Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37352e302f32342d3234203d3e20333938343635.roa
File:                     3230362e3230362e37352e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          mYuHb6Fhe5zVsu+oaK0k00xiTwcncKE4fr+NVJFu6C8=
Subject key identifier:   86:9F:F1:3C:0B:90:04:08:52:49:61:27:8E:63:0E:87:23:CE:A8:3D
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       4566E7CF2C5CEC5C7EC9093758FCC62D2023F785
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37352e302f32342d3234203d3e20333938343635.roa
Signing time:             Mon 11 Jul 2022 08:30:52 +0000
ROA not before:           Mon 11 Jul 2022 08:25:52 +0000
ROA not after:            Mon 10 Jul 2023 08:30:52 +0000
asID:                     398465
IP address blocks:        206.206.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:66:e7:cf:2c:5c:ec:5c:7e:c9:09:37:58:fc:c6:2d:20:23:f7:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:52 2022 GMT
            Not After : Jul 10 08:30:52 2023 GMT
        Subject: CN=869FF13C0B900408524961278E630E8723CEA83D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8c:ae:a0:56:67:03:77:4e:9d:f1:5e:89:a5:
                    69:54:d5:28:e3:44:ae:80:3f:27:dd:44:10:40:fe:
                    7a:02:d3:55:18:a5:53:39:b4:64:75:2d:e4:fc:d2:
                    3f:91:a0:10:f8:22:d0:9b:56:90:e1:39:94:6b:a3:
                    98:0c:fc:b6:9b:5b:21:2e:27:4e:68:d7:1f:a1:16:
                    58:63:9d:8f:5b:25:90:a6:af:6e:01:b5:65:c2:16:
                    75:03:98:4a:53:95:14:25:fc:9a:45:fa:2d:99:54:
                    53:ae:ac:c2:67:e4:ff:8d:8b:12:1f:0f:58:41:d0:
                    de:07:70:5f:21:db:93:4e:c7:72:d8:4a:58:07:1a:
                    10:c1:b4:7c:02:bb:fe:71:f5:4f:e9:fe:76:bb:b2:
                    04:18:29:28:e1:fb:5e:c6:53:b5:6d:a3:69:4f:21:
                    41:a9:2f:64:e9:e4:93:55:70:b1:b5:d5:fb:a2:c6:
                    e8:dc:cf:0c:8e:a0:70:71:20:f1:d3:a5:68:19:86:
                    93:78:af:78:36:ef:94:f8:a7:cb:af:89:a8:a8:fa:
                    aa:48:86:a0:e7:a9:d9:ea:c9:32:cd:bd:bf:af:dd:
                    f8:64:af:0a:73:47:e0:6b:be:da:8a:75:f7:ed:bc:
                    5c:6c:0c:b4:fe:2c:f7:b9:55:97:b1:00:e4:94:e0:
                    28:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:9F:F1:3C:0B:90:04:08:52:49:61:27:8E:63:0E:87:23:CE:A8:3D
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37352e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:5c:db:16:75:d6:81:6e:e8:2c:1a:66:54:8a:d3:89:59:a7:
         71:d9:7d:1b:0d:34:41:e3:fb:1c:aa:c2:25:ae:d0:cd:cb:85:
         b9:58:16:68:78:34:24:42:d6:09:e3:8c:b3:48:fd:5a:ed:69:
         9a:f7:13:75:dd:f9:3e:c7:fb:ef:9b:01:91:46:0e:44:a5:85:
         66:3a:54:69:4d:1d:9a:9f:da:bf:7a:2f:1d:48:ba:aa:7f:15:
         cc:69:1d:a6:2b:06:a6:eb:04:21:4b:e8:de:ca:49:21:7f:c6:
         82:14:50:9c:a2:88:cd:2c:8d:0c:21:32:ba:f3:cf:97:0c:18:
         f4:47:88:07:68:5e:f5:f8:b1:43:f1:76:c6:a9:52:fa:a7:76:
         b5:17:fe:28:4f:54:32:52:b0:37:fa:78:e4:09:1c:f0:99:ce:
         b2:2c:01:85:2a:a6:e4:5f:d8:67:c3:3f:17:7c:c4:5f:46:a5:
         3c:59:8f:88:1e:3b:6c:77:f9:85:19:c3:fe:91:1b:fb:24:ad:
         b2:3c:dd:fb:86:36:94:8b:d2:9c:6c:48:a8:4f:f2:06:e4:cb:
         65:55:d9:b8:9e:30:78:dd:c9:b6:39:bc:82:94:28:53:3f:6b:
         ad:b3:4a:54:8e:13:c0:30:20:09:2c:94:85:03:ce:10:2f:88:
         f7:d5:dd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----