Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS53397.roa
File:                     AS53397.roa (raw, json)
Hash identifier:          oGPD+zuO+Ga3420rDT16ezzOBFdqCDyoAKq1T0ZY1R8=
Subject key identifier:   37:BF:97:F9:83:FE:8B:21:5F:06:3C:60:C4:5A:B2:C0:36:D7:DC:10
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       2805471DD13977982718977B92557592593BF666
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS53397.roa
Signing time:             Mon 28 Nov 2022 09:41:21 +0000
ROA not before:           Mon 28 Nov 2022 09:36:21 +0000
ROA not after:            Mon 27 Nov 2023 09:41:21 +0000
asID:                     53397
IP address blocks:        206.206.111.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:05:47:1d:d1:39:77:98:27:18:97:7b:92:55:75:92:59:3b:f6:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:21 2022 GMT
            Not After : Nov 27 09:41:21 2023 GMT
        Subject: CN=37BF97F983FE8B215F063C60C45AB2C036D7DC10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3a:9a:c1:8a:a3:d4:67:05:d0:af:09:77:a0:
                    f4:fd:3c:82:ac:25:48:08:ec:f0:56:9a:5a:f0:26:
                    48:bd:61:96:35:5b:0e:6c:e1:c1:b0:e8:a7:0c:79:
                    b5:ed:72:b2:b0:f1:06:12:ea:94:c4:c1:d4:ff:d2:
                    05:e3:db:e8:53:8c:c7:37:30:48:55:15:83:3c:ef:
                    54:e9:1d:9a:9e:90:d6:29:95:0b:a3:5d:f8:41:40:
                    0f:ab:74:d3:75:68:17:ac:eb:e7:62:1e:c8:cd:a2:
                    9e:5b:9a:4c:7b:3c:ad:3c:73:62:0c:dc:b2:8c:4c:
                    a0:fc:80:3a:7f:e9:1a:b5:9e:09:ce:78:a6:ff:41:
                    15:ba:9f:d6:cb:d3:2d:18:c2:21:95:80:0c:8a:80:
                    be:65:ab:87:18:d9:ec:8d:8a:6e:3e:21:4f:43:45:
                    d2:33:6e:4e:b6:81:09:f5:fe:8b:04:b1:60:41:88:
                    72:e2:12:9b:38:3b:98:64:23:ac:be:b6:c6:cc:34:
                    bd:d8:e9:21:5e:d0:4b:4e:d3:c3:cd:f4:bb:41:97:
                    75:c2:cc:11:32:e8:9e:95:8e:aa:b2:5e:4d:13:c0:
                    70:33:3a:c3:11:a5:21:bc:53:5d:04:3d:d8:6c:a4:
                    a4:d0:f5:da:91:41:34:4a:99:07:93:f9:72:42:c8:
                    fc:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BF:97:F9:83:FE:8B:21:5F:06:3C:60:C4:5A:B2:C0:36:D7:DC:10
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS53397.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.206.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:d3:d6:02:e7:45:f1:19:99:ee:d2:ea:35:ec:5f:36:8d:70:
         91:88:c9:b6:17:c3:ef:09:66:c3:9e:12:a9:f2:1d:a3:91:f2:
