Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3136352e302f32342d3234203d3e20333938373739.roa
File:                     3231362e3132322e3136352e302f32342d3234203d3e20333938373739.roa (raw, json)
Hash identifier:          A/mqK+Fg7UN9uN8pWYVc2sHrlECS6FkowpgUm2Pr2Hk=
Subject key identifier:   06:C1:B6:B0:7C:42:05:ED:D4:F0:8C:7B:17:E9:76:8D:2D:80:AB:E2
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       0B74CFF9931D47ABD942F1360E5A5890198E81CF
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3136352e302f32342d3234203d3e20333938373739.roa
Signing time:             Thu 21 Jul 2022 06:26:27 +0000
ROA not before:           Thu 21 Jul 2022 06:21:27 +0000
ROA not after:            Thu 20 Jul 2023 06:26:27 +0000
asID:                     398779
IP address blocks:        216.122.165.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:74:cf:f9:93:1d:47:ab:d9:42:f1:36:0e:5a:58:90:19:8e:81:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 21 06:21:27 2022 GMT
            Not After : Jul 20 06:26:27 2023 GMT
        Subject: CN=06C1B6B07C4205EDD4F08C7B17E9768D2D80ABE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ee:14:b4:36:d0:bf:2a:cc:b5:67:29:83:1f:
                    28:69:88:c1:17:f4:9b:b9:ff:c3:17:c2:3f:7d:25:
                    8f:5f:82:00:47:3d:b5:15:8a:d5:01:04:f2:35:1e:
                    c9:b7:f3:3c:c0:af:f1:d0:5a:2b:8f:0e:eb:32:72:
                    fe:3a:7c:32:bf:c8:9f:df:88:05:36:37:57:d3:2c:
                    b7:ec:7a:53:38:56:d1:4c:82:59:d8:76:7f:5b:bb:
                    dd:19:35:ec:d6:1e:e6:29:ea:72:46:28:09:29:02:
                    06:ab:55:07:bc:ed:d1:e7:34:c8:5a:c5:22:fc:ac:
                    f6:c7:1b:59:95:00:e8:57:2f:5b:f8:56:31:95:17:
                    6c:f9:e5:0b:ec:41:ee:47:09:f4:64:a0:d8:d9:ed:
                    02:30:ea:7f:96:71:88:b5:84:1c:0d:a3:c9:86:de:
                    08:a0:af:8c:cb:13:eb:be:87:2a:ba:0d:92:9e:a3:
                    55:41:6a:da:b5:83:90:53:6c:43:09:5b:89:a3:3a:
                    fd:91:6a:96:cc:34:9d:52:bb:05:9c:ad:9c:2b:cc:
                    8a:d9:42:32:7c:7e:b5:d2:48:95:3d:ad:fe:2e:de:
                    f8:b1:9f:37:7a:c0:f5:12:06:9c:4c:b4:20:5d:bb:
                    6b:18:b5:f7:3a:a7:18:44:19:2c:6e:ac:24:17:60:
                    76:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C1:B6:B0:7C:42:05:ED:D4:F0:8C:7B:17:E9:76:8D:2D:80:AB:E2
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3136352e302f32342d3234203d3e20333938373739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:48:2c:e5:1c:53:67:48:d8:46:fb:39:41:3d:1e:39:3e:a6:
         ab:ce:f4:d5:3e:1a:74:82:a1:75:df:1d:04:b6:1f:3b:64:82:
         27:84:99:4d:50:c7:b5:75:c1:98:9e:b2:88:41:31:1e:86:89:
         21:2a:37:d6:5d:77:5d:12:d9:95:cf:ac:37:5f:c0:89:73:c4:
         07:60:72:87:35:82:8b:d8:56:45:79:f8:c5:1a:ce:9d:ae:89:
         48:a8:09:54:54:b1:39:15:7a:7d:10:f4:ff:fe:aa:2e:a8:e8:
         c9:68:ee:bf:1e:46:6c:9c:e8:36:33:2a:37:05:41:19:09:1b:
         c1:9e:08:d4:fc:e0:8f:35:06:8c:53:ed:37:2a:3b:f1:8d:0c:
         5a:84:30:dc:ce:78:b2:67:bd:9b:c5:7c:26:79:ec:ed:5d:d9:
         5c:18:b8:b8:5b:c4:51:a3:a8:e9:6b:13:0c:59:5c:d5:7b:0d:
         f4:b1:c6:ed:1b:58:c0:83:83:91:36:d1:18:28:f5:28:2f:64:
         ed:43:f0:6e:5b:04:23:58:e7:7e:2e:37:7c:55:c3:e2:61:74:
         33:aa:c5:e1:81:bb:b6:05:81:0d:4b:36:3a:22:ef:0a:b3:84:
         42:b6:72:71:bb:f7:34:48:b6:83:5a:82:1a:5c:48:67:bf:9e:
         67:61:6f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----