Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138352e302f32342d3234203d3e20323131353835.roa
File:                     3231362e3132322e3138352e302f32342d3234203d3e20323131353835.roa (raw, json)
Hash identifier:          gAruhp+FAsGJfl/ytp25UtCOFcfoLQ0CDfHkaIc3U8Y=
Subject key identifier:   B3:3F:7A:36:28:05:10:70:67:31:AE:CC:BE:F6:9F:1A:D4:F8:54:00
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       490F4D456F866787C477F9D9510AB048F166ADC8
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138352e302f32342d3234203d3e20323131353835.roa
Signing time:             Mon 11 Jul 2022 08:30:55 +0000
ROA not before:           Mon 11 Jul 2022 08:25:55 +0000
ROA not after:            Mon 10 Jul 2023 08:30:55 +0000
asID:                     211585
IP address blocks:        216.122.185.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0f:4d:45:6f:86:67:87:c4:77:f9:d9:51:0a:b0:48:f1:66:ad:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:55 2022 GMT
            Not After : Jul 10 08:30:55 2023 GMT
        Subject: CN=B33F7A36280510706731AECCBEF69F1AD4F85400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e2:83:25:e9:18:07:e2:21:ea:5e:02:73:0e:
                    a4:8c:82:14:c3:e4:20:a7:7f:b6:95:4a:6c:35:f9:
                    a3:e8:a5:84:2e:03:eb:bf:b6:55:40:8e:5f:ca:44:
                    0d:b3:15:5e:91:71:5f:00:be:b1:8b:c3:1b:30:ee:
                    39:56:c3:e6:92:88:2d:ea:5f:ec:ba:cc:e2:4a:83:
                    e9:a0:5b:37:94:a7:b6:f4:f8:a7:e3:98:e7:1a:cf:
                    aa:43:b0:1c:6d:01:12:6e:46:20:b2:83:c7:dd:c0:
                    1b:e9:92:f7:3b:cd:44:44:59:8b:63:b0:20:e9:a1:
                    02:d4:a6:ec:16:9e:68:a9:f6:22:4e:2c:04:f0:62:
                    a5:44:6a:c7:24:c2:b4:ce:67:49:db:03:8f:7b:57:
                    4e:b5:bc:e3:15:8a:11:32:cd:dc:5e:f9:5a:9e:9a:
                    03:2b:99:85:e9:a5:28:e0:67:73:f4:a1:43:d9:5e:
                    11:b0:21:0e:c5:dc:f6:a2:87:a3:04:91:99:da:3e:
                    1b:01:1b:42:73:dc:35:a2:ad:dc:bc:7c:ca:5f:ba:
                    6f:15:a2:43:8a:e1:4c:c3:30:48:82:cb:58:3c:a1:
                    e4:51:aa:ba:0e:e5:19:7a:49:89:b8:0d:0b:75:ad:
                    a2:7e:00:b6:73:a9:15:08:0a:f8:a4:a8:e8:6e:fb:
                    21:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:3F:7A:36:28:05:10:70:67:31:AE:CC:BE:F6:9F:1A:D4:F8:54:00
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138352e302f32342d3234203d3e20323131353835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:51:b8:c7:54:94:91:90:30:f7:ac:dc:71:02:e6:3d:90:d0:
         d0:ac:37:4f:77:d5:ee:7e:ee:43:18:ea:8c:bd:d8:45:5c:3e:
         05:39:64:e7:34:f9:00:13:cf:57:17:11:d1:16:b8:ce:03:b4:
         ff:12:8a:92:c3:b0:b2:6b:b3:e5:67:0d:04:8b:87:4e:bb:71:
         af:b5:ad:fe:2a:b6:cd:1a:29:47:7b:5e:ce:37:e5:b2:e8:b2:
         f8:87:fc:2b:17:b9:18:65:ba:44:9e:40:c4:32:1c:af:ff:a1:
         bc:27:aa:b5:16:4e:f4:bb:36:e5:40:86:5d:25:9d:74:c1:e8:
         f0:d4:36:f8:27:b4:fb:32:de:9d:97:d0:fb:aa:cc:49:3b:97:
         4e:a2:be:76:c2:ca:91:39:48:31:b2:6a:9a:ab:b0:3c:01:6f:
         d9:e0:ad:e6:cf:b4:d7:15:85:9d:9e:f8:4a:ed:a9:d9:b9:05:
         90:32:06:c1:e2:8d:b6:24:b8:7d:44:60:b4:23:ab:a5:e6:89:
         86:cf:26:ca:6e:b7:1c:65:9c:b1:0b:a9:64:0b:9b:1e:f7:77:
         a2:ba:a4:7a:a4:b6:6f:7d:f3:6d:52:84:6d:10:16:95:4e:e3:
         5b:58:42:e9:b0:80:37:44:48:22:de:c3:d2:76:1c:7b:7d:f5:
         94:d7:52:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----