Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137302e302f32342d3234203d3e20333935313131.roa
File:                     3231362e3132322e3137302e302f32342d3234203d3e20333935313131.roa (raw, json)
Hash identifier:          a5Zel4ONgO2D8BBlKQyYpNl9eVz2XopUVGwfCi0wSU4=
Subject key identifier:   B6:45:A7:98:DB:27:04:03:03:7E:B3:EF:AF:01:8E:7F:58:06:6B:45
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       2DAD4CC46A67A74E4B477ECB08EA13CD7F102AE3
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137302e302f32342d3234203d3e20333935313131.roa
Signing time:             Mon 11 Jul 2022 08:30:49 +0000
ROA not before:           Mon 11 Jul 2022 08:25:49 +0000
ROA not after:            Mon 10 Jul 2023 08:30:49 +0000
asID:                     395111
IP address blocks:        216.122.170.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:ad:4c:c4:6a:67:a7:4e:4b:47:7e:cb:08:ea:13:cd:7f:10:2a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:49 2022 GMT
            Not After : Jul 10 08:30:49 2023 GMT
        Subject: CN=B645A798DB270403037EB3EFAF018E7F58066B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ea:3f:21:26:f2:67:fa:a4:41:79:65:95:87:
                    38:75:cf:77:8f:9c:68:9e:53:3e:4e:65:36:94:03:
                    a4:ff:d9:a6:0d:80:10:f9:d3:2d:c7:c9:a9:0d:e5:
                    a5:fd:65:fc:69:43:67:4e:6c:5a:c0:67:f9:5d:66:
                    46:61:aa:41:a2:6c:9a:9b:5d:0b:ea:af:0e:95:46:
                    94:9e:db:0a:36:54:41:2f:cd:82:86:45:93:1d:c8:
                    0c:a9:bc:b6:cd:97:cb:54:85:21:13:6b:59:0c:d9:
                    2b:b6:58:fb:7f:c9:32:ab:74:92:aa:07:48:c9:47:
                    92:97:ce:7f:fa:00:c3:ad:8a:14:dc:47:69:ac:79:
                    dd:85:87:e0:bb:30:17:11:d0:04:71:67:e2:0d:ff:
                    b6:08:22:e2:b4:4a:35:b5:0d:0f:e0:9f:75:07:dd:
                    2a:36:05:9f:ca:87:aa:76:6c:d4:4a:58:e9:14:ac:
                    dd:64:e4:9c:f6:f7:a6:2f:93:b3:ba:8f:ba:05:48:
                    d0:8a:ed:87:9a:93:3e:15:71:42:eb:84:e4:e9:5c:
                    99:5f:17:c3:49:90:40:8c:8f:c5:d8:0a:8a:68:42:
                    ce:ff:5b:11:5a:99:b3:6d:16:68:44:a3:32:06:f9:
                    14:ed:bf:bc:4a:09:d7:30:35:ef:e7:73:ec:4b:5b:
                    8d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:45:A7:98:DB:27:04:03:03:7E:B3:EF:AF:01:8E:7F:58:06:6B:45
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137302e302f32342d3234203d3e20333935313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:48:bc:40:f0:b7:57:2e:db:77:7c:b2:8d:82:68:c0:db:f5:
         2d:2c:fd:90:4d:44:9a:27:b3:0a:c8:9b:ad:f2:fe:41:1f:d5:
         f5:1f:57:82:31:1e:31:27:92:fc:78:e0:3e:bf:f2:e4:ba:16:
         62:62:be:38:d3:3a:09:c1:dd:fb:b4:ef:b7:01:64:c0:98:b1:
         66:a6:d5:7a:03:a0:2c:d3:b5:d8:d1:a8:f0:d7:fd:4c:c4:13:
         5b:3c:4e:67:92:c7:ed:dc:e0:5d:c1:38:5d:f8:98:71:cf:48:
         e7:68:19:37:4b:ea:38:1f:0e:cf:f0:73:46:43:89:23:e2:15:
         8d:54:99:3d:35:4a:ed:5b:ea:19:ae:40:e0:c0:c6:c5:b4:b2:
         42:6c:cb:e2:34:ca:01:13:33:23:e6:6c:70:2d:9e:21:5e:0f:
         1f:9b:50:34:b6:3f:df:f8:78:e7:64:d3:c5:05:21:1d:ae:96:
         8d:f8:43:1d:33:4a:e9:45:68:e3:88:25:1e:cd:f6:70:6b:a2:
         42:d9:88:5a:60:46:00:fc:2c:f3:38:06:fd:67:e6:dd:ca:d1:
         a0:a8:e0:12:0f:b1:d1:5b:de:3d:c7:f8:e5:fd:29:64:54:a0:
         28:50:96:24:97:45:70:6a:d2:28:4c:8a:3e:54:9f:ce:45:87:
         b2:52:91:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----