Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37372e302f32342d3234203d3e2031323939.roa
File:                     3230362e3230362e37372e302f32342d3234203d3e2031323939.roa (raw, json)
Hash identifier:          CIR163rvU3wF7BFayf3R8CpBQ31D0GPRFbRd/tsjCgI=
Subject key identifier:   12:4A:E3:85:ED:20:42:C4:4E:92:68:8E:74:D0:09:08:5B:5C:2F:55
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       3A7A536F2F56CCD1372F5A28F1BC917F1E97AFF5
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37372e302f32342d3234203d3e2031323939.roa
Signing time:             Mon 11 Jul 2022 08:30:56 +0000
ROA not before:           Mon 11 Jul 2022 08:25:56 +0000
ROA not after:            Mon 10 Jul 2023 08:30:56 +0000
asID:                     1299
IP address blocks:        206.206.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7a:53:6f:2f:56:cc:d1:37:2f:5a:28:f1:bc:91:7f:1e:97:af:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:56 2022 GMT
            Not After : Jul 10 08:30:56 2023 GMT
        Subject: CN=124AE385ED2042C44E92688E74D009085B5C2F55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e4:98:18:e5:f3:5c:18:11:c6:58:c0:75:e1:
                    e1:75:22:e3:f4:61:91:c4:18:67:4a:db:92:f0:ad:
                    37:19:bf:e1:2d:f7:b3:d2:33:28:8c:80:68:87:76:
                    fd:c1:85:72:47:32:80:4d:85:2b:6d:50:ef:24:cc:
                    2d:7b:58:d7:05:c2:50:d4:75:90:a2:dc:04:3e:f7:
                    b1:7b:6d:f6:90:a1:0f:36:34:68:62:28:62:63:29:
                    c9:a3:1b:08:9d:d3:fa:24:1f:40:e3:53:dc:88:8a:
                    55:f6:00:d9:f5:2f:19:0f:2c:ea:2f:11:91:32:15:
                    85:8e:df:1f:1f:cd:cd:93:b2:c3:66:9b:3d:c2:b6:
                    10:f2:e2:e5:29:e1:a4:2a:1f:5a:39:93:ae:be:32:
                    3c:52:24:9d:ab:00:f7:3e:f8:57:10:21:08:8f:95:
                    24:1b:b6:fd:cd:f9:d6:e5:a3:b2:16:c7:64:fe:29:
                    f0:a1:5e:8d:1e:b9:e4:f6:d3:87:41:8b:dc:65:8c:
                    93:37:14:1f:4d:71:50:aa:f2:27:ed:b3:08:03:ff:
                    8f:2b:62:af:5c:d2:34:68:22:c7:81:ea:6d:7d:db:
                    67:f3:f6:a7:a0:c3:d5:d5:ce:b1:2f:12:db:14:cc:
                    42:51:e0:2b:a0:93:5d:bf:46:a0:b9:ae:35:03:e6:
                    24:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:4A:E3:85:ED:20:42:C4:4E:92:68:8E:74:D0:09:08:5B:5C:2F:55
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37372e302f32342d3234203d3e2031323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c1:21:9c:78:d3:16:ce:78:4b:63:7c:14:21:8c:84:98:65:b9:
         e6:cd:62:e7:81:f8:3b:a6:db:d7:84:92:69:80:30:f8:d5:46:
         e4:e2:f0:01:a3:d9:3e:5a:c0:02:dc:0d:71:a8:f6:89:75:5c:
         dd:8c:f2:61:a9:6d:7e:15:72:19:77:65:8e:1d:42:9b:3d:6c:
         bb:4f:35:68:65:bd:32:b8:c1:9f:ae:98:e7:a3:64:65:45:46:
         42:14:9a:6b:9a:91:c2:21:e6:d4:14:34:e3:54:9b:f2:ac:5d:
         04:45:9e:c5:63:77:c0:ec:5f:ce:17:c6:ca:b7:46:0b:97:25:
         bc:19:cf:c3:d5:67:aa:05:4b:8c:be:98:1d:f5:5b:7f:04:e1:
         1e:60:e3:47:42:2d:78:1c:df:e9:12:b3:46:63:0c:77:ff:3f:
         29:86:30:6d:4d:d5:0e:a2:90:31:df:3f:fb:ba:f6:38:bf:93:
         b8:a6:c6:38:e0:c9:f4:9a:28:60:83:2a:af:c2:f9:b1:72:6c:
         83:9d:a7:61:a4:b7:e5:17:a3:aa:bb:de:a6:24:7a:d9:4d:4e:
         73:ac:01:d3:35:7d:61:21:29:d2:bc:cf:9c:88:cb:02:9d:0f:
         e1:ac:90:77:b8:64:3c:c7:3c:df:df:13:22:15:c1:87:fd:8a:
         0a:fa:b9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----