Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137342e302f32342d3234203d3e203536363535.roa
File:                     3231362e3132322e3137342e302f32342d3234203d3e203536363535.roa (raw, json)
Hash identifier:          5ohReVeCaGfWuly1YzEBk69WNASE8VRlfkRCJa8LzsI=
Subject key identifier:   75:32:33:DE:57:92:AE:9A:AE:0E:0E:0E:15:B2:7E:BC:9D:63:04:F7
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       4B44D03929886CC7C99B41D6AC114B6FB97209E6
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137342e302f32342d3234203d3e203536363535.roa
Signing time:             Mon 11 Jul 2022 08:30:54 +0000
ROA not before:           Mon 11 Jul 2022 08:25:54 +0000
ROA not after:            Mon 10 Jul 2023 08:30:54 +0000
asID:                     56655
IP address blocks:        216.122.174.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:44:d0:39:29:88:6c:c7:c9:9b:41:d6:ac:11:4b:6f:b9:72:09:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:54 2022 GMT
            Not After : Jul 10 08:30:54 2023 GMT
        Subject: CN=753233DE5792AE9AAE0E0E0E15B27EBC9D6304F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5d:c5:08:7f:d4:b7:56:e2:49:a6:8e:e6:94:
                    16:d2:85:c2:9f:01:1a:c5:f7:66:ce:3c:57:34:b2:
                    20:8e:ca:d9:48:24:b2:0a:db:cd:71:8e:65:03:f1:
                    e7:4d:64:8b:d9:db:5f:34:94:5f:1e:41:ce:90:5b:
                    f1:df:34:e3:75:65:a7:69:60:99:ef:97:a5:26:93:
                    59:d0:db:f3:ad:72:25:02:64:5b:2a:ce:27:8c:30:
                    1a:d7:6e:02:a8:fa:57:f5:49:33:ad:eb:ca:3c:9c:
                    02:a2:fa:d7:7b:3d:52:f1:96:dc:61:87:a4:18:66:
                    ae:30:b8:b2:f1:e4:f6:9e:64:fe:bb:de:cc:f9:37:
                    9c:58:aa:1e:a2:48:9a:2b:b8:19:f1:fb:9e:6e:85:
                    f6:a7:c9:63:73:e1:25:aa:e5:e4:62:e7:a5:d5:83:
                    00:83:e3:1f:4d:78:03:cb:51:89:3c:cc:d6:a1:69:
                    18:d8:d7:40:9e:95:4f:de:13:2e:11:7b:7a:d8:07:
                    01:f1:50:4e:a1:10:02:42:1f:b8:67:70:98:6f:9b:
                    51:37:68:b3:ab:55:e3:74:62:ec:70:b4:63:68:a0:
                    6b:88:fb:49:6e:0e:d1:a1:c9:47:73:17:86:9f:36:
                    5f:af:ea:98:5c:60:0a:4e:24:14:94:7f:38:5a:9e:
                    02:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:32:33:DE:57:92:AE:9A:AE:0E:0E:0E:15:B2:7E:BC:9D:63:04:F7
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137342e302f32342d3234203d3e203536363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:d9:7e:35:f7:7b:f1:cd:a4:87:84:3b:f1:9f:b3:a4:1d:66:
         04:f0:d1:c8:fe:9c:2b:30:15:a6:29:c6:8a:c1:bf:da:31:97:
         11:c4:ad:61:77:1d:4b:e1:b6:32:a8:c4:38:4e:06:9a:f5:9b:
         c9:1f:fd:be:ec:a1:f6:56:f7:ec:aa:95:8e:03:9a:87:67:92:
         c6:8d:d5:df:00:c2:35:76:e4:4d:cd:96:4f:3d:58:c3:1c:08:
         05:1e:e2:83:7d:04:ec:7a:b1:9f:3f:00:a6:ba:54:ab:22:71:
         55:33:79:b7:71:3d:2e:3e:8b:e8:84:0e:a4:92:03:f6:b6:69:
         e9:c1:42:d3:5e:b1:c0:23:19:8e:71:ac:8a:cc:27:dd:36:fe:
         51:00:d1:29:c5:9c:14:26:68:f8:bc:5e:bc:35:9f:db:ad:ab:
         30:d5:85:6a:fb:5b:49:2c:f0:7c:9d:a4:88:5c:65:ba:df:0f:
         02:9a:a9:b3:51:0e:7e:fa:d3:b7:0c:e1:88:31:fe:52:41:73:
         59:db:db:ba:89:00:f8:b6:3c:fd:0f:2a:72:90:4b:90:32:f5:
         f2:eb:f0:20:d9:95:25:a4:bb:70:4c:67:0c:63:53:57:1d:01:
         f6:06:05:39:60:a7:ad:fd:21:41:82:c7:a8:67:15:22:8d:9a:
         ce:89:7d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----