Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3136372e302f32342d3234203d3e2038313030.roa
File:                     3231362e3132322e3136372e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          1t8Fa4LngwwnrqFpmpiGtcapOR5AcmVKbUhpTJqG0ZA=
Subject key identifier:   41:F9:53:EC:25:C1:60:A7:85:58:4E:D1:5F:90:B5:0B:EF:0C:9E:37
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       39FCF3D730B63B0FFAB1747699F2C1884A64DF2B
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3136372e302f32342d3234203d3e2038313030.roa
Signing time:             Mon 11 Jul 2022 08:30:58 +0000
ROA not before:           Mon 11 Jul 2022 08:25:58 +0000
ROA not after:            Mon 10 Jul 2023 08:30:58 +0000
asID:                     8100
IP address blocks:        216.122.167.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:fc:f3:d7:30:b6:3b:0f:fa:b1:74:76:99:f2:c1:88:4a:64:df:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:58 2022 GMT
            Not After : Jul 10 08:30:58 2023 GMT
        Subject: CN=41F953EC25C160A785584ED15F90B50BEF0C9E37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:06:6d:ef:8e:35:3d:17:cf:b3:79:86:4a:05:
                    aa:6e:ed:a0:3b:b0:07:91:51:bd:28:94:b7:8b:0c:
                    dd:58:a9:e2:ae:30:ed:a6:74:5d:1a:1a:cd:13:a0:
                    d1:8b:b0:3e:4e:fd:d2:d1:63:24:ba:df:ff:67:0e:
                    4d:ca:71:e9:f3:6d:c8:18:92:f8:1e:56:91:d6:72:
                    4b:0e:c5:f7:2e:90:4b:3b:75:13:53:78:6e:7e:d8:
                    c3:c0:69:bd:3a:67:50:49:ba:df:51:a1:95:45:92:
                    b9:4c:91:34:36:8d:f1:02:ec:2a:5a:61:fd:a3:2b:
                    29:9e:9d:89:87:04:50:e2:d3:f4:17:dc:b2:95:cb:
                    6a:aa:bd:6d:9d:81:20:1f:00:6f:c9:d0:a1:92:75:
                    e5:0b:ee:d9:2d:6b:a0:11:c0:ab:3a:f5:00:a4:39:
                    59:43:2e:57:25:1c:b7:af:a7:90:17:57:65:28:a5:
                    04:c9:bf:52:31:62:36:f1:f5:03:fc:6e:c2:31:b2:
                    b0:d9:54:21:46:c8:3a:ed:c6:92:e2:e3:78:67:9d:
                    b4:9a:68:bc:01:03:bf:32:7e:8c:ed:c8:a5:59:7d:
                    14:25:33:8e:c9:d6:30:2d:95:26:e6:bc:1b:99:67:
                    39:7c:83:c4:60:6a:b5:8d:d9:2b:89:65:e3:4a:a7:
                    07:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F9:53:EC:25:C1:60:A7:85:58:4E:D1:5F:90:B5:0B:EF:0C:9E:37
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3136372e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:c7:4a:fa:2e:04:d9:97:d2:3b:a5:44:be:08:2b:c6:72:c0:
         fd:16:46:b1:d7:8a:b1:35:17:45:61:97:de:1d:bc:58:96:17:
         2c:c5:cb:3c:9e:ae:56:6c:90:44:91:f1:f5:0d:fb:a9:0e:2a:
         2d:0d:23:22:86:c1:f0:b9:3a:0c:af:c8:97:14:40:c7:34:e0:
         aa:7c:9b:a3:83:2b:22:9f:1a:eb:b6:7d:4a:4b:35:11:80:26:
         bb:39:c0:9f:86:ba:71:57:e0:59:73:74:04:39:cb:d4:d9:3b:
         fb:64:13:f5:53:fd:75:1e:54:ed:7d:1e:66:45:c1:b4:fd:1b:
         9e:fe:96:20:6e:a5:b1:b5:0f:9c:28:76:ce:43:06:43:0d:09:
         29:01:a4:b8:f2:59:89:0c:31:94:b5:de:4a:c7:77:6b:a6:12:
         f7:b7:ef:99:41:1b:84:29:8e:fd:55:09:60:79:60:ef:51:8f:
         32:76:4b:58:71:0c:ad:fa:c2:da:75:b1:56:b9:54:cb:7d:c3:
         47:c1:cb:f3:7a:bd:33:30:e0:cf:dd:ed:ce:bd:39:84:6a:5d:
         37:b1:e9:ee:fd:96:37:9a:1f:7b:23:d1:ee:07:4c:2e:25:11:
         ed:13:5c:1c:31:ce:ac:a2:36:a8:d9:14:a3:ce:98:67:8a:69:
         6d:2e:88:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----