Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3136312e302f32342d3234203d3e20333935313131.roa
File:                     3231362e3132322e3136312e302f32342d3234203d3e20333935313131.roa (raw, json)
Hash identifier:          mJmbdj5iax0RnoKPFUR0VVvfqC+ECv7R5GcN0tWmmZk=
Subject key identifier:   87:5E:FC:CF:4A:E5:DA:2C:90:07:73:D0:BE:39:DA:A4:D9:AA:5E:AB
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       55D5FD7271261F357A9F7341F408EF9BC9D30B2F
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3136312e302f32342d3234203d3e20333935313131.roa
Signing time:             Mon 11 Jul 2022 08:30:51 +0000
ROA not before:           Mon 11 Jul 2022 08:25:51 +0000
ROA not after:            Mon 10 Jul 2023 08:30:51 +0000
asID:                     395111
IP address blocks:        216.122.161.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d5:fd:72:71:26:1f:35:7a:9f:73:41:f4:08:ef:9b:c9:d3:0b:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:51 2022 GMT
            Not After : Jul 10 08:30:51 2023 GMT
        Subject: CN=875EFCCF4AE5DA2C900773D0BE39DAA4D9AA5EAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:95:52:c5:31:7f:98:5c:8a:e6:00:cc:6c:ab:
                    22:fd:67:89:82:2f:a6:ac:76:db:4b:9f:ed:ee:2e:
                    61:ec:75:b4:06:34:5b:ec:81:d3:da:78:af:1a:ec:
                    80:ca:b9:fa:9e:14:dc:f2:1e:fa:ef:e2:37:e2:58:
                    c4:be:a5:d4:9a:a0:92:a2:c2:e7:e3:4b:b4:0d:7e:
                    8f:81:56:7e:de:9d:5f:8e:09:a5:c8:c3:4f:d6:d1:
                    89:b3:09:fa:ce:b0:b6:e3:98:0e:42:de:b1:dc:7f:
                    bd:ef:8c:80:73:ae:35:ad:68:33:06:c6:05:06:ba:
                    87:97:c2:2e:25:8b:ca:39:57:62:4c:5a:e1:22:4f:
                    3c:72:29:eb:38:69:2e:05:99:5d:94:c7:e6:a4:26:
                    e3:fc:ea:0f:63:d0:f9:53:ef:74:49:b8:a9:8a:cb:
                    e4:65:e6:9e:34:fd:fa:cd:0c:8b:df:2f:08:6c:e4:
                    57:ff:6a:07:ea:bf:e3:12:6d:31:54:38:48:69:35:
                    d9:b6:c3:99:68:96:62:80:4c:8f:bc:ee:8e:f7:18:
                    c6:51:fc:92:38:be:af:76:c9:e4:fc:30:c3:35:97:
                    a2:47:be:b3:e8:07:be:ce:fa:c6:f5:b7:c8:6c:ae:
                    8d:87:e8:56:48:f3:2d:bf:50:aa:81:e8:8a:f4:26:
                    4f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5E:FC:CF:4A:E5:DA:2C:90:07:73:D0:BE:39:DA:A4:D9:AA:5E:AB
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3136312e302f32342d3234203d3e20333935313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:8e:2a:8b:6d:36:57:a2:66:5f:ad:47:dc:a3:3d:9e:01:9b:
         60:c4:bf:ff:ba:f8:3b:a0:ee:32:aa:d4:23:bc:06:9f:60:3f:
         0c:f0:50:4e:b7:42:62:62:84:34:6b:f0:58:de:42:84:63:70:
         02:62:48:30:ca:0c:92:b1:21:a5:e3:f5:c0:89:af:21:6a:97:
         3e:11:64:46:f4:b7:5c:30:71:4e:da:aa:52:e1:42:c4:42:97:
         bc:fc:98:d4:fc:88:58:33:fa:9f:76:2c:29:71:28:e0:e2:78:
         a4:d3:a3:9d:22:3b:65:da:8f:b5:ed:f9:68:14:68:d5:f3:86:
         d9:ad:20:a4:26:ed:50:a7:66:50:7f:bb:65:c1:2c:a6:3c:28:
         c3:fd:8a:cd:45:d7:f8:0c:34:53:52:4b:1e:ae:eb:26:c6:6d:
         a1:88:23:7d:fa:76:5f:b0:11:93:1d:3d:0b:32:f3:f2:af:89:
         6d:52:97:89:9c:db:ad:85:b0:59:d5:4c:89:69:87:95:63:62:
         ca:57:24:1b:6d:2d:6b:2f:75:2b:9e:8d:d2:a6:32:30:1a:c4:
         23:96:e8:70:44:84:0a:92:b5:dc:97:0e:73:91:0e:c8:e0:c9:
         45:6d:95:5f:e3:7e:20:41:c2:af:8e:11:43:6a:ca:b3:33:0a:
         44:08:b2:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----