Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138312e302f32342d3234203d3e20323732303131.roa
File:                     3231362e3132322e3138312e302f32342d3234203d3e20323732303131.roa (raw, json)
Hash identifier:          rmTu7nPYkLaJsqxfiZ4yS1rofTt4KUl5DpXxzhxbw3U=
Subject key identifier:   EB:54:2E:1A:B8:36:83:5D:BA:26:21:3E:4E:82:9F:94:2B:18:91:A4
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       3C9AC16DA1B9DECA93F072B24F4DF57A9C9CD013
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138312e302f32342d3234203d3e20323732303131.roa
Signing time:             Mon 11 Jul 2022 08:30:52 +0000
ROA not before:           Mon 11 Jul 2022 08:25:52 +0000
ROA not after:            Mon 10 Jul 2023 08:30:52 +0000
asID:                     272011
IP address blocks:        216.122.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:9a:c1:6d:a1:b9:de:ca:93:f0:72:b2:4f:4d:f5:7a:9c:9c:d0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:52 2022 GMT
            Not After : Jul 10 08:30:52 2023 GMT
        Subject: CN=EB542E1AB836835DBA26213E4E829F942B1891A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:58:54:c8:ab:58:3b:af:fd:44:14:e2:dd:68:
                    32:15:1c:d4:d3:4a:80:94:d5:26:9f:18:be:e7:db:
                    64:a9:19:e9:8c:88:81:9a:a0:aa:11:9f:aa:fc:de:
                    59:90:16:07:2d:9e:85:31:e7:e1:6f:22:c2:ad:c5:
                    e4:77:59:19:d7:0b:67:16:dc:d1:3b:c9:5f:23:12:
                    11:03:df:d2:49:1c:ef:e4:0f:78:6b:10:f4:82:2b:
                    67:dd:3b:f4:1a:99:44:34:a1:9d:40:9e:9c:88:6d:
                    fa:42:c1:02:63:99:fd:99:d7:c6:52:ee:6e:9b:82:
                    bf:bf:03:74:ff:1b:14:3d:15:98:20:e6:69:03:4b:
                    7d:85:2d:a8:e2:5f:56:9f:a3:61:f5:47:ae:c1:ba:
                    82:29:c4:7a:87:8a:65:98:42:67:ca:43:a2:3e:41:
                    1b:89:06:94:72:3f:1d:c4:46:28:39:ad:f1:d3:66:
                    58:3d:77:b9:1f:3d:a7:28:a9:76:66:49:5f:64:c9:
                    a2:5a:70:b4:45:4f:2f:15:72:e0:4e:63:80:d2:e3:
                    d4:2a:f4:6b:ba:86:3b:23:6d:83:08:6e:60:10:7f:
                    09:92:0e:6e:ac:c1:7c:31:02:6e:db:92:c0:9d:b1:
                    77:8b:26:5b:b7:ea:b4:70:70:64:21:a1:3a:03:1f:
                    40:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:54:2E:1A:B8:36:83:5D:BA:26:21:3E:4E:82:9F:94:2B:18:91:A4
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138312e302f32342d3234203d3e20323732303131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:81:47:1b:82:23:ed:a8:d9:5d:58:25:6c:7c:b9:15:27:8f:
         28:23:f4:6c:44:4d:81:e8:8f:20:a0:44:bb:02:10:6e:ce:81:
         9e:e7:89:82:aa:f8:da:05:01:0c:f4:fb:45:f0:4e:03:ef:b9:
         91:cc:09:d5:ad:96:28:83:96:09:65:40:51:99:2b:92:f4:0c:
         44:e2:b0:44:91:44:96:09:d9:60:11:c7:8f:7d:43:14:99:19:
         cb:1c:36:28:7f:ca:0b:b8:e9:56:b3:85:3c:ae:e3:e9:f2:4a:
         3a:d4:84:a3:fc:c4:8a:26:f8:91:b7:1a:90:67:e1:fb:c2:55:
         ee:26:7b:86:70:bc:b1:b0:6c:54:1e:af:20:f8:93:ea:6f:c3:
         6d:73:27:c9:9f:63:58:1c:fb:ed:ed:0a:14:ec:22:bc:ef:2a:
         ef:20:14:b2:e5:a0:fb:c4:d1:70:24:4c:b1:33:b8:fe:33:e2:
         b9:62:71:bf:60:b3:e4:b3:26:2c:ca:dc:f5:5a:35:92:5b:02:
         45:17:b8:8a:3f:02:6d:e2:93:fd:e5:e3:8b:83:c9:d2:d3:81:
         89:2f:6f:fd:43:57:3a:d1:ea:ac:b1:e7:1b:b7:c1:6d:a1:00:
         a8:c0:9c:a7:5d:ce:ae:97:42:25:fd:fa:09:98:f2:f3:34:e3:
         20:43:be:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----