Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3136342e302f32342d3234203d3e2038313030.roa
File:                     3231362e3132322e3136342e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          yqJdeNS+9dhHKCdQwnjtEfKhE+M/ZFcCsGPrWJpRqdY=
Subject key identifier:   F5:01:3A:A3:8F:CA:0E:46:6C:67:CE:B2:1B:3E:D0:C8:3F:67:4A:5C
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       39666D421181A4A61B6BC2B4EE5E45A53A820405
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3136342e302f32342d3234203d3e2038313030.roa
Signing time:             Mon 11 Jul 2022 08:30:42 +0000
ROA not before:           Mon 11 Jul 2022 08:25:42 +0000
ROA not after:            Mon 10 Jul 2023 08:30:42 +0000
asID:                     8100
IP address blocks:        216.122.164.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:66:6d:42:11:81:a4:a6:1b:6b:c2:b4:ee:5e:45:a5:3a:82:04:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:42 2022 GMT
            Not After : Jul 10 08:30:42 2023 GMT
        Subject: CN=F5013AA38FCA0E466C67CEB21B3ED0C83F674A5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cb:7d:4e:81:b3:5e:4b:6e:62:c9:6a:20:8f:
                    b7:d4:49:72:a6:37:58:11:91:ac:dc:53:60:d0:6c:
                    4f:be:f3:b2:ad:38:75:66:2d:d6:01:f1:b8:11:a4:
                    f6:52:1b:86:60:d8:4a:e9:73:58:19:15:8f:9a:ce:
                    b3:d6:9f:39:cc:e8:dd:e2:76:a6:f0:4a:ff:15:6e:
                    ae:2b:24:58:2c:c8:15:26:c6:e8:7e:43:88:45:54:
                    19:d7:29:8a:5a:c1:e6:12:5b:3f:56:8c:df:53:c5:
                    e1:f9:77:3e:58:50:de:c3:68:52:1c:7f:6c:71:a0:
                    0a:4f:13:9d:0c:a1:76:e6:32:3d:0e:86:74:d9:f2:
                    d7:e2:59:a8:55:f2:82:4a:7c:8f:02:4c:1f:b8:9d:
                    0f:bd:a9:c5:be:de:09:15:f6:d8:cd:1f:05:37:2d:
                    82:f0:68:ee:a9:95:7f:0f:61:01:dc:b7:2f:5d:47:
                    4a:42:5f:69:2d:b5:a7:d6:7d:f7:9e:fd:0b:6c:9c:
                    35:5d:3b:89:11:1d:16:5c:77:5f:57:d6:99:cb:7e:
                    28:ec:f5:ea:10:0a:5f:e8:99:ef:8b:08:b4:e7:32:
                    4d:2c:8b:29:df:28:bc:f7:0c:2c:40:7e:65:92:b5:
                    f0:6b:31:e5:d0:4c:85:0d:b2:27:72:7d:49:91:a4:
                    3c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:01:3A:A3:8F:CA:0E:46:6C:67:CE:B2:1B:3E:D0:C8:3F:67:4A:5C
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3136342e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:a6:be:c7:85:50:55:ed:67:50:de:24:b8:f1:26:81:1b:70:
         88:84:01:69:4f:d9:9f:6f:db:b6:54:94:49:74:9b:0f:4c:0b:
         a9:f3:d7:63:22:75:8d:9e:b8:dc:14:a1:0d:1e:27:f6:31:60:
         8c:25:a7:80:98:07:de:ab:c5:98:19:87:17:62:6c:9f:6f:a0:
         30:bf:6e:5e:99:e7:af:1c:4b:d3:f8:53:05:7f:ab:2f:b5:47:
         5f:57:2c:0f:f8:27:74:03:4f:9b:29:a2:1a:37:ad:62:23:b2:
         e8:97:bb:70:f0:4a:5c:1d:b8:9b:b0:79:03:b6:a7:b3:a5:49:
         03:c1:48:1d:a9:c0:41:61:a4:cd:34:24:3f:50:0c:9f:d7:da:
         77:5b:08:df:26:4e:7b:80:f2:c2:a7:40:9f:bc:43:22:f2:3e:
         52:3d:a2:ad:35:a8:d4:97:44:8a:00:5f:78:c2:e2:68:22:c3:
         bf:3d:ce:03:fc:2c:85:bf:a1:21:04:05:4a:6d:64:0f:1b:61:
         de:fa:dd:17:37:ca:70:49:b0:e6:7f:2d:c3:71:49:24:43:d6:
         2d:bf:0f:b5:9e:cb:a7:ce:5d:ee:ac:9f:3e:b0:e5:f0:57:94:
         d8:3f:0e:f8:32:41:f8:87:90:ef:60:6b:c1:39:a1:4e:49:ab:
         6c:75:f1:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----