Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e39302e302f32342d3234203d3e2031323939.roa
File:                     3230362e3230362e39302e302f32342d3234203d3e2031323939.roa (raw, json)
Hash identifier:          px2p2pHh/t4Z/GpVGFyzrmmeiuMaQRRSKdA8X+NcCXs=
Subject key identifier:   2E:E2:A5:47:44:A9:08:04:CA:1A:DC:F5:00:73:41:1A:A5:66:C1:E6
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       335B734C21FCFE297239777274D423429E428A03
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e39302e302f32342d3234203d3e2031323939.roa
Signing time:             Mon 11 Jul 2022 08:30:45 +0000
ROA not before:           Mon 11 Jul 2022 08:25:45 +0000
ROA not after:            Mon 10 Jul 2023 08:30:45 +0000
asID:                     1299
IP address blocks:        206.206.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5b:73:4c:21:fc:fe:29:72:39:77:72:74:d4:23:42:9e:42:8a:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:45 2022 GMT
            Not After : Jul 10 08:30:45 2023 GMT
        Subject: CN=2EE2A54744A90804CA1ADCF50073411AA566C1E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:66:95:ee:73:0d:db:90:0f:27:34:24:45:08:
                    a7:73:fc:b0:5c:23:05:9f:61:46:63:ef:46:da:48:
                    76:df:f9:84:f1:7e:73:02:84:ef:27:b0:c3:c7:3e:
                    35:58:2d:92:69:13:01:a2:3a:d4:cc:c3:99:f7:ac:
                    a1:be:05:d7:1f:da:5f:39:ad:e6:35:e2:92:20:92:
                    0e:7d:1f:cd:79:6d:af:0f:db:cb:7d:b7:99:57:d1:
                    05:38:cb:e6:24:b0:d0:09:12:7b:e4:c1:7b:06:0e:
                    ae:d9:66:5e:e3:d4:ab:54:50:87:c5:ee:79:2b:20:
                    c1:02:e4:a2:30:e6:f5:03:cf:a2:bc:4f:63:52:1f:
                    d4:77:17:e4:59:4d:d8:fc:27:46:1a:b7:46:48:bf:
                    b9:b6:c2:72:e7:f3:07:90:30:70:74:11:c1:3a:ff:
                    36:1f:f3:3d:77:40:b1:9b:81:2e:a9:8d:71:0a:26:
                    67:39:90:72:94:f5:9c:bd:ec:2e:9a:b2:43:cb:98:
                    0d:42:15:ac:18:c5:8d:72:52:60:87:98:ad:60:29:
                    20:21:37:51:f9:e5:c8:8f:55:3f:cc:6f:68:0c:37:
                    0b:f6:56:78:ae:a1:ca:d2:d8:37:7b:31:b2:cd:7b:
                    97:8b:ed:80:d8:37:0f:e8:e1:fd:32:72:4b:67:ab:
                    e6:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E2:A5:47:44:A9:08:04:CA:1A:DC:F5:00:73:41:1A:A5:66:C1:E6
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3230362e3230362e39302e302f32342d3234203d3e2031323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:6b:17:e0:7a:9f:33:4d:a0:dc:6a:26:b5:37:f8:6a:ad:bd:
         10:99:18:7f:b0:a3:a4:53:60:57:8a:89:83:4c:da:48:64:6d:
         ae:36:06:38:7e:57:4a:3e:31:3a:a4:f3:77:87:cf:1b:8a:3b:
         ad:2b:7a:d0:12:fa:fb:11:8c:e2:a3:70:ba:60:61:b6:9b:dd:
         a0:33:cd:f8:62:85:d7:88:63:3f:20:ba:9c:74:6c:2c:aa:3c:
         74:c3:f2:99:2e:08:70:f8:69:5f:4b:49:70:39:b5:d4:e5:5c:
         60:ab:20:36:6e:7d:41:8a:7b:8d:83:c9:c7:5d:a3:8a:62:97:
         03:1b:d2:08:f6:15:e1:dd:f8:56:92:4f:19:07:4b:fc:1e:64:
         29:30:9d:a2:12:c0:f7:91:a6:e2:1d:f2:bd:cc:2a:58:f7:ae:
         c4:bf:ca:0b:39:c4:55:58:10:20:44:4a:12:d1:c7:e8:13:bc:
         57:7f:19:04:67:8a:84:a6:0b:23:59:e9:e9:25:bc:76:6b:a1:
         ce:eb:6d:aa:a6:fa:5f:24:b2:9f:82:71:95:d9:b4:0c:47:95:
         d8:36:da:82:c0:71:83:4a:1b:62:fb:bb:17:36:b9:96:07:64:
         e1:b3:36:c6:96:ce:fd:ca:ba:d2:ee:05:04:bb:06:2f:eb:11:
         25:c8:a1:a7
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUM1tzTCH8/ilyOXdydNQjQp5CigMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzVhYzRmOTM5OWUxMDJhMWYxNjE3Mzg0
MjBlM2Q2MzIwMzkyODA3MDQwHhcNMjIwNzExMDgyNTQ1WhcNMjMwNzEwMDgzMDQ1
WjAzMTEwLwYDVQQDEygyRUUyQTU0NzQ0QTkwODA0Q0ExQURDRjUwMDczNDExQUE1
NjZDMUU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2aV7nMN25AP
JzQkRQinc/ywXCMFn2FGY+9G2kh23/mE8X5zAoTvJ7DDxz41WC2SaRMBojrUzMOZ
96yhvgXXH9pfOa3mNeKSIJIOfR/NeW2vD9vLfbeZV9EFOMvmJLDQCRJ75MF7Bg6u
2WZe49SrVFCHxe55KyDBAuSiMOb1A8+ivE9jUh/UdxfkWU3Y/CdGGrdGSL+5tsJy
5/MHkDBwdBHBOv82H/M9d0Cxm4EuqY1xCiZnOZBylPWcvewumrJDy5gNQhWsGMWN
clJgh5itYCkgITdR+eXIj1U/zG9oDDcL9lZ4rqHK0tg3ezGyzXuXi+2A2DcP6OH9
MnJLZ6vmawIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFC7ipUdEqQgEyhrc9QBzQRql
ZsHmMB8GA1UdIwQYMBaAFDZYbDCQKAc8purTaI49iJMIc2WHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzAv
MzY1ODZDMzA5MDI4MDczQ0E2RUFEMzY4OEUzRDg4OTMwODczNjU4Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNWFjNGY5Mzk5ZTEwMmExZjE2MTczODQyMGUzZDYzMjAzOTI4MDcwNC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWVj
NWYyODQwNjI1YS8wLzMyMzAzNjJlMzIzMDM2MmUzOTMwMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzMjM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADOzlowDQYJKoZIhvcNAQELBQAD
ggEBAFprF+B6nzNNoNxqJrU3+GqtvRCZGH+wo6RTYFeKiYNM2khkba42Bjh+V0o+
MTqk83eHzxuKO60retAS+vsRjOKjcLpgYbab3aAzzfhihdeIYz8gupx0bCyqPHTD
8pkuCHD4aV9LSXA5tdTlXGCrIDZufUGKe42Dycddo4pilwMb0gj2FeHd+FaSTxkH
S/weZCkwnaISwPeRpuId8r3MKlj3rsS/ygs5xFVYECBEShLRx+gTvFd/GQRnioSm
CyNZ6eklvHZroc7rbaqm+l8ksp+CcZXZtAxHldg22oLAcYNKG2L7uxc2uZYHZOGz
NsaWzv3KutLuBQS7Bi/rESXIoac=
-----END CERTIFICATE-----