Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38352e302f32342d3234203d3e2038313030.roa
File:                     3230362e3230362e38352e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          iYHX1pudsAt0nXmSO+SIMmd06bRIo9SbiDLIL6v1pF0=
Subject key identifier:   29:A0:F7:61:ED:71:BF:1A:05:6F:88:F0:9A:3A:CF:E5:B9:DD:F7:43
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       0DB7EEB3341956F29880656A4FCC6598E44F6348
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38352e302f32342d3234203d3e2038313030.roa
Signing time:             Mon 18 Jul 2022 07:52:07 +0000
ROA not before:           Mon 18 Jul 2022 07:47:07 +0000
ROA not after:            Mon 17 Jul 2023 07:52:07 +0000
asID:                     8100
IP address blocks:        206.206.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b7:ee:b3:34:19:56:f2:98:80:65:6a:4f:cc:65:98:e4:4f:63:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 18 07:47:07 2022 GMT
            Not After : Jul 17 07:52:07 2023 GMT
        Subject: CN=29A0F761ED71BF1A056F88F09A3ACFE5B9DDF743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:71:d4:34:1d:85:5c:64:7e:3d:4e:76:45:
                    9d:dc:00:c8:4a:61:e0:ab:86:e2:55:54:b9:46:b8:
                    3d:29:ea:00:7c:e7:21:42:42:67:f6:1e:7e:a5:90:
                    b3:52:90:0c:ea:de:00:1f:73:b5:b2:32:d7:c5:22:
                    9e:f3:52:1d:a2:7e:5b:3b:d5:3e:97:6e:66:f9:f7:
                    2c:dd:83:36:4b:b4:1a:56:fd:aa:e4:eb:a6:c5:35:
                    b5:14:a8:12:be:10:59:2e:5e:ec:6f:b2:66:d8:a8:
                    7e:46:20:fc:d9:da:d0:13:1c:58:a1:a8:2d:07:84:
                    28:91:b3:be:a8:7c:5a:72:06:90:74:78:33:68:39:
                    58:34:5b:e7:b5:dc:e4:e4:8a:51:7d:d1:eb:c1:b1:
                    2b:1b:1b:e9:62:c7:fe:ce:f4:d7:b3:89:ee:00:1f:
                    11:d5:db:89:24:4b:dd:88:73:fe:3e:ed:2d:99:2a:
                    40:0a:db:d8:73:60:ec:bf:6c:cd:d5:23:a0:65:44:
                    d3:a7:2b:e3:d5:68:4c:9f:8f:08:f5:09:4b:7a:71:
                    b1:17:24:88:fb:3d:20:cc:d7:62:85:4f:e6:33:a4:
                    3c:62:52:5a:da:78:c1:63:be:d6:75:a1:39:c6:e1:
                    f1:e7:43:6b:2b:54:7b:cb:de:89:c1:fb:03:8c:b1:
                    c0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A0:F7:61:ED:71:BF:1A:05:6F:88:F0:9A:3A:CF:E5:B9:DD:F7:43
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38352e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:53:1c:49:9f:a8:86:4d:33:2c:5e:43:54:ff:44:20:da:2b:
         ed:b7:c2:7c:cc:45:bd:1e:72:12:3e:b3:00:c7:60:f4:be:e3:
         5e:37:44:09:b5:25:e8:ac:da:96:3e:49:a2:7e:20:0b:a5:bb:
         84:53:9c:4a:78:19:38:30:b8:d8:89:a2:2d:76:e9:ca:48:bd:
         74:40:6c:a5:35:1d:5e:3e:ba:e4:c1:bc:43:3e:ff:62:ac:66:
         7a:1a:1f:cd:f2:15:50:1d:00:03:a9:2f:68:ee:69:8a:37:bf:
         13:c2:68:8c:c6:cc:de:86:a0:38:43:56:a7:14:b0:34:de:2d:
         2a:4c:5d:36:3d:74:1f:05:9a:e3:eb:1e:b9:9d:83:bc:df:69:
         d9:eb:36:68:06:20:b2:e0:11:eb:25:0d:2d:55:1e:56:b2:46:
         fa:e0:fb:b7:8c:e8:bf:f0:c2:2c:68:8f:26:fb:73:61:be:57:
         72:e8:1e:33:69:70:5f:ac:fc:0d:88:9e:95:6b:40:47:07:7f:
         21:f2:cb:43:14:45:b4:9a:c5:75:d6:27:8a:a4:95:7e:82:97:
         fa:29:c5:0c:c3:99:f8:c5:21:70:ff:03:f0:63:50:09:a6:4a:
         f0:45:06:f6:93:34:db:d9:e6:79:7e:20:5a:9e:b6:f3:db:6d:
         5b:12:9e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----