Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37342e302f32342d3234203d3e20323036303932.roa
File:                     3230362e3230362e37342e302f32342d3234203d3e20323036303932.roa (raw, json)
Hash identifier:          d/sm+2M7lSFfn2riMlSu+Ou3GenI5R362T3DGelHQ1w=
Subject key identifier:   53:C6:34:C0:06:21:71:F3:01:7A:0D:5E:94:47:34:43:AB:44:8B:36
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       48465CD897A464E92E432E151CFEA25917E4F748
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37342e302f32342d3234203d3e20323036303932.roa
Signing time:             Wed 17 Aug 2022 13:05:14 +0000
ROA not before:           Wed 17 Aug 2022 13:00:14 +0000
ROA not after:            Wed 16 Aug 2023 13:05:14 +0000
asID:                     206092
IP address blocks:        206.206.74.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:46:5c:d8:97:a4:64:e9:2e:43:2e:15:1c:fe:a2:59:17:e4:f7:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Aug 17 13:00:14 2022 GMT
            Not After : Aug 16 13:05:14 2023 GMT
        Subject: CN=53C634C0062171F3017A0D5E94473443AB448B36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0b:1d:ff:55:f6:87:fc:b2:0c:65:93:78:c2:
                    79:a8:ab:9b:46:a2:79:f9:de:0c:df:60:5f:e9:4b:
                    5a:17:77:f6:4b:05:b5:69:6c:7e:e8:b2:f6:54:81:
                    e9:a6:ae:81:bb:d7:34:36:d1:92:5a:2d:a4:9a:d0:
                    c2:65:32:ea:86:03:83:b3:54:97:72:91:90:a4:1a:
                    31:5f:29:4b:51:32:d4:50:42:da:4f:f4:e1:ac:0d:
                    88:dc:b6:f1:f7:76:9b:0d:7a:bd:89:03:eb:f1:31:
                    f8:8e:d3:5c:93:34:57:ec:7f:04:b1:3b:dd:50:ce:
                    64:9e:21:1b:49:75:1c:67:76:44:9a:aa:fe:51:f9:
                    f8:6c:20:7a:5e:80:22:dd:2b:4c:a8:1f:89:bb:6f:
                    42:cf:74:94:1f:0f:74:7f:8d:78:1c:7e:84:8b:de:
                    4d:49:09:09:41:2e:b8:69:29:4a:00:4b:53:50:6e:
                    45:a8:8f:48:75:08:61:28:3d:98:1f:a7:07:03:1a:
                    3c:1a:01:9a:d4:bf:64:46:29:6c:a3:ef:56:11:ab:
                    63:f3:0b:e1:f0:e8:08:4f:cf:43:76:5b:b8:e8:b8:
                    ae:9d:a4:84:40:44:95:4d:e2:84:31:df:94:61:2b:
                    19:42:32:3b:b6:e0:d9:f3:c8:e8:41:d3:cc:a8:b4:
                    fe:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C6:34:C0:06:21:71:F3:01:7A:0D:5E:94:47:34:43:AB:44:8B:36
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37342e302f32342d3234203d3e20323036303932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:28:38:15:1b:17:87:df:cc:54:8d:55:b1:6a:60:bb:39:5d:
         46:58:7c:87:e6:e7:58:c8:89:ef:73:ae:ed:b3:72:b0:19:a3:
         fa:e5:6d:8c:f7:64:f3:cc:ee:df:92:23:a4:47:82:2a:02:93:
         6a:b7:43:63:fa:89:dc:01:e5:36:16:c8:5f:18:b6:d8:fd:01:
         18:60:d8:30:4f:ff:a9:46:d3:9b:1d:7a:99:65:ff:4b:66:de:
         c9:d1:12:d5:54:8a:0b:59:f8:6e:f5:7b:77:0e:38:26:d4:4b:
         21:4c:8e:67:66:bb:5e:63:6c:e8:fd:f0:88:2d:3c:8b:b1:64:
         50:82:79:2c:ac:d1:5e:6e:f4:2c:b4:73:04:f6:2c:a9:a6:34:
         ce:cf:8e:91:e2:31:2a:f3:ae:fd:5e:54:9b:2d:c7:ed:7e:cd:
         c8:4f:5f:2c:ba:ce:24:83:a8:43:76:9f:be:00:8d:86:33:72:
         ea:bd:a5:c3:c4:de:10:d6:c4:94:cb:3c:1b:c4:88:a0:81:97:
         49:8c:d0:d0:74:54:14:36:1b:4b:4b:f5:7f:63:77:29:63:ca:
         78:3e:c3:71:72:1e:05:71:f4:ba:81:71:0f:23:48:e3:4f:b8:
         f2:eb:91:57:a7:a8:1d:02:75:d8:7e:88:d6:c2:10:66:ee:16:
         a3:5b:cb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----