Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38382e302f32342d3234203d3e2031323939.roa
File:                     3230362e3230362e38382e302f32342d3234203d3e2031323939.roa (raw, json)
Hash identifier:          VV2KUJhpDNfuhIXIVY6HCuGQtvHiG/V22i8QN49QnKI=
Subject key identifier:   80:F0:C4:9A:60:7D:19:50:BB:37:9B:EE:B1:05:FE:2B:E0:34:93:FE
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       57817FCBB5DF8566B9E889C450097D2E3A869E9A
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38382e302f32342d3234203d3e2031323939.roa
Signing time:             Mon 11 Jul 2022 08:30:49 +0000
ROA not before:           Mon 11 Jul 2022 08:25:49 +0000
ROA not after:            Mon 10 Jul 2023 08:30:49 +0000
asID:                     1299
IP address blocks:        206.206.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:81:7f:cb:b5:df:85:66:b9:e8:89:c4:50:09:7d:2e:3a:86:9e:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:49 2022 GMT
            Not After : Jul 10 08:30:49 2023 GMT
        Subject: CN=80F0C49A607D1950BB379BEEB105FE2BE03493FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3e:3b:fd:51:bf:96:57:32:24:db:ae:a0:a9:
                    85:eb:be:8b:04:e2:85:90:ad:f0:05:07:d8:09:de:
                    da:07:4d:e7:c7:4e:f7:95:ec:a7:92:03:8a:c6:37:
                    c0:88:8a:6c:83:ea:a4:0c:9f:f0:b2:7d:7f:9c:4c:
                    b7:3b:90:99:fe:41:bf:e2:48:75:69:8e:fd:77:ca:
                    55:ca:e9:7a:b5:93:aa:6c:f0:e7:4a:9a:27:98:60:
                    60:1f:61:c7:e3:24:30:87:cd:d1:61:17:20:67:a1:
                    4a:bd:e1:2b:99:7b:3f:25:f2:74:e8:ea:0c:c9:fe:
                    26:22:26:a6:23:2c:99:7f:19:d2:48:45:4b:98:39:
                    3c:b1:af:e5:93:7b:aa:fa:e6:6b:96:0a:7f:7d:3e:
                    c8:99:d2:c9:3d:b0:56:85:9c:f8:fe:b7:7c:ed:40:
                    db:3c:a3:c1:c6:ee:10:cc:54:2b:2c:94:5e:e6:6e:
                    b4:19:cc:64:a3:19:95:0e:95:5d:c9:3c:f4:6c:0e:
                    6f:ef:be:a3:b4:0e:c8:18:f5:a2:cf:c6:bf:9d:53:
                    49:7b:25:9d:ac:39:c4:1d:c0:20:06:7d:07:6e:82:
                    19:6f:73:09:24:ab:46:2c:44:33:62:ae:fe:8e:5f:
                    06:11:ce:7c:1e:f8:c7:e5:0b:44:27:c8:a7:05:94:
                    8e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F0:C4:9A:60:7D:19:50:BB:37:9B:EE:B1:05:FE:2B:E0:34:93:FE
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38382e302f32342d3234203d3e2031323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:46:fb:6c:92:e2:99:00:49:eb:26:b0:52:8d:3a:92:ae:36:
         a2:31:79:b4:08:fa:6b:12:71:0e:93:44:b5:d2:2a:7c:95:d0:
         c7:ba:fb:bb:bf:1f:7d:29:35:94:6d:cf:e2:ab:fc:d7:9e:6a:
         26:64:3f:d0:86:4e:d5:80:0a:41:77:53:d6:83:32:bc:56:9e:
         2e:a7:6d:aa:5d:30:30:bf:a9:7a:ec:94:57:b0:de:92:6b:c2:
         f7:cc:c8:8f:4d:5f:9e:53:dc:ea:e5:4b:d2:17:5c:d4:5d:ac:
         9a:05:eb:01:d8:63:73:44:38:01:7b:fd:0f:da:0c:c1:3f:d3:
         8c:05:12:bd:34:60:53:5e:c6:dd:fb:f5:20:a5:44:43:1d:ca:
         1f:be:b4:69:d0:97:6d:dd:0a:f9:bf:b9:55:67:80:48:0d:74:
         e0:01:0b:bc:db:6f:15:56:28:d7:12:79:f6:2a:9b:d4:a2:ce:
         9e:4d:c9:f2:2a:8b:da:ca:a5:a4:05:b0:ac:f4:38:f9:1c:3c:
         c0:44:33:7c:be:0a:db:7b:07:5e:72:90:bf:e2:bb:70:9e:97:
         29:92:27:14:fb:ee:4a:fc:ce:87:2b:20:3a:06:b8:48:67:7f:
         b3:53:ed:79:6f:8e:4d:f2:ce:e0:60:bc:30:03:5e:28:f8:c8:
         5d:e7:cf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----