Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138332e302f32342d3234203d3e2037393232.roa
File:                     3231362e3132322e3138332e302f32342d3234203d3e2037393232.roa (raw, json)
Hash identifier:          1x/dceCn3B7oK3dGitS1LiOeAYHKvMf03yRlBI+if0Q=
Subject key identifier:   C9:76:EF:6B:FF:48:DC:FD:C5:91:F6:F7:23:7E:6C:11:D7:27:E5:7F
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       412975D58734C0D65F37FEB0074AB8E2D683A0DF
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138332e302f32342d3234203d3e2037393232.roa
Signing time:             Mon 11 Jul 2022 08:30:53 +0000
ROA not before:           Mon 11 Jul 2022 08:25:53 +0000
ROA not after:            Mon 10 Jul 2023 08:30:53 +0000
asID:                     7922
IP address blocks:        216.122.183.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:29:75:d5:87:34:c0:d6:5f:37:fe:b0:07:4a:b8:e2:d6:83:a0:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:53 2022 GMT
            Not After : Jul 10 08:30:53 2023 GMT
        Subject: CN=C976EF6BFF48DCFDC591F6F7237E6C11D727E57F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:37:8d:ae:1e:8e:e0:ae:fb:a9:ec:4c:71:a8:
                    6b:6a:01:fc:b7:27:c2:b1:f2:55:27:7f:39:bd:c2:
                    b7:00:af:da:8a:ce:e4:09:9d:f3:8d:98:48:13:35:
                    c0:f0:fb:d8:8a:e1:39:fe:eb:fa:28:09:af:83:49:
                    54:51:d7:05:4b:ce:d2:03:bf:0b:c1:d6:0a:6a:b8:
                    4c:f1:c4:28:06:89:bf:de:9f:d5:6c:35:2b:96:12:
                    29:80:c9:58:da:b6:ec:bb:8c:01:84:35:7f:90:e4:
                    39:62:a9:1e:02:ef:64:7a:67:d9:e6:91:61:7c:6f:
                    6d:17:30:c4:53:97:f8:59:27:ba:83:0c:e3:cb:bf:
                    89:f9:b6:fb:af:7a:74:12:e1:7a:78:3c:ce:d9:22:
                    e9:e1:97:82:6e:53:4c:19:04:ac:ab:1f:e5:85:1f:
                    e5:57:39:09:e7:28:af:96:4d:62:80:52:c6:99:1f:
                    24:0e:1a:ad:09:4b:ab:0e:df:91:df:ee:71:18:ee:
                    33:34:55:b3:9d:a9:75:b7:50:9b:fc:ca:dd:4d:d1:
                    6c:c5:6b:74:48:77:5a:f3:87:83:c0:8e:25:ba:b2:
                    40:9a:9b:12:94:8b:5d:65:49:0d:30:29:a8:7a:9d:
                    5e:32:b2:07:82:5d:39:3e:a9:f2:dc:f7:07:bb:d4:
                    94:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:76:EF:6B:FF:48:DC:FD:C5:91:F6:F7:23:7E:6C:11:D7:27:E5:7F
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138332e302f32342d3234203d3e2037393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:ea:50:64:44:94:b9:ce:27:77:98:f2:bd:c8:d0:1e:ab:a6:
         e0:2f:c8:c0:57:af:19:f6:b4:99:6d:8f:5c:3e:17:db:99:63:
         eb:90:a6:f3:43:c3:3f:6f:bd:58:8f:d1:13:7b:58:bc:2b:77:
         c8:03:69:88:56:b0:b0:63:1c:59:28:ac:c6:33:e1:2a:b1:79:
         3b:aa:2a:c9:ea:9b:0e:64:79:d2:1e:e0:2c:b8:4d:a8:6a:97:
         08:22:9b:30:10:a1:86:53:3c:3a:95:3b:95:37:76:9a:d5:27:
         37:d2:7e:96:06:32:69:3c:a8:a7:e9:61:79:60:dd:49:c8:bd:
         91:1a:aa:b3:44:3d:4e:25:90:43:8b:ce:37:bd:d2:9b:07:17:
         71:33:a4:90:88:be:aa:c1:88:3c:5c:40:c9:b3:15:f8:86:c9:
         97:ab:53:b5:5b:2f:7c:85:f7:39:2e:f6:88:72:bc:48:99:98:
         4e:d2:90:92:03:70:7f:5c:b8:bc:0f:e3:0e:d3:fe:d7:f4:b0:
         98:13:93:6e:73:fb:c0:7c:9a:85:6e:71:56:5c:68:e4:51:03:
         47:e3:8b:ff:fb:9f:5e:91:64:bc:03:f8:80:51:1f:d1:cb:31:
         54:5e:7b:db:22:a2:ef:0b:d3:98:b3:f4:2a:3a:59:94:df:61:
         5e:e4:79:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----