Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38372e302f32342d3234203d3e2037303138.roa
File:                     3230362e3230362e38372e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          uY2+uOsQHhx0ZH2y/zmSAJWZptJzAG2C/DmOCDrQGc8=
Subject key identifier:   73:D2:F9:C3:9E:E9:87:93:64:8E:91:36:E0:D5:66:3F:B9:94:B5:4B
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       4B9C60719EA41A96226B16E1EE0A88D17D828486
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38372e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 11 Jul 2022 08:30:42 +0000
ROA not before:           Mon 11 Jul 2022 08:25:42 +0000
ROA not after:            Mon 10 Jul 2023 08:30:42 +0000
asID:                     7018
IP address blocks:        206.206.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:9c:60:71:9e:a4:1a:96:22:6b:16:e1:ee:0a:88:d1:7d:82:84:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:42 2022 GMT
            Not After : Jul 10 08:30:42 2023 GMT
        Subject: CN=73D2F9C39EE98793648E9136E0D5663FB994B54B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:17:25:d0:79:5d:57:1b:86:26:07:2c:e0:f1:
                    55:03:77:6c:5a:44:c0:7f:e0:e3:47:8f:3a:81:19:
                    7c:57:73:ad:c8:77:70:f4:3a:95:7e:23:ca:7a:08:
                    af:16:8a:79:8b:da:15:cf:55:9d:d8:8b:7f:9a:33:
                    2e:ba:9d:4b:2c:b7:de:da:69:ac:96:40:0f:15:b6:
                    82:13:ed:74:07:50:ee:77:2c:c8:82:8d:b2:8c:1e:
                    fb:6e:0b:c5:3e:d2:a0:8c:d2:91:e7:1c:25:2b:7d:
                    54:ed:e6:52:2a:3c:1d:27:11:49:61:77:5e:37:e4:
                    58:72:15:1b:dc:c1:01:7d:0a:8d:a2:e8:e9:ff:ca:
                    73:a0:e9:2f:03:d1:c8:f4:b2:b9:74:07:d0:fa:ad:
                    77:e2:68:44:0d:18:03:53:98:9c:e5:a6:0a:97:45:
                    19:ce:ac:f5:9b:f6:31:39:dd:ce:6d:d3:14:cb:f4:
                    b0:dc:2a:7f:d9:f9:d1:5b:c5:5d:a2:e7:55:ef:99:
                    40:22:a6:c3:03:da:0f:7c:2f:48:90:73:c0:29:f0:
                    6c:d2:53:b6:7d:70:7f:d4:e1:cd:1f:76:59:5b:e9:
                    e1:d7:cf:59:4e:98:0d:93:ed:14:b8:de:2c:ed:33:
                    09:0b:ab:f2:fa:db:c8:a7:63:3b:ec:21:e9:4c:d1:
                    ca:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D2:F9:C3:9E:E9:87:93:64:8E:91:36:E0:D5:66:3F:B9:94:B5:4B
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38372e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:b9:d3:25:4d:6f:5c:3e:a1:0f:36:43:94:fb:25:72:f1:47:
         a0:bb:b1:78:db:7b:ec:ee:9e:a8:ac:fc:f3:d7:74:63:9b:08:
         bb:3b:5e:e2:28:ae:be:95:62:24:5b:c1:06:a4:92:74:7e:37:
         74:0e:cb:36:11:58:80:ac:92:82:a6:72:4e:b5:4d:f2:1f:80:
         cb:5a:7b:f4:1f:14:c2:87:8b:85:0b:f0:26:9a:76:19:b0:3d:
         d1:33:f0:0c:02:4e:1c:88:74:3b:d3:46:d6:c1:30:fe:08:37:
         8e:7e:96:71:9c:a3:38:d0:79:6c:90:4d:00:0d:38:1a:3c:0d:
         bc:21:10:19:27:cd:25:a6:d0:b0:e6:77:77:6e:dd:e9:c3:ce:
         d9:9c:98:e2:c8:a0:a9:19:f5:a4:bd:e4:4a:78:1f:ce:78:4c:
         52:af:d3:af:57:21:0c:3d:90:8d:5c:69:29:73:07:bb:8f:43:
         f3:8c:d4:91:da:e4:29:70:34:71:15:d5:9a:87:98:ee:7f:bf:
         0c:f8:26:0e:e4:ca:d0:10:e6:07:6a:32:1f:b3:1c:61:94:12:
         e6:6a:06:0a:cd:99:e5:dd:24:36:76:fc:ae:47:2f:3a:1a:6b:
         a8:70:e6:08:3b:06:01:4c:34:cd:a3:9d:5c:67:23:e9:66:f1:
         fe:9e:f4:b9
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUS5xgcZ6kGpYiaxbh7gqI0X2ChIYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzVhYzRmOTM5OWUxMDJhMWYxNjE3Mzg0
MjBlM2Q2MzIwMzkyODA3MDQwHhcNMjIwNzExMDgyNTQyWhcNMjMwNzEwMDgzMDQy
WjAzMTEwLwYDVQQDEyg3M0QyRjlDMzlFRTk4NzkzNjQ4RTkxMzZFMEQ1NjYzRkI5
OTRCNTRCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxcl0HldVxuG
Jgcs4PFVA3dsWkTAf+DjR486gRl8V3OtyHdw9DqVfiPKegivFop5i9oVz1Wd2It/
mjMuup1LLLfe2mmslkAPFbaCE+10B1DudyzIgo2yjB77bgvFPtKgjNKR5xwlK31U
7eZSKjwdJxFJYXdeN+RYchUb3MEBfQqNoujp/8pzoOkvA9HI9LK5dAfQ+q134mhE
DRgDU5ic5aYKl0UZzqz1m/YxOd3ObdMUy/Sw3Cp/2fnRW8VdoudV75lAIqbDA9oP
fC9IkHPAKfBs0lO2fXB/1OHNH3ZZW+nh189ZTpgNk+0UuN4s7TMJC6vy+tvIp2M7
7CHpTNHKRQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHPS+cOe6YeTZI6RNuDVZj+5
lLVLMB8GA1UdIwQYMBaAFDZYbDCQKAc8purTaI49iJMIc2WHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzAv
MzY1ODZDMzA5MDI4MDczQ0E2RUFEMzY4OEUzRDg4OTMwODczNjU4Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNWFjNGY5Mzk5ZTEwMmExZjE2MTczODQyMGUzZDYzMjAzOTI4MDcwNC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWVj
NWYyODQwNjI1YS8wLzMyMzAzNjJlMzIzMDM2MmUzODM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADOzlcwDQYJKoZIhvcNAQELBQAD
ggEBAAa50yVNb1w+oQ82Q5T7JXLxR6C7sXjbe+zunqis/PPXdGObCLs7XuIorr6V
YiRbwQakknR+N3QOyzYRWICskoKmck61TfIfgMtae/QfFMKHi4UL8CaadhmwPdEz
8AwCThyIdDvTRtbBMP4IN45+lnGcozjQeWyQTQANOBo8DbwhEBknzSWm0LDmd3du
3enDztmcmOLIoKkZ9aS95Ep4H854TFKv069XIQw9kI1caSlzB7uPQ/OM1JHa5Clw
NHEV1ZqHmO5/vwz4Jg7kytAQ5gdqMh+zHGGUEuZqBgrNmeXdJDZ2/K5HLzoaa6hw
5gg7BgFMNM2jnVxnI+lm8f6e9Lk=
-----END CERTIFICATE-----