Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137322e302f32322d3232203d3e203439393939.roa
File:                     3231362e3132322e3137322e302f32322d3232203d3e203439393939.roa (raw, json)
Hash identifier:          LgW1HQIMPlr1eAc+x5H2VaNNqjwOC0gJx4Lj0ol5zLY=
Subject key identifier:   72:74:80:4F:A3:52:7A:95:F8:D1:D4:B2:F0:2D:16:C3:72:DA:40:8B
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       4AE9205AE687DBFCEFBCF6AB77F7A7DE7E421392
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137322e302f32322d3232203d3e203439393939.roa
Signing time:             Mon 11 Jul 2022 08:30:57 +0000
ROA not before:           Mon 11 Jul 2022 08:25:57 +0000
ROA not after:            Mon 10 Jul 2023 08:30:57 +0000
asID:                     49999
IP address blocks:        216.122.172.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e9:20:5a:e6:87:db:fc:ef:bc:f6:ab:77:f7:a7:de:7e:42:13:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:57 2022 GMT
            Not After : Jul 10 08:30:57 2023 GMT
        Subject: CN=7274804FA3527A95F8D1D4B2F02D16C372DA408B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:07:bd:ce:ea:19:28:b1:3a:2c:40:9e:76:6c:
                    28:3f:71:1b:d9:79:d3:14:0a:28:d1:3d:98:e7:13:
                    df:c2:cf:85:7a:b1:9d:99:a9:64:8f:24:3a:37:4c:
                    18:8f:00:cf:53:bc:de:cf:fe:6d:8d:c7:92:d7:4b:
                    64:5c:16:7d:84:62:b8:01:96:17:1e:7c:08:0e:30:
                    fd:1c:3a:ea:24:0a:e4:f3:4d:7d:f5:48:80:e5:95:
                    e9:59:63:fe:47:10:da:f7:57:71:00:b3:5b:ec:db:
                    65:41:62:61:bf:1a:3a:d8:38:88:ca:c4:ac:d1:af:
                    9f:94:bc:a3:e4:20:57:08:51:3d:8b:c2:91:5c:46:
                    b7:bb:3c:1a:32:9c:8f:f8:b7:9b:54:9a:df:13:77:
                    2e:1c:f8:f0:bd:e1:af:c2:d5:82:cd:bf:6f:e0:9d:
                    62:a6:23:24:f2:4c:b6:e3:5e:a8:ff:f9:4d:c2:d1:
                    88:09:e5:4e:85:c3:ed:cb:93:19:1a:bc:b1:19:1f:
                    bb:40:f0:0e:a0:db:30:d5:65:4c:76:4f:a3:29:31:
                    c0:df:2c:e6:ef:73:fa:89:81:7c:bf:14:f3:35:eb:
                    ee:5e:1b:c7:43:61:cc:ea:65:bf:dd:93:40:c9:74:
                    20:f6:8e:4c:8f:e4:96:7b:eb:fe:4a:2b:64:1c:07:
                    a1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:74:80:4F:A3:52:7A:95:F8:D1:D4:B2:F0:2D:16:C3:72:DA:40:8B
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137322e302f32322d3232203d3e203439393939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c1:fd:4a:61:3a:c5:34:0a:9a:9d:e9:89:b2:7b:fb:75:a5:4a:
         a6:31:4c:2d:17:8c:c7:46:c3:50:f1:53:8e:1d:f2:a8:9f:1e:
         20:11:78:9a:36:c9:09:d8:4c:31:91:16:29:ef:e7:f5:59:72:
         61:bb:7e:d0:8c:86:13:b3:e0:b2:2f:8f:cd:13:0f:e7:91:50:
         8e:bc:2c:0d:14:98:ab:34:5e:34:02:05:08:df:78:df:1c:ec:
         a0:3f:29:89:eb:6b:18:a0:25:e8:0f:92:27:bd:b1:e5:96:2e:
         29:a4:3c:aa:93:c5:e4:48:d4:cb:cf:36:79:0c:58:79:3d:e3:
         d4:56:89:78:b6:4d:b8:4e:70:3d:60:cd:a4:4f:6a:6d:69:3a:
         68:34:37:93:d1:02:f1:71:e3:d2:9e:ab:1d:41:db:ca:1d:ba:
         29:e6:a1:b4:0c:13:3f:9b:84:4e:6b:e3:9c:b1:a3:d3:70:31:
         57:67:19:6a:a3:46:90:83:27:24:8a:40:29:63:62:c3:fa:f9:
         6a:be:d0:8b:ad:75:02:20:19:62:8a:d3:cf:50:7f:5b:86:37:
         e2:71:2e:13:a3:82:ef:22:9d:be:0f:92:89:d5:0c:c0:37:22:
         b5:6e:d4:a4:67:55:2d:13:d1:42:3e:72:93:8f:7b:f7:04:5c:
         1b:19:ef:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----