Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3136362e302f32342d3234203d3e203133323133.roa
File:                     3231362e3132322e3136362e302f32342d3234203d3e203133323133.roa (raw, json)
Hash identifier:          ptTLOzO708XsQh/+knHBgp4VUmbBdaxcldj54Lnh9xo=
Subject key identifier:   88:B5:50:2C:A9:FC:D6:82:7B:18:64:2A:52:3B:61:86:B3:63:F3:70
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       5F85A7575C7FEC6F05DA356A1D0C8ED271651E78
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3136362e302f32342d3234203d3e203133323133.roa
Signing time:             Mon 11 Jul 2022 08:30:50 +0000
ROA not before:           Mon 11 Jul 2022 08:25:50 +0000
ROA not after:            Mon 10 Jul 2023 08:30:50 +0000
asID:                     13213
IP address blocks:        216.122.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:85:a7:57:5c:7f:ec:6f:05:da:35:6a:1d:0c:8e:d2:71:65:1e:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:50 2022 GMT
            Not After : Jul 10 08:30:50 2023 GMT
        Subject: CN=88B5502CA9FCD6827B18642A523B6186B363F370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f7:e8:b0:44:8d:f6:4b:8f:6a:ee:84:6b:0b:
                    35:d3:4d:89:d6:3d:44:df:1d:41:0d:92:41:e0:a4:
                    de:65:71:57:80:60:d1:a0:2f:83:b0:0b:66:16:5f:
                    bb:4a:6b:c9:42:2b:09:38:bb:da:0f:ef:32:fc:36:
                    f8:2d:61:32:d3:83:4f:fd:7a:eb:3f:d0:a8:3f:7e:
                    62:d2:09:d7:2a:55:69:31:a7:fd:4f:f5:f3:34:fa:
                    1e:31:2b:7d:ec:86:3f:b3:eb:e9:fe:db:38:6c:2d:
                    b6:14:35:60:89:32:67:85:cf:0d:de:4c:6f:36:a5:
                    e5:ad:19:9c:47:57:71:58:3f:bd:23:19:ca:32:53:
                    b1:2f:05:63:32:3b:81:61:7b:aa:e1:e8:ad:b0:1a:
                    21:f5:6f:f3:b5:2a:26:2c:78:b7:46:36:23:0c:12:
                    5b:5c:9a:27:bd:d6:13:8c:f8:e9:fc:c2:ea:b7:dd:
                    dc:0c:55:20:7d:88:59:f6:92:85:a5:1c:f9:58:f1:
                    ef:36:32:d0:af:5c:6e:a1:57:46:44:66:b9:2d:47:
                    c7:57:db:cd:e0:8f:b0:6f:0a:fc:c8:b5:b9:96:f7:
                    0c:db:25:75:45:c7:3c:d7:a0:d9:2a:5a:49:66:c9:
                    37:c1:41:f7:4c:8b:0b:64:53:69:93:e7:e0:b0:59:
                    30:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B5:50:2C:A9:FC:D6:82:7B:18:64:2A:52:3B:61:86:B3:63:F3:70
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3136362e302f32342d3234203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:b8:e6:c5:be:64:6a:2b:be:cf:49:ca:0e:b0:88:22:02:82:
         cf:5a:b8:e7:fe:91:e7:b2:1c:00:ca:13:19:f1:48:2b:de:12:
         60:ba:19:f6:77:21:ca:ee:cf:a2:20:7d:40:59:c7:d2:65:d2:
         a8:0e:c2:74:38:58:a5:fa:17:03:d1:b9:10:a4:31:8e:9b:50:
         a4:f5:ba:04:cf:be:f9:13:24:1d:d9:e0:c6:c0:7c:f9:c4:c1:
         6c:2f:fa:b3:28:cf:83:91:33:30:12:44:65:ce:7f:3e:bd:be:
         52:de:34:5f:83:8d:d9:29:a3:cb:e0:53:72:09:e0:0f:24:74:
         56:92:a9:5d:89:a1:82:ac:35:15:1a:a9:72:e3:d0:e4:08:76:
         8c:cd:52:69:f1:bd:d6:7b:26:b1:4a:d5:a7:63:63:0c:16:49:
         dd:61:bb:5b:f8:1b:23:8f:c2:00:c9:ae:b8:f6:16:0a:71:6f:
         b3:e1:9f:6d:f5:3f:d1:c7:27:63:25:1a:36:ea:11:ce:a1:fd:
         a8:85:5c:7e:27:93:fb:2c:2e:5a:fd:96:76:fb:a9:2d:37:68:
         a3:c9:82:d3:65:b1:47:01:03:f8:4f:7f:c9:06:b0:f4:cb:36:
         05:fb:da:20:c2:79:b0:a1:cc:a6:54:17:e5:50:f2:a6:66:ab:
         0c:8f:a1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----