Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137352e302f32342d3234203d3e203430363736.roa
File:                     3231362e3132322e3137352e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          sIejRF6QTF0GPr01mxKvAI/HWABGzS+kypxQt7ApOcc=
Subject key identifier:   A7:AB:F1:C7:E7:45:87:B4:17:30:35:06:64:36:A7:29:A0:C0:ED:F6
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       1B6E236830B10705858A8F7FF1AD5611870B9755
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137352e302f32342d3234203d3e203430363736.roa
Signing time:             Mon 11 Jul 2022 08:30:58 +0000
ROA not before:           Mon 11 Jul 2022 08:25:58 +0000
ROA not after:            Mon 10 Jul 2023 08:30:58 +0000
asID:                     40676
IP address blocks:        216.122.175.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:6e:23:68:30:b1:07:05:85:8a:8f:7f:f1:ad:56:11:87:0b:97:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:58 2022 GMT
            Not After : Jul 10 08:30:58 2023 GMT
        Subject: CN=A7ABF1C7E74587B4173035066436A729A0C0EDF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:84:7e:20:6f:b3:74:c2:69:e0:5d:89:8a:62:
                    e2:28:5b:5d:f1:82:cc:e8:14:37:37:4f:78:a2:66:
                    e7:24:ed:9c:0d:ce:0f:ee:1d:3a:16:7d:9d:64:7f:
                    e3:38:af:79:69:87:b5:c4:c9:5c:27:0e:bc:3b:a3:
                    87:17:89:f8:55:69:8f:3d:61:61:f5:ef:9b:77:97:
                    fb:b1:96:98:9f:39:34:fe:03:ca:b7:aa:dc:3b:16:
                    92:e0:c1:f7:8d:04:62:db:4c:11:ca:24:bf:78:cf:
                    df:70:4d:47:31:9d:a4:15:9c:4a:bb:f0:0f:3d:fb:
                    0b:27:8a:66:e2:f1:8c:40:79:68:f6:d8:a4:9e:37:
                    95:db:ef:d2:26:b6:66:5b:6b:93:96:3b:15:44:78:
                    8d:0d:49:e8:c6:89:9f:1c:f8:94:23:4c:5b:0f:2f:
                    e2:cc:1d:19:72:96:f4:27:62:ac:ec:0c:0b:88:c7:
                    0b:1b:72:07:22:cd:4a:7e:7f:c0:9f:04:ce:68:95:
                    87:80:77:ab:2a:74:61:bc:52:3d:0f:87:b6:6b:f0:
                    9b:04:b4:1c:b7:a4:bd:a2:6a:68:98:de:ae:0b:d6:
                    9a:e0:80:df:e1:a4:85:5d:ca:b2:12:93:dd:e6:39:
                    aa:96:b9:a1:8e:c6:45:bc:58:c8:13:9f:3a:59:0b:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AB:F1:C7:E7:45:87:B4:17:30:35:06:64:36:A7:29:A0:C0:ED:F6
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137352e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:03:1e:73:26:46:fc:d3:58:a1:9e:2c:fe:ab:0b:40:43:f4:
         83:5c:f5:57:b3:65:4a:47:77:b1:55:d6:8a:3f:95:63:61:a5:
         49:45:ef:96:f1:12:1a:c4:e2:8f:e1:80:0b:33:2d:98:37:b2:
         a8:20:4c:fb:66:9b:ee:b4:b3:04:3e:94:6f:a7:bd:92:9b:4c:
         3a:c7:bd:26:3b:30:22:5a:20:75:1d:5b:6a:5f:18:6d:ba:f3:
         3a:b3:62:a3:8b:20:d6:27:0b:0c:bf:33:8d:93:72:24:ae:54:
         ce:96:5e:11:30:19:52:47:43:da:81:0d:ff:16:b3:e1:d4:71:
         07:8b:ba:55:e6:21:ca:95:17:27:69:94:2c:88:bc:bd:23:35:
         21:d6:9c:f4:ce:47:18:dd:f3:77:1f:11:99:99:41:8a:b9:5d:
         ca:d9:67:1c:b2:f7:cc:20:bd:8d:51:cb:b9:40:4f:15:50:9c:
         83:2f:d0:08:ce:55:bc:64:91:aa:04:da:d5:54:d4:b9:5c:86:
         bc:9e:53:7e:8f:bb:84:7f:a7:0f:2c:67:b8:67:69:98:71:b2:
         22:16:ee:a3:2e:de:7f:a6:20:c3:17:73:b6:fd:0e:f4:00:63:
         ef:d3:4f:9d:3a:59:87:a3:21:d1:82:06:7a:e3:1c:27:ca:bb:
         81:ee:30:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----