Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37362e302f32342d3234203d3e2037303138.roa
File:                     3230362e3230362e37362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          Ht8J3kIbGlHKD+ufvIqhnOWChzDPMTLu4OtFNCZamT8=
Subject key identifier:   B6:79:4F:09:C2:84:20:13:6B:2D:BD:0D:BA:52:C5:F5:A0:71:C2:6C
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       4523CE27AF0289128940EAE6D8EDC84D928C76B0
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37362e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 11 Jul 2022 08:30:48 +0000
ROA not before:           Mon 11 Jul 2022 08:25:48 +0000
ROA not after:            Mon 10 Jul 2023 08:30:48 +0000
asID:                     7018
IP address blocks:        206.206.76.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:23:ce:27:af:02:89:12:89:40:ea:e6:d8:ed:c8:4d:92:8c:76:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:48 2022 GMT
            Not After : Jul 10 08:30:48 2023 GMT
        Subject: CN=B6794F09C28420136B2DBD0DBA52C5F5A071C26C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ae:f2:d9:6f:4d:cf:46:cf:ef:41:21:71:13:
                    28:91:bb:db:70:78:70:89:fa:b1:87:a9:da:80:29:
                    d9:8c:53:25:30:4c:35:30:e2:83:b4:97:eb:b6:0c:
                    ee:1d:c7:60:39:43:de:80:e8:ed:3d:44:66:d4:be:
                    45:27:be:89:7b:8f:b4:2a:fb:2a:19:b5:5c:66:b1:
                    57:ee:4c:10:ce:a6:4e:16:9a:67:3e:28:aa:82:d6:
                    a8:b8:66:9e:6f:78:80:bb:91:d5:b3:d7:dc:a2:b1:
                    1b:25:a0:4b:76:35:d9:a2:17:de:44:8b:a5:48:18:
                    3d:41:79:25:7d:6a:71:04:e6:b8:38:66:ac:7d:8f:
                    6f:77:8b:de:d4:ae:a4:be:a0:19:c8:0f:af:e5:de:
                    36:41:65:9f:c8:8b:ea:46:41:10:70:3e:07:78:dd:
                    33:24:ed:97:22:07:48:2b:13:af:f7:13:53:a0:e7:
                    af:ee:e1:4c:bd:fb:5a:ed:1f:5c:87:d6:fd:cf:75:
                    86:fc:7a:29:c2:dc:59:66:dd:56:30:c3:31:46:2f:
                    fb:fc:de:3c:99:d1:89:c2:74:49:83:e9:99:72:19:
                    31:fc:b6:ef:3f:c4:6c:04:ac:08:e1:84:ae:09:d3:
                    dd:85:7c:3e:7d:ff:19:77:dd:9c:48:4a:60:ce:36:
                    c6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:79:4F:09:C2:84:20:13:6B:2D:BD:0D:BA:52:C5:F5:A0:71:C2:6C
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37362e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:30:c2:13:55:b4:f2:6d:de:0f:69:28:8a:35:eb:9e:97:ae:
         3e:ad:d4:c9:b2:57:bc:b1:a2:c6:69:91:9e:0f:bd:39:03:88:
         c2:7e:27:6f:df:d4:29:2e:2b:1d:91:bc:69:da:42:7c:55:d7:
         62:a4:b5:79:4b:6b:2f:f9:d8:5d:da:fb:cf:e5:ff:80:3e:f0:
         8d:18:7d:26:7a:22:1e:01:f8:43:df:b7:6d:f7:3b:8f:3f:ef:
         9a:e1:69:08:19:ac:02:5b:01:df:2e:3d:6a:4d:0c:3b:6c:b7:
         f3:55:8d:9b:ba:ab:83:fe:22:df:e5:1b:72:1f:c3:3a:54:7c:
         9f:46:08:47:de:b1:29:c3:fd:b5:c5:5d:12:db:0c:6c:e9:95:
         6c:b5:33:eb:6e:04:2c:37:82:ea:5e:3e:0f:73:e1:ff:f4:ad:
         4f:7c:e5:8f:e2:ed:79:95:75:8b:4f:4a:f4:33:e8:72:fa:d9:
         0e:2b:8e:5c:cf:5b:15:7e:1b:cb:61:43:e0:7c:06:73:e8:0c:
         f3:5c:7d:3e:93:a6:ab:b4:84:8c:10:ec:c7:56:b2:a4:f3:07:
         23:c1:e3:24:a1:b0:f2:13:dc:63:2c:9f:3a:e1:91:de:ba:1e:
         4b:09:3f:fd:43:79:e5:eb:74:82:37:56:40:6e:9a:c9:e3:9a:
         29:8b:8e:b8
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIURSPOJ68CiRKJQOrm2O3ITZKMdrAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzVhYzRmOTM5OWUxMDJhMWYxNjE3Mzg0
MjBlM2Q2MzIwMzkyODA3MDQwHhcNMjIwNzExMDgyNTQ4WhcNMjMwNzEwMDgzMDQ4
WjAzMTEwLwYDVQQDEyhCNjc5NEYwOUMyODQyMDEzNkIyREJEMERCQTUyQzVGNUEw
NzFDMjZDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm67y2W9Nz0bP
70EhcRMokbvbcHhwifqxh6nagCnZjFMlMEw1MOKDtJfrtgzuHcdgOUPegOjtPURm
1L5FJ76Je4+0KvsqGbVcZrFX7kwQzqZOFppnPiiqgtaouGaeb3iAu5HVs9fcorEb
JaBLdjXZohfeRIulSBg9QXklfWpxBOa4OGasfY9vd4ve1K6kvqAZyA+v5d42QWWf
yIvqRkEQcD4HeN0zJO2XIgdIKxOv9xNToOev7uFMvfta7R9ch9b9z3WG/HopwtxZ
Zt1WMMMxRi/7/N48mdGJwnRJg+mZchkx/LbvP8RsBKwI4YSuCdPdhXw+ff8Zd92c
SEpgzjbGawIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFLZ5TwnChCATay29DbpSxfWg
ccJsMB8GA1UdIwQYMBaAFDZYbDCQKAc8purTaI49iJMIc2WHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzAv
MzY1ODZDMzA5MDI4MDczQ0E2RUFEMzY4OEUzRDg4OTMwODczNjU4Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNWFjNGY5Mzk5ZTEwMmExZjE2MTczODQyMGUzZDYzMjAzOTI4MDcwNC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWVj
NWYyODQwNjI1YS8wLzMyMzAzNjJlMzIzMDM2MmUzNzM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADOzkwwDQYJKoZIhvcNAQELBQAD
ggEBAMAwwhNVtPJt3g9pKIo1656Xrj6t1MmyV7yxosZpkZ4PvTkDiMJ+J2/f1Cku
Kx2RvGnaQnxV12KktXlLay/52F3a+8/l/4A+8I0YfSZ6Ih4B+EPft233O48/75rh
aQgZrAJbAd8uPWpNDDtst/NVjZu6q4P+It/lG3IfwzpUfJ9GCEfesSnD/bXFXRLb
DGzplWy1M+tuBCw3gupePg9z4f/0rU985Y/i7XmVdYtPSvQz6HL62Q4rjlzPWxV+
G8thQ+B8BnPoDPNcfT6Tpqu0hIwQ7MdWsqTzByPB4yShsPIT3GMsnzrhkd66HksJ
P/1DeeXrdII3VkBumsnjmimLjrg=
-----END CERTIFICATE-----