         7e:b2:1c:5a:66:23:13:46:49:28:e8:4a:e6:52:4c:db:45:df:
         00:c5:fa:5a:fb:36:32:b0:71:2f:3e:4f:79:75:08:e5:8a:22:
         7c:38:9d:09:86:55:18:18:36:58:30:e6:75:86:41:a8:26:d6:
         ec:e3:5b:50:9a:bb:fa:57:e2:2a:c8:63:e3:3f:52:0c:55:87:
         f9:4e:62:eb:13:e1:0a:7a:49:13:8f:4e:bc:bb:02:86:32:e7:
         74:ab:c4:19:5d:d9:4a:43:ef:b2:f3:38:c8:3d:9c:06:9e:86:
         b1:de:d4:d5:23:31:0b:d3:07:fb:f8:8f:17:a1:f1:c0:81:a3:
         a3:72:7a:60:bf:da:e7:4f:b9:aa:76:0d:0c:ee:03:0a:71:81:
         4c:c2:9a:6b:98:d5:d4:1c:26:ec:8b:e0:2a:4b:2b:fd:77:83:
         83:0b:47:66:94:93:43:8c:7a:04:c9:8f:c7:3e:e3:2f:e8:a6:
         c1:ed:ea:b0:62:9c:f7:2b:90:54:d9:5a:51:6f:79:44:d7:73:
         a5:cc:4c:a1:00:ce:88:63:20:4b:f8:69:ac:bd:91:79:f8:12:
         65:29:d4:a1
-----BEGIN CERTIFICATE-----
MIIFfjCCBGagAwIBAgIUKAVHHdE5d5gnGJd7klV1klk79mYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDJkNzc4NWRjMzU5NjU0M2E0YzkwYzM5OGFkN2VmNjk5
YmRlOGM3OWVkZDJlMGI4YWMwHhcNMjIxMTI4MDkzNjIxWhcNMjMxMTI3MDk0MTIx
WjAzMTEwLwYDVQQDEygzN0JGOTdGOTgzRkU4QjIxNUYwNjNDNjBDNDVBQjJDMDM2
RDdEQzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jqawYqj1GcF
0K8Jd6D0/TyCrCVICOzwVppa8CZIvWGWNVsObOHBsOinDHm17XKysPEGEuqUxMHU
/9IF49voU4zHNzBIVRWDPO9U6R2anpDWKZULo134QUAPq3TTdWgXrOvnYh7IzaKe
W5pMezytPHNiDNyyjEyg/IA6f+katZ4Jznim/0EVup/Wy9MtGMIhlYAMioC+ZauH
GNnsjYpuPiFPQ0XSM25OtoEJ9f6LBLFgQYhy4hKbODuYZCOsvrbGzDS92OkhXtBL
TtPDzfS7QZd1wswRMuielY6qsl5NE8BwMzrDEaUhvFNdBD3YbKSk0PXakUE0SpkH
k/lyQsj8OwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFDe/l/mD/oshXwY8YMRassA2
19wQMB8GA1UdIwQYMBaAFEzEOYug/lCqoIv6I/5wGtDCBgR/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZWM1ZjI4NDA2MjVhLzEv
NENDNDM5OEJBMEZFNTBBQUEwOEJGQTIzRkU3MDFBRDBDMjA2MDQ3Ri5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzVhNmNkNGUzLTQwMWYtNGYxZC1iNjc1LWIwZDk5NTg0NDAzOS8wMmQ3
Nzg1ZGMzNTk2NTQzYTRjOTBjMzk4YWQ3ZWY2OTliZGU4Yzc5ZWRkMmUwYjhhYy5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGU4MGYxYTgwYTAxODFlYzVmMjg0
MDYyNWEvMS9BUzUzMzk3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzs5vMA0GCSqGSIb3DQEBCwUAA4IB
AQAI09YC50XxGZnu0uo17F82jXCRiMm2F8PvCWbDnhKp8h2jkfJ+shxaZiMTRkko
6ErmUkzbRd8Axfpa+zYysHEvPk95dQjliiJ8OJ0JhlUYGDZYMOZ1hkGoJtbs41tQ
mrv6V+IqyGPjP1IMVYf5TmLrE+EKekkTj068uwKGMud0q8QZXdlKQ++y8zjIPZwG
noax3tTVIzEL0wf7+I8XofHAgaOjcnpgv9rnT7mqdg0M7gMKcYFMwpprmNXUHCbs
i+AqSyv9d4ODC0dmlJNDjHoEyY/HPuMv6KbB7eqwYpz3K5BU2VpRb3lE13OlzEyh
AM6IYyBL+GmsvZF5+BJlKdSh
-----END CERTIFICATE-----