Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137352e302f32342d3234203d3e203333363936.roa
File:                     3231362e3132322e3137352e302f32342d3234203d3e203333363936.roa (raw, json)
Hash identifier:          E17VmcGQrP6HxPqAUJTJtqOJN7bW51pyUWox1gAdIYE=
Subject key identifier:   C6:0F:BF:B9:45:C5:83:34:AC:84:C7:0E:5B:59:DE:91:61:04:93:80
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       6661DB7214DA53FF904F6BDDFA13181DE90C3962
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137352e302f32342d3234203d3e203333363936.roa
Signing time:             Mon 11 Jul 2022 08:30:50 +0000
ROA not before:           Mon 11 Jul 2022 08:25:50 +0000
ROA not after:            Mon 10 Jul 2023 08:30:50 +0000
asID:                     33696
IP address blocks:        216.122.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:61:db:72:14:da:53:ff:90:4f:6b:dd:fa:13:18:1d:e9:0c:39:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:50 2022 GMT
            Not After : Jul 10 08:30:50 2023 GMT
        Subject: CN=C60FBFB945C58334AC84C70E5B59DE9161049380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:48:7d:62:70:49:11:f7:c0:18:5b:32:0d:a8:
                    af:d3:9d:bd:27:ce:21:27:15:d6:0b:14:36:83:83:
                    6c:e6:42:7b:b0:ee:0b:15:dc:81:f9:2d:db:26:44:
                    ca:21:49:86:e1:e7:98:fd:72:45:80:da:a8:75:50:
                    14:33:5d:35:ee:74:45:05:b8:b4:ef:df:63:fa:36:
                    ec:6c:41:d0:b3:1c:26:4b:60:7d:b4:2d:53:c0:fe:
                    ba:c1:8b:97:5d:7f:cd:b5:8e:5e:52:7c:38:45:8c:
                    62:b5:39:4c:c2:00:2e:27:c1:98:47:6a:94:bb:b4:
                    b9:01:f1:dd:3b:eb:47:15:ac:95:15:12:f4:7e:c7:
                    7f:b9:fa:83:54:a5:c1:23:39:21:23:31:fb:64:ce:
                    18:ea:2a:e1:89:b5:30:23:19:03:7f:fa:30:c3:3f:
                    c4:9b:5c:94:92:6f:e4:94:c7:32:c0:b2:05:87:39:
                    74:ac:46:8e:a1:6b:6b:f4:ce:72:f1:20:f8:92:6f:
                    ae:62:08:62:c8:28:ed:98:ec:7b:7e:da:fd:a8:5e:
                    69:79:3b:c9:90:5a:8d:3a:1e:2c:ed:44:c0:48:05:
                    06:af:d7:84:9a:05:3f:94:a0:6c:fb:d2:9a:cd:a4:
                    7c:53:05:14:2e:e3:b6:95:96:af:9f:9b:1f:27:c6:
                    06:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:0F:BF:B9:45:C5:83:34:AC:84:C7:0E:5B:59:DE:91:61:04:93:80
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137352e302f32342d3234203d3e203333363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:3c:b4:ff:87:1e:e9:10:66:05:e7:20:d8:e3:76:2c:12:99:
         7c:c6:79:fc:ab:a4:c6:e2:05:e6:be:3d:fc:7b:50:18:98:62:
         6a:db:69:ad:a8:1d:a5:5c:17:f1:68:4b:d1:94:48:40:ad:e9:
         c6:4e:e8:34:54:ba:55:60:49:16:5c:39:7f:ad:a7:a7:2a:b0:
         ba:6c:d8:b7:51:66:29:d6:f2:2c:ae:7a:c6:27:7c:b8:e7:46:
         2b:fa:3c:59:5e:85:b2:c8:33:18:af:00:af:f3:7d:02:10:63:
         38:42:2d:80:98:06:19:f2:bf:c7:84:ab:26:67:bf:47:3a:9f:
         58:33:50:45:4b:f7:ab:bf:5c:0c:4b:56:63:22:c5:96:24:cb:
         fd:43:77:89:e2:c2:d5:27:eb:4d:17:ab:5f:0d:c9:e0:d3:85:
         11:7a:7c:3b:61:9c:4c:ee:8c:26:ad:b7:10:1f:43:47:ce:16:
         dc:5d:6c:89:8a:c1:78:50:6d:d5:2a:b2:a7:25:b3:98:f6:49:
         2b:d5:77:e2:49:9b:f6:7e:b4:f4:64:3d:4a:39:9f:7e:d7:96:
         f8:4d:45:24:77:e5:cf:12:9d:79:6f:eb:ad:09:4d:54:c9:f4:
         0b:bd:b0:43:cb:8e:1d:fd:24:d1:16:65:01:92:82:c5:f7:27:
         83:71:c8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----