Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3136332e302f32342d3234203d3e20333937343233.roa
File:                     3231362e3132322e3136332e302f32342d3234203d3e20333937343233.roa (raw, json)
Hash identifier:          Nx61PSbWp8pwkQTIfmKDSJg3h0VQl1qrIDce2Bis3u0=
Subject key identifier:   1C:CA:FD:61:F8:15:07:74:2C:53:62:C0:AC:87:DF:26:8A:6E:81:09
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       5762CF3CD2A90E8D20F1DEC385053D38FE2FC48C
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3136332e302f32342d3234203d3e20333937343233.roa
Signing time:             Mon 11 Jul 2022 08:30:58 +0000
ROA not before:           Mon 11 Jul 2022 08:25:58 +0000
ROA not after:            Mon 10 Jul 2023 08:30:58 +0000
asID:                     397423
IP address blocks:        216.122.163.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:62:cf:3c:d2:a9:0e:8d:20:f1:de:c3:85:05:3d:38:fe:2f:c4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:58 2022 GMT
            Not After : Jul 10 08:30:58 2023 GMT
        Subject: CN=1CCAFD61F81507742C5362C0AC87DF268A6E8109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a6:1f:ef:21:09:ed:e7:ee:fd:aa:d9:22:b2:
                    e6:8e:12:b8:1c:c6:af:42:6d:61:13:df:f8:3d:9e:
                    d4:2b:ae:24:93:0c:f2:44:20:40:d9:0d:be:81:f4:
                    f5:4a:01:67:a9:3b:37:36:57:94:4b:c6:4f:2e:3b:
                    43:a7:17:09:76:0b:9b:d0:2b:a5:37:a4:83:30:6f:
                    b4:63:80:e1:14:ba:38:c8:38:5f:f8:cf:76:ed:f4:
                    3d:c1:a7:33:5f:2d:1c:33:c2:96:1a:a4:e6:0f:f3:
                    07:43:64:0f:86:ae:de:14:40:c5:b9:7e:d2:92:e1:
                    68:d2:2d:ac:ba:d5:1b:9a:67:61:e3:68:83:3a:1f:
                    4a:5a:b8:32:86:a3:07:08:3a:8a:7d:81:5f:3c:da:
                    ae:b0:ea:5f:55:35:9b:f6:66:35:b9:59:6b:7c:ab:
                    1c:24:62:6c:b3:44:9c:5a:af:bd:e2:69:30:b3:3a:
                    c9:0e:3b:2f:bb:50:27:30:4a:76:53:43:f3:39:db:
                    19:bf:17:e3:e5:25:5d:77:c4:42:0a:d8:f9:01:d6:
                    0a:1c:f4:fc:5c:95:d7:ad:16:4e:5a:de:eb:a5:79:
                    10:52:9f:a6:ef:d6:ca:ff:c3:f7:c1:b9:17:ff:e5:
                    e4:f4:ba:85:b3:c2:14:fe:dd:f4:08:3f:e1:07:b3:
                    a7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CA:FD:61:F8:15:07:74:2C:53:62:C0:AC:87:DF:26:8A:6E:81:09
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3136332e302f32342d3234203d3e20333937343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:f0:42:14:e4:cb:71:c8:19:7b:4f:56:24:0c:51:40:4a:87:
         25:9d:43:5c:de:fa:79:c1:fb:c7:b0:b4:f7:ad:f7:a7:83:27:
         9a:88:8a:40:eb:ce:fd:8e:52:68:cc:6a:6d:46:96:3c:4a:ff:
         b1:cb:bf:7a:d2:c4:7b:7e:c7:bf:7a:d3:92:a0:73:24:bf:cc:
         7b:60:47:1f:80:e1:56:ab:ae:46:bc:a7:2b:ea:fb:ba:e5:eb:
         51:0b:ee:cb:f1:32:27:fb:93:5c:5f:d1:c1:39:06:0d:59:68:
         db:34:1b:5b:e2:8b:a6:44:e4:37:20:24:49:99:41:96:06:51:
         2c:13:9e:fb:58:2d:59:e2:ac:56:45:43:7f:31:b8:2f:d7:6b:
         d6:54:6c:91:7b:f4:34:3a:5a:5e:35:db:66:f0:96:94:50:fa:
         c7:9f:2d:92:3e:02:ce:b4:b2:ba:dc:d1:bd:f2:c1:aa:a2:85:
         e6:b8:10:97:10:b9:7e:16:f0:30:5d:4b:d0:2c:98:b7:cb:d4:
         59:68:90:8c:8b:ce:04:e4:9c:52:c9:77:a5:22:80:13:41:f1:
         8d:4f:fd:0c:ec:36:45:4b:b5:3f:bd:8a:df:65:cb:27:40:5a:
         ec:0c:1c:e5:0d:3a:ae:32:56:80:16:51:d2:ae:24:2b:c6:50:
         d3:f8:e7:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----