Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137362e302f32322d3234203d3e203134363138.roa
File:                     3231362e3132322e3137362e302f32322d3234203d3e203134363138.roa (raw, json)
Hash identifier:          nwQVwYk0GtxAEMx/KDRvVj6mPiAA54osHP07y+qp+XE=
Subject key identifier:   A4:02:59:6F:EC:E9:02:BA:4A:F1:D7:4B:A8:B2:7B:CB:4A:44:73:A6
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       604F1C61313663390065D1F39A1ABF686977E89F
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137362e302f32322d3234203d3e203134363138.roa
Signing time:             Mon 11 Jul 2022 08:30:51 +0000
ROA not before:           Mon 11 Jul 2022 08:25:51 +0000
ROA not after:            Mon 10 Jul 2023 08:30:51 +0000
asID:                     14618
IP address blocks:        216.122.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:4f:1c:61:31:36:63:39:00:65:d1:f3:9a:1a:bf:68:69:77:e8:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:51 2022 GMT
            Not After : Jul 10 08:30:51 2023 GMT
        Subject: CN=A402596FECE902BA4AF1D74BA8B27BCB4A4473A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:41:b2:4e:b2:c3:53:0a:fe:2d:c2:1e:90:12:
                    9a:b0:4c:6c:ac:b2:99:da:85:d0:a4:17:89:7a:b9:
                    1a:de:97:70:36:24:e6:3b:d1:a1:8d:1d:64:c8:e8:
                    de:6b:fb:17:54:ec:67:f5:90:03:55:f6:9b:a5:31:
                    aa:62:97:df:55:6e:93:bd:e4:06:0b:7f:c0:55:fe:
                    36:eb:d6:d7:34:cd:1e:10:97:92:2b:e0:cf:d3:9b:
                    e0:a5:d5:f8:92:73:a0:c6:7b:41:5a:8d:4e:e4:a9:
                    ec:f2:fa:5c:a7:f4:fb:90:7e:fc:b7:d8:96:a6:92:
                    e4:58:4d:04:56:72:e4:16:d6:92:e0:76:f5:f0:e2:
                    fa:b2:be:26:7c:84:29:ad:de:7d:76:b4:a2:21:0a:
                    4b:41:94:2c:09:7d:af:7e:8c:46:96:99:76:04:79:
                    04:b7:b1:a2:b6:ad:4d:63:5f:8c:9b:42:af:dc:8c:
                    ca:da:7f:1e:f1:89:8b:57:bd:9e:b1:6c:c5:fd:b9:
                    e6:16:04:7c:d9:a7:d8:ce:6a:4d:dc:8e:e7:a8:96:
                    91:9f:ab:c0:b9:87:6e:c0:96:9e:8d:aa:05:6a:87:
                    22:b2:da:f4:9c:3d:c2:87:d4:cc:2b:ef:62:ad:d0:
                    63:e4:99:e9:10:c0:09:83:6c:3b:a3:0c:51:ec:fb:
                    2c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:02:59:6F:EC:E9:02:BA:4A:F1:D7:4B:A8:B2:7B:CB:4A:44:73:A6
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3137362e302f32322d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:30:97:f5:26:0e:bd:31:8a:81:d9:d0:61:f9:cd:58:c1:2f:
         8b:9c:1a:8f:6d:5c:75:ce:bd:95:ac:81:0b:94:cc:f3:62:66:
         19:7f:5d:61:9f:f0:f1:1d:fc:af:b1:31:69:4b:0c:c3:14:aa:
         95:cd:99:9b:b6:1c:92:9d:17:b6:2b:c3:1c:96:95:cd:c8:19:
         95:b6:62:40:de:d3:cd:71:79:16:a6:8e:c0:9a:68:13:5b:b2:
         1c:45:06:c9:10:19:21:22:81:cb:a6:b3:f2:6d:52:9e:91:7c:
         34:24:dd:54:29:d6:00:17:03:74:b1:99:b8:f9:24:21:d5:32:
         a4:1c:31:3a:a8:21:47:a0:83:08:c9:9c:f8:a2:b6:94:eb:16:
         83:b5:60:76:28:c8:aa:52:4b:67:ad:5c:37:a8:c1:3a:15:7f:
         a5:3a:f5:24:dd:ce:28:db:68:87:d9:a6:75:e2:ab:44:dd:0a:
         f9:0e:3b:d2:3c:49:6b:45:eb:cb:8c:58:ea:30:0f:14:21:dc:
         96:2a:50:ea:a3:c1:74:d4:f3:2b:72:94:52:93:aa:02:98:2c:
         67:88:57:cc:c1:24:63:d4:bf:f4:05:cd:5e:23:d0:e7:f3:85:
         5a:44:fc:d2:d5:98:47:8e:f8:87:1e:48:4b:3a:d1:75:bf:c1:
         2a:4d:14:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----