:17:b8:73:72:7b:c1:a7:62:58:a8:68:0f:9f:06:b8:47:d4:
         b8:f3:91:f1:d8:53:d9:6d:a5:b9:ab:3d:91:69:9a:ac:89:cf:
         f3:58:cf:ba:c4:1e:62:ce:54:77:09:e4:02:2a:f5:be:ea:31:
         f8:71:05:5d:13:2b:9b:e3:4e:30:86:ff:d6:7e:82:84:ff:19:
         3c:41:18:69:a1:95:1a:d0:39:6f:96:c0:6e:7c:07:44:a7:ab:
         b0:f1:b4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----