Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38392e302f32342d3234203d3e20333938343635.roa
File:                     3230362e3230362e38392e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          JZwM7tvnxSpIQ19K4yLao0PK8yCNuO9SicNLbKLeACQ=
Subject key identifier:   EA:59:B2:35:C2:68:32:22:DB:57:F4:AB:29:CC:8F:68:B3:A0:06:35
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       20B838AB1B6C54BF3CFBE066848E3185092BAC29
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38392e302f32342d3234203d3e20333938343635.roa
Signing time:             Mon 11 Jul 2022 08:30:52 +0000
ROA not before:           Mon 11 Jul 2022 08:25:52 +0000
ROA not after:            Mon 10 Jul 2023 08:30:52 +0000
asID:                     398465
IP address blocks:        206.206.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:b8:38:ab:1b:6c:54:bf:3c:fb:e0:66:84:8e:31:85:09:2b:ac:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:52 2022 GMT
            Not After : Jul 10 08:30:52 2023 GMT
        Subject: CN=EA59B235C2683222DB57F4AB29CC8F68B3A00635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c0:52:b8:e1:2f:ca:6e:8c:c3:13:80:c7:c2:
                    71:bb:15:76:4f:93:22:99:bb:18:8b:b7:f6:c2:4d:
                    1d:7e:a5:d4:3a:05:b0:6f:c5:dc:a3:72:63:55:b4:
                    6d:5e:ed:43:f6:f3:64:eb:89:4b:7d:d6:e2:b4:5d:
                    f0:e7:43:f7:79:9e:1a:18:dc:9a:65:1c:3b:06:b2:
                    7b:dc:26:10:78:d3:ba:c4:75:5b:ff:bb:62:38:e0:
                    54:d3:03:10:99:2b:bb:4f:1d:1d:c5:40:60:44:6c:
                    e6:f7:07:fa:8d:ba:f0:18:c7:2e:f1:41:1f:21:f0:
                    12:2e:5a:fb:5b:c6:31:83:3b:d3:77:61:c3:03:68:
                    59:e0:a1:4f:41:2a:0f:2e:fa:c4:56:3b:e6:58:d7:
                    f5:b6:db:d4:77:e0:7b:0d:1a:77:4a:b4:7a:47:2d:
                    04:97:a3:26:34:99:5f:54:8c:16:18:80:82:88:f4:
                    28:64:25:f1:13:55:9b:22:06:3f:c1:77:6a:e3:5b:
                    a4:93:d0:51:36:b7:73:e5:f6:c2:52:05:81:9b:fe:
                    e1:b9:b8:b1:0c:d6:ad:c4:e4:62:a0:58:8a:80:ea:
                    c7:11:7b:8e:d9:22:ec:0c:b3:f1:05:46:60:86:c2:
                    87:fb:39:bc:96:9f:df:92:87:9c:79:6a:fc:0f:bf:
                    29:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:59:B2:35:C2:68:32:22:DB:57:F4:AB:29:CC:8F:68:B3:A0:06:35
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e38392e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:0c:1c:26:29:6d:c6:f9:f8:22:8c:e8:15:7d:65:ac:82:93:
         ed:20:e4:8c:82:d0:8b:1b:92:44:39:b7:a3:f3:cb:ee:45:2c:
         99:91:f4:2c:a0:14:67:78:17:57:c4:f6:35:ea:28:00:75:b0:
         02:4f:27:ee:1a:80:b8:8a:88:40:53:a0:e2:12:20:78:ba:1a:
         66:13:b5:dd:12:1e:04:98:01:f5:27:33:fc:4f:47:94:e0:7f:
         85:7b:f6:52:19:09:ef:05:07:bc:a5:e9:e0:4b:f2:32:fa:90:
         97:04:b1:da:34:1f:c3:98:bf:05:d8:86:c5:a1:06:ef:ab:31:
         ba:37:3a:8e:f0:3b:9f:bd:d8:f4:a5:ab:71:c0:8f:a3:46:f5:
         bb:1a:66:ca:de:bc:a2:a8:e9:fd:eb:ca:de:37:84:ed:7d:aa:
         d4:e4:8c:46:ad:2f:a4:60:39:e7:d9:34:55:41:9b:da:01:98:
         34:27:8a:57:ed:f2:02:49:b5:62:ef:9c:a7:83:fe:98:96:f5:
         38:ae:67:20:13:6e:83:4d:da:c2:98:61:7f:bc:55:f9:dd:f9:
         03:bb:4c:25:d4:7c:23:6a:2d:f9:1d:e7:79:5a:e5:28:ce:0b:
         bf:61:b9:e7:96:2e:4b:4d:82:cd:88:f8:fc:64:aa:88:77:60:
         96:5b:2a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----