Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS209737.roa
File:                     AS209737.roa (raw, json)
Hash identifier:          M8Cqgevw0CfMq99W9LXCzm1KC2AU97FWvBlb0GTTMuY=
Subject key identifier:   C2:A1:BC:91:48:0E:D6:80:54:26:D8:D2:9C:0D:87:7D:5A:94:F6:D6
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       46BB9F6E98BB2A3FD0F468A6D52F48C815898117
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS209737.roa
Signing time:             Mon 12 Sep 2022 16:25:26 +0000
ROA not before:           Mon 12 Sep 2022 16:20:26 +0000
ROA not after:            Mon 11 Sep 2023 16:25:26 +0000
asID:                     209737
IP address blocks:        206.206.112.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:bb:9f:6e:98:bb:2a:3f:d0:f4:68:a6:d5:2f:48:c8:15:89:81:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Sep 12 16:20:26 2022 GMT
            Not After : Sep 11 16:25:26 2023 GMT
        Subject: CN=C2A1BC91480ED6805426D8D29C0D877D5A94F6D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:40:01:2f:cc:5a:c8:70:35:54:a9:05:80:96:
                    6b:f5:89:13:81:a5:b0:bb:6e:a9:9e:d3:a2:e6:bf:
                    99:3c:16:38:6f:ef:68:d7:0f:d4:7e:d2:a6:2f:a9:
                    74:c6:f6:a2:84:5c:07:fe:c0:9b:87:4f:bf:7c:2c:
                    c4:6c:b9:a7:5c:df:d3:6f:3e:be:a1:b6:4e:70:14:
                    01:82:57:74:a0:ed:cf:e6:54:55:60:1e:9c:aa:63:
                    e7:46:19:a6:91:88:bf:aa:d8:ac:3e:3c:15:03:83:
                    36:4d:1e:1c:23:58:c6:4e:e0:6e:97:fd:e2:4b:e6:
                    dd:14:b2:a9:03:a9:46:09:92:36:6d:8a:25:b2:16:
                    ea:ef:4b:3c:45:78:1e:0e:09:4a:24:ac:f6:74:09:
                    18:85:aa:c1:7c:b3:d8:9b:09:6c:9d:56:a7:fa:e9:
                    80:d8:fd:3a:b4:3a:f2:71:4a:92:8f:88:44:4d:4a:
                    73:9b:6c:23:c2:38:4f:65:64:8a:c4:63:a0:3f:74:
                    74:87:2a:57:68:cf:51:9b:fd:38:e1:ca:9d:9f:51:
                    8e:5a:fe:3c:9e:12:2e:74:90:74:0b:f4:67:cd:6e:
                    f5:00:a3:08:7e:6f:6e:f5:41:2b:98:41:45:a3:d0:
                    9b:1c:46:e8:e6:4d:53:2f:f7:fe:b8:07:7e:63:ef:
                    9d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:A1:BC:91:48:0E:D6:80:54:26:D8:D2:9C:0D:87:7D:5A:94:F6:D6
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS209737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:59:33:4d:d4:c9:ad:dc:c6:d5:7f:5d:02:a7:57:35:73:3c:
         5f:fd:c8:91:cd:18:03:d8:30:fc:36:ca:a9:14:64:32:d2:80:
         90:be:c9:e3:35:3b:47:c9:2c:4b:f1:71:68:32:13:e1:33:e4:
         3f:09:f3:fc:c1:a8:5c:2b:94:1f:1c:bf:c0:43:f1:05:20:02:
         ed:2f:9d:51:1e:c8:dc:ab:a0:51:fd:87:79:6e:06:2c:f6:73:
         7e:3f:d1:47:18:5e:3b:cd:90:b4:84:6a:b4:68:be:38:d4:8a:
         03:cc:97:1c:3e:b7:48:e5:6c:7d:c0:9a:d5:40:16:a1:31:48:
         78:30:47:c2:d3:51:e6:4a:9a:3d:a5:9c:32:c5:51:e2:cb:f9:
         7e:76:57:97:42:31:d8:95:7f:8e:e9:c1:c3:e1:cc:ff:52:39:
         a1:16:57:62:c5:83:a4:ec:f6:f6:03:11:a8:02:a0:4e:25:0f:
         11:ea:65:23:89:68:c7:cb:29:3a:07:ff:de:79:6c:e9:59:e6:
         1d:2f:4d:0d:ad:a0:7e:86:52:01:9e:b8:35:a3:ea:1e:b8:93:
         e5:61:aa:2e:f5:85:05:c9:de:d1:fe:12:d4:4f:27:5d:81:2a:
         1d:67:0e:24:1f:b5:34:3a:ca:f9:9e:b3:7d:6e:7f:9f:3b:a8:
         b1:9f:a3:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----