Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37362e302f32342d3234203d3e2031323939.roa
File:                     3230362e3230362e37362e302f32342d3234203d3e2031323939.roa (raw, json)
Hash identifier:          g+UL1MVJJw7xH/da3Bg0RwE6xgtnQJ2bT4SYkrIefl4=
Subject key identifier:   09:A1:56:99:39:EA:52:AD:F0:F2:38:A5:DC:7C:95:53:9B:D1:09:05
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       039A52A02671BF0C065AEC24AFD8A7D1AA7CE4CE
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37362e302f32342d3234203d3e2031323939.roa
Signing time:             Mon 11 Jul 2022 08:30:43 +0000
ROA not before:           Mon 11 Jul 2022 08:25:43 +0000
ROA not after:            Mon 10 Jul 2023 08:30:43 +0000
asID:                     1299
IP address blocks:        206.206.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9a:52:a0:26:71:bf:0c:06:5a:ec:24:af:d8:a7:d1:aa:7c:e4:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:43 2022 GMT
            Not After : Jul 10 08:30:43 2023 GMT
        Subject: CN=09A1569939EA52ADF0F238A5DC7C95539BD10905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4e:44:39:3b:2b:c2:13:02:c0:bd:ad:ab:a1:
                    0e:48:8c:8b:72:68:22:24:f1:1f:16:3e:99:e5:1b:
                    43:75:41:63:93:93:3c:30:d2:72:dd:7b:e8:b7:dc:
                    1b:0d:d0:b8:35:cf:c9:32:e7:27:1e:8d:63:c8:ac:
                    5c:e1:2d:9a:01:6d:fe:4d:71:a2:3c:e9:64:09:5f:
                    05:93:c5:76:81:60:9a:fb:ff:ba:42:d3:0c:a4:82:
                    3a:a5:eb:47:b8:39:13:4a:e1:9f:27:f0:71:a6:aa:
                    d5:b7:35:f7:17:6b:64:f3:1b:f6:4f:2a:51:d6:f0:
                    d8:6a:b7:5d:bc:f3:a1:d2:b0:f9:61:07:f5:00:8d:
                    44:47:12:27:93:63:fa:45:a9:ff:00:cb:43:af:03:
                    2d:ef:d6:0a:46:15:3a:4d:73:06:1d:f6:7a:d5:46:
                    9b:ad:7b:09:be:99:ef:ae:27:54:c2:35:b9:2a:b4:
                    b2:71:32:8a:b1:9e:01:12:ab:7c:be:82:b8:39:c9:
                    d7:88:bb:5d:71:cb:ad:9e:95:81:a9:94:e5:f7:29:
                    07:f9:43:63:e3:1e:bf:74:b5:dc:d7:6b:31:d4:60:
                    4c:db:90:dc:22:93:2c:69:7f:99:68:77:fa:e2:ac:
                    8f:b3:fb:55:07:6d:96:44:33:f3:12:9c:46:d6:f7:
                    fc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A1:56:99:39:EA:52:AD:F0:F2:38:A5:DC:7C:95:53:9B:D1:09:05
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37362e302f32342d3234203d3e2031323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:d2:3a:56:3b:7b:3e:e4:7b:c9:0e:f9:ff:19:b5:ba:8e:3d:
         61:68:bf:c2:25:9e:c4:d6:aa:2e:54:93:02:84:30:ff:0c:e8:
         32:c5:48:f5:22:42:b2:49:75:88:17:39:a6:93:f4:73:01:47:
         02:41:7f:3e:70:78:00:03:52:6a:f5:29:60:d1:63:e3:0d:b3:
         43:5f:0b:c1:6e:1b:3e:27:fd:ed:5c:05:0a:1a:07:80:06:49:
         6a:f6:63:fd:30:9d:56:ab:aa:41:0c:2e:e8:bc:d9:24:c3:31:
         db:e6:10:5a:0b:fb:02:7c:52:24:09:eb:57:05:94:b7:b2:be:
         b8:da:32:de:c7:5c:ed:f7:7e:8a:68:d6:0c:f5:98:52:5c:ef:
         c0:53:18:a3:67:53:91:2b:60:c6:55:1c:b1:5e:3e:68:8e:79:
         8c:80:7a:23:72:d6:10:32:95:8d:33:25:ad:0a:fa:4f:7b:eb:
         f5:32:b3:16:bd:b9:6a:91:2d:89:c5:9d:b9:22:3f:43:44:fd:
         8f:89:1b:3c:7c:9f:b8:51:00:49:ff:60:87:f5:66:e3:1c:34:
         05:f0:4a:14:90:6e:21:2e:9d:af:b2:eb:48:65:27:42:65:c3:
         0a:91:53:5f:bb:4d:b0:4c:6c:d7:2e:03:e9:42:10:b1:d9:49:
         10:22:fa:42
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUA5pSoCZxvwwGWuwkr9in0ap85M4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzVhYzRmOTM5OWUxMDJhMWYxNjE3Mzg0
MjBlM2Q2MzIwMzkyODA3MDQwHhcNMjIwNzExMDgyNTQzWhcNMjMwNzEwMDgzMDQz
WjAzMTEwLwYDVQQDEygwOUExNTY5OTM5RUE1MkFERjBGMjM4QTVEQzdDOTU1MzlC
RDEwOTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxU5EOTsrwhMC
wL2tq6EOSIyLcmgiJPEfFj6Z5RtDdUFjk5M8MNJy3Xvot9wbDdC4Nc/JMucnHo1j
yKxc4S2aAW3+TXGiPOlkCV8Fk8V2gWCa+/+6QtMMpII6petHuDkTSuGfJ/BxpqrV
tzX3F2tk8xv2TypR1vDYarddvPOh0rD5YQf1AI1ERxInk2P6Ran/AMtDrwMt79YK
RhU6TXMGHfZ61UabrXsJvpnvridUwjW5KrSycTKKsZ4BEqt8voK4OcnXiLtdccut
npWBqZTl9ykH+UNj4x6/dLXc12sx1GBM25DcIpMsaX+ZaHf64qyPs/tVB22WRDPz
EpxG1vf8TQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFAmhVpk56lKt8PI4pdx8lVOb
0QkFMB8GA1UdIwQYMBaAFDZYbDCQKAc8purTaI49iJMIc2WHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzAv
MzY1ODZDMzA5MDI4MDczQ0E2RUFEMzY4OEUzRDg4OTMwODczNjU4Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNWFjNGY5Mzk5ZTEwMmExZjE2MTczODQyMGUzZDYzMjAzOTI4MDcwNC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWVj
NWYyODQwNjI1YS8wLzMyMzAzNjJlMzIzMDM2MmUzNzM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzMjM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADOzkwwDQYJKoZIhvcNAQELBQAD
ggEBAGLSOlY7ez7ke8kO+f8ZtbqOPWFov8IlnsTWqi5UkwKEMP8M6DLFSPUiQrJJ
dYgXOaaT9HMBRwJBfz5weAADUmr1KWDRY+MNs0NfC8FuGz4n/e1cBQoaB4AGSWr2
Y/0wnVarqkEMLui82STDMdvmEFoL+wJ8UiQJ61cFlLeyvrjaMt7HXO33fopo1gz1
mFJc78BTGKNnU5ErYMZVHLFePmiOeYyAeiNy1hAylY0zJa0K+k976/Uysxa9uWqR
LYnFnbkiP0NE/Y+JGzx8n7hRAEn/YIf1ZuMcNAXwShSQbiEuna+y60hlJ0JlwwqR
U1+7TbBMbNcuA+lCELHZSRAi+kI=
-----END CERTIFICATE-----