Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38392e302f32342d3234203d3e2031323939.roa
File:                     3230362e3230362e38392e302f32342d3234203d3e2031323939.roa (raw, json)
Hash identifier:          pymYl4gbs9F4g3gy+xFflhzk/Dibnji9VlIJX7EjYns=
Subject key identifier:   4F:5A:6E:6D:93:4D:CE:2A:9D:DE:CF:F3:C3:11:EB:59:0F:10:32:7E
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       164FAD32F0FCDFE40703D56A4F92C32497B9ABF8
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38392e302f32342d3234203d3e2031323939.roa
Signing time:             Mon 11 Jul 2022 08:30:40 +0000
ROA not before:           Mon 11 Jul 2022 08:25:40 +0000
ROA not after:            Mon 10 Jul 2023 08:30:40 +0000
asID:                     1299
IP address blocks:        206.206.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:4f:ad:32:f0:fc:df:e4:07:03:d5:6a:4f:92:c3:24:97:b9:ab:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:40 2022 GMT
            Not After : Jul 10 08:30:40 2023 GMT
        Subject: CN=4F5A6E6D934DCE2A9DDECFF3C311EB590F10327E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:86:2e:4a:7a:ac:f7:4e:8e:f7:89:23:a8:e3:
                    3e:13:ff:b0:0c:77:19:86:de:5d:bd:3f:d1:a1:e6:
                    42:03:3e:5d:4d:e0:14:f9:41:f4:98:ca:2a:69:f4:
                    8d:d6:0f:bb:2b:19:eb:77:9b:2f:cd:49:6d:69:62:
                    91:b4:86:52:60:90:a1:76:67:e2:ee:d1:08:4b:8b:
                    69:9b:e8:7e:ca:8a:6b:0e:07:3e:05:f4:64:ca:b1:
                    d2:fc:c2:92:e4:de:a2:82:a1:97:1a:7e:2a:53:c9:
                    f0:d4:42:e0:51:47:36:c4:12:50:3f:18:36:58:8f:
                    12:de:0e:5a:b4:4e:9b:d6:fe:3f:07:ee:d6:c4:31:
                    3b:9a:da:9d:55:ef:a2:b1:35:08:d6:d5:b2:0d:48:
                    14:65:ab:e3:2a:4e:df:42:8b:25:7a:6a:fc:0a:fe:
                    73:b3:45:9b:eb:70:4f:9e:50:74:8c:a7:2d:5d:55:
                    83:fd:ee:f5:f4:1f:df:1b:88:b0:c8:1c:6c:8b:e3:
                    ed:b0:95:14:1f:e1:89:c7:dd:0a:6e:b5:21:89:53:
                    16:d9:28:a7:4e:66:da:55:d4:f6:5d:b7:c5:d2:e6:
                    95:e2:6a:ca:9d:e3:e4:22:db:c0:4e:56:d0:51:27:
                    7f:91:ee:8c:20:53:ca:4f:af:d7:81:80:a5:5f:56:
                    2d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5A:6E:6D:93:4D:CE:2A:9D:DE:CF:F3:C3:11:EB:59:0F:10:32:7E
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38392e302f32342d3234203d3e2031323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:00:fa:a6:14:fc:51:9f:c6:c2:93:46:85:f6:64:17:5d:ef:
         be:7f:25:04:04:36:49:15:28:b5:6c:8b:1f:db:ba:82:e7:ee:
         1f:7c:0c:8d:58:2a:be:1f:67:1c:bd:12:73:5f:a4:23:56:c1:
         c3:c2:82:5c:1e:91:fd:5c:b7:2b:7b:d9:00:4d:b2:f5:fc:88:
         ec:e3:f4:2b:bc:23:b7:64:31:eb:2e:c5:dc:1b:13:cc:d6:69:
         85:21:f9:28:f4:ff:08:a1:36:33:07:89:f2:01:24:41:e9:17:
         11:72:7d:34:f7:0c:90:7a:7e:f2:24:ec:53:3e:fd:00:74:29:
         d4:55:07:54:16:8a:fc:7b:55:17:9a:b4:2b:33:44:85:0a:ad:
         45:26:77:82:aa:90:6b:2a:1e:a9:b2:d9:c2:f0:ab:f0:79:e3:
         41:3a:ad:04:7c:57:b9:f2:eb:15:17:ed:9c:cf:bd:37:6e:92:
         21:02:9a:9c:9d:f8:57:c0:bb:72:b8:8b:f7:fd:af:6b:f2:c9:
         44:5c:b6:f7:ff:91:6e:35:64:00:7f:3d:fa:76:b6:26:d1:bd:
         14:b4:02:41:ad:c3:6d:aa:54:b2:ab:25:a0:3b:4b:ef:14:83:
         79:5d:11:19:b8:80:e2:95:62:23:fd:70:1c:e4:1c:6c:8d:0c:
         49:3d:d4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----