Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37372e302f32342d3234203d3e2037303138.roa
File:                     3230362e3230362e37372e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          iXZP8HaghoAuHRCOhVRYrO9zB18su6qz+BHWOgd7bPA=
Subject key identifier:   FE:3D:14:E5:C5:7F:64:7A:29:AB:D6:7D:C4:03:C5:30:75:F6:52:CB
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       1D9DDD0C1A014F0CDED91A1398E474C74342E8F0
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37372e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 11 Jul 2022 08:30:46 +0000
ROA not before:           Mon 11 Jul 2022 08:25:46 +0000
ROA not after:            Mon 10 Jul 2023 08:30:46 +0000
asID:                     7018
IP address blocks:        206.206.77.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9d:dd:0c:1a:01:4f:0c:de:d9:1a:13:98:e4:74:c7:43:42:e8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:46 2022 GMT
            Not After : Jul 10 08:30:46 2023 GMT
        Subject: CN=FE3D14E5C57F647A29ABD67DC403C53075F652CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:12:9e:58:54:7d:7a:71:00:6f:fa:e3:eb:42:
                    70:cc:03:12:f8:d6:32:88:1f:f4:85:60:86:6a:12:
                    50:3d:64:cf:7d:5f:cd:64:cc:5c:0f:0b:b4:7b:f9:
                    ff:b4:f4:37:7b:af:a8:c4:90:30:c3:ab:83:ca:b1:
                    01:12:c9:d6:c3:8e:3d:29:16:52:c1:79:6f:b8:8f:
                    25:a3:7b:54:ca:0b:60:18:3d:03:a3:c5:1c:f2:03:
                    8b:5d:0f:66:2e:b0:39:80:0a:52:4a:dd:56:2e:05:
                    a1:49:a1:96:4f:4d:74:31:73:e6:3b:0a:f0:00:5d:
                    14:68:6f:d3:b7:33:20:fa:70:52:37:be:e6:b2:22:
                    f4:9e:33:94:23:ed:c0:94:2e:82:fe:a4:99:29:27:
                    1c:c3:31:d5:5d:34:2c:bc:0c:3d:03:7e:56:9a:78:
                    b8:d9:ea:7c:df:9c:5b:45:c6:af:27:8a:a1:69:61:
                    c3:d5:dd:61:64:a4:1f:b1:b9:f4:38:13:47:2d:0a:
                    a4:c3:1b:83:a2:f5:b4:54:55:e4:df:2b:ab:83:23:
                    d8:d4:37:52:29:23:5f:53:f0:38:2e:50:b5:d0:c8:
                    86:c8:33:c6:40:29:d8:7f:f9:d3:f8:6f:94:83:f6:
                    84:d7:f3:08:4a:89:45:d4:ed:62:ca:de:0b:d4:ee:
                    bd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3D:14:E5:C5:7F:64:7A:29:AB:D6:7D:C4:03:C5:30:75:F6:52:CB
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e37372e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:e4:25:07:7d:30:89:c4:f6:7c:9f:ac:03:e7:ee:aa:58:fc:
         02:ff:30:f8:ac:db:40:e0:d7:4e:c5:5c:b0:d2:d2:2d:f7:de:
         39:ea:1d:3a:95:73:14:72:1c:15:86:c7:0b:ff:85:6c:ab:33:
         4d:b4:2c:0b:44:c5:2e:d3:22:05:aa:d4:c0:dc:65:96:9c:d7:
         ab:80:18:bd:9e:3c:e4:25:2a:4e:b3:9b:9a:05:a5:ae:d3:6c:
         4d:8c:27:78:a0:45:59:9f:dc:46:e2:55:0a:41:6d:48:3a:9d:
         25:61:51:da:51:51:ac:ad:6c:0b:08:c9:44:bc:fb:9c:23:4b:
         c3:8a:1e:16:bb:2b:90:c3:91:a8:c4:93:ab:20:f2:ac:e2:ee:
         8c:60:e6:55:a9:f2:5b:3c:3e:d2:ef:e7:a4:3a:22:45:34:81:
         6b:d0:2d:fc:fd:28:0b:25:ef:13:b2:1d:5d:6d:f1:bd:f1:ba:
         52:74:74:76:2b:13:7d:91:a8:5f:49:75:1a:78:07:61:96:72:
         af:ff:70:3c:32:ed:4c:29:1b:6b:37:88:8f:41:1b:ba:0a:05:
         e4:e7:6e:d0:17:cf:2d:f3:d9:f1:77:ec:ec:ce:bf:9c:1c:f9:
         3f:63:64:77:ce:6e:6d:7e:af:23:1d:1a:c3:b9:6e:c4:e9:43:
         be:98:96:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----