Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37352e302f32342d3234203d3e2037303138.roa
File:                     3230362e3230362e37352e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          Y6l9VPVnJHT1SSAIRUhgcdESxvh+CfF0lwcUF+PFges=
Subject key identifier:   ED:52:2D:85:9B:8C:C0:73:24:3A:72:8F:2E:4A:B3:67:AC:89:0A:E7
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       6E635A3E95E3153EED9334B38B3FBB15112CC0DD
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37352e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 11 Jul 2022 08:30:49 +0000
ROA not before:           Mon 11 Jul 2022 08:25:49 +0000
ROA not after:            Mon 10 Jul 2023 08:30:49 +0000
asID:                     7018
IP address blocks:        206.206.75.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:63:5a:3e:95:e3:15:3e:ed:93:34:b3:8b:3f:bb:15:11:2c:c0:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:49 2022 GMT
            Not After : Jul 10 08:30:49 2023 GMT
        Subject: CN=ED522D859B8CC073243A728F2E4AB367AC890AE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d4:cf:df:4e:db:10:2d:29:15:89:5b:7e:70:
                    6a:cf:ad:77:f8:66:c8:68:ca:fb:76:01:7f:a3:a7:
                    d9:ef:b2:52:c9:b3:18:9a:9f:dc:84:83:62:20:42:
                    69:7f:c6:e3:70:f2:a9:a9:f7:88:ac:c2:8c:94:48:
                    2a:af:f8:07:8d:be:42:ef:6d:2f:f7:11:52:31:d9:
                    c2:fa:a3:86:b4:f4:9f:bc:94:73:63:5c:c6:16:b5:
                    82:03:84:4e:54:64:4d:0f:e8:0a:bc:74:12:0c:3f:
                    8d:df:09:cf:86:2e:53:01:82:3f:ef:2c:f5:15:5a:
                    70:a5:ae:40:bc:87:d7:b9:55:00:9f:51:45:5a:91:
                    f3:bd:49:15:d6:13:10:11:34:97:e2:d5:5b:5e:a7:
                    d6:e9:11:48:83:c1:a1:0c:c0:f5:41:84:dd:d6:67:
                    71:8b:89:d8:0a:7e:ca:f2:38:0b:4b:c9:74:42:89:
                    a4:c2:63:e7:b2:3c:f9:4c:9e:a4:fe:56:6e:b1:da:
                    96:d7:8b:ae:e5:2e:cc:2d:35:80:8f:8a:64:dc:6c:
                    f7:c2:fb:42:57:85:69:b3:b5:d0:e9:a4:e3:5f:5e:
                    9d:aa:aa:83:03:e7:bc:6a:da:9f:d0:06:cf:d2:63:
                    f4:67:56:c1:34:39:e7:7d:6e:26:6e:45:43:40:80:
                    9a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:52:2D:85:9B:8C:C0:73:24:3A:72:8F:2E:4A:B3:67:AC:89:0A:E7
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37352e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:d8:5f:16:ae:bb:6a:ea:04:f4:01:1f:ff:ed:44:6d:8c:25:
         67:98:2c:da:eb:90:ac:4b:68:6c:db:6d:78:eb:e6:af:50:b1:
         03:4e:56:2d:d7:47:9e:12:8b:65:05:c8:01:f4:15:67:02:4c:
         2a:c0:a4:c4:0d:a2:ee:0d:58:7f:ef:4f:80:a6:3a:0e:f1:9e:
         26:d4:bc:04:8f:22:94:a8:4b:c2:f7:a6:68:3a:ec:f3:c3:3b:
         cf:6b:8a:b2:5d:e2:30:69:60:b9:51:ad:d8:d0:7e:93:c4:a3:
         02:59:d0:cb:18:42:73:f5:01:d3:ea:36:3e:b9:d3:0c:f2:13:
         3b:81:6e:79:ed:94:6e:bf:21:88:cf:b0:6b:68:53:23:4a:55:
         7a:ac:69:da:94:10:b9:f9:1a:7f:ee:92:d5:4c:b8:2e:2d:de:
         be:4e:0c:7b:08:c8:c9:48:98:10:c9:3f:61:f0:fd:5a:82:4b:
         d1:97:f3:8c:26:a1:39:83:d4:f3:c8:a7:d9:08:f6:45:66:57:
         75:a2:71:40:6a:2a:9f:f5:fa:92:73:6c:e7:4f:03:60:ef:d3:
         23:79:79:02:7a:a4:ec:2f:6f:91:da:16:ab:07:0e:d5:84:83:
         93:4d:02:2e:46:c1:74:1e:bb:03:7e:ac:c7:64:29:98:67:0e:
         b3:08:94:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----