Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37372e302f32342d3234203d3e20333938343635.roa
File:                     3230362e3230362e37372e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          Ko3vZfRzyl87xKylDc0iyUSE8Ym6sDmYle8Lzdc2irE=
Subject key identifier:   37:2C:5D:96:27:50:26:86:1B:0C:C6:30:6D:8B:CE:8B:5D:72:D9:1B
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       49541DE1E8A48E7F86F784B68D9FE8E3BCD71882
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37372e302f32342d3234203d3e20333938343635.roa
Signing time:             Mon 11 Jul 2022 08:30:42 +0000
ROA not before:           Mon 11 Jul 2022 08:25:42 +0000
ROA not after:            Mon 10 Jul 2023 08:30:42 +0000
asID:                     398465
IP address blocks:        206.206.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:54:1d:e1:e8:a4:8e:7f:86:f7:84:b6:8d:9f:e8:e3:bc:d7:18:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:42 2022 GMT
            Not After : Jul 10 08:30:42 2023 GMT
        Subject: CN=372C5D96275026861B0CC6306D8BCE8B5D72D91B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9f:84:22:ba:d6:3e:13:12:9e:2d:f5:85:6a:
                    18:8a:d2:c1:4a:d5:8e:03:eb:e6:e1:26:ce:de:08:
                    34:69:22:ea:cf:f3:e6:97:68:e5:d6:cf:22:fe:87:
                    f5:b3:70:d4:0e:a3:39:c7:60:ae:79:8b:fc:cc:80:
                    39:89:e5:20:9f:14:f7:4c:fd:19:bc:74:1b:48:18:
                    11:9e:e3:4d:b5:f2:4e:54:93:f7:f7:98:16:75:74:
                    e3:28:5b:95:59:ac:69:da:70:ef:ff:c5:f1:a8:aa:
                    56:94:06:19:c6:1f:cc:22:6f:ed:8f:41:44:68:5e:
                    20:67:e9:55:f4:e4:c5:9a:a9:4e:b6:d9:c4:d1:5c:
                    10:35:a8:dd:68:29:df:ed:1e:67:fb:57:94:8a:50:
                    44:9f:6f:b1:b6:f3:55:8e:ab:ce:7e:1e:a1:f9:89:
                    8e:09:07:7d:2e:8c:89:95:c2:39:37:e1:2a:fe:2f:
                    0d:32:d6:b3:e2:7d:04:25:ec:90:29:8d:b6:25:dd:
                    b6:83:3d:09:d3:77:b7:93:ba:4b:8d:69:59:3e:bd:
                    cf:79:e4:1b:3e:9d:a0:50:46:84:ea:2e:14:65:88:
                    cd:dd:e3:40:80:1e:17:3b:2e:ed:30:f8:d9:29:1e:
                    ba:cd:42:bd:75:bf:29:75:83:f2:01:b4:b0:65:f4:
                    e1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2C:5D:96:27:50:26:86:1B:0C:C6:30:6D:8B:CE:8B:5D:72:D9:1B
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37372e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:48:c2:d3:cd:b5:ce:ec:60:45:fb:25:32:48:2f:cf:f2:c1:
         be:d9:01:40:f6:96:0b:e3:74:84:e4:46:bb:b9:7b:ef:92:98:
         6e:e6:b6:f9:25:8f:92:3f:08:7f:fc:90:51:66:b8:76:88:56:
         34:39:44:c9:47:9d:b5:e7:76:a3:8e:5d:e6:64:5c:f7:0f:b6:
         d1:ae:7a:d0:13:c7:f9:85:6b:98:44:d3:97:ed:b7:eb:49:f9:
         cd:28:42:b8:2f:f4:02:e6:b8:90:da:8e:4c:2e:35:ad:e1:ce:
         92:f4:07:a7:65:d5:82:5e:3e:6f:e5:0d:43:b3:86:3f:b2:3a:
         88:47:39:7b:d8:5e:17:6d:b9:6d:21:f9:ee:ff:f0:15:11:4c:
         ba:1b:a6:09:25:89:6a:69:e0:98:4c:22:2f:10:69:96:cb:a3:
         a5:77:12:01:30:79:11:e7:f2:ae:50:1c:e6:65:17:4b:b7:0a:
         3d:6f:86:82:bf:87:c5:9f:b4:93:20:c9:d9:a7:d9:c8:1d:be:
         fc:05:23:c5:0c:09:ce:ca:63:af:c2:18:d3:26:8b:92:7c:83:
         48:32:61:de:7c:a1:82:18:f5:4a:b8:5b:94:59:3a:bb:da:d2:
         2a:f5:2b:41:01:89:c5:8c:7d:2c:17:30:a1:44:c0:0e:3f:bc:
         4c:cf:6d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----