Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138372e302f32342d3234203d3e20313339353731.roa
File:                     3231362e3132322e3138372e302f32342d3234203d3e20313339353731.roa (raw, json)
Hash identifier:          wM78P8MMRhZa62YC354JVSuWtNkci6m+2fQ+p0b+Gxo=
Subject key identifier:   7C:FF:51:4B:0F:F0:1E:89:C1:D3:41:EE:C8:84:B1:33:76:64:7E:E3
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       1E1D9A04BB7CA4B28CE73B55176344837F926976
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138372e302f32342d3234203d3e20313339353731.roa
Signing time:             Mon 11 Jul 2022 08:30:53 +0000
ROA not before:           Mon 11 Jul 2022 08:25:53 +0000
ROA not after:            Mon 10 Jul 2023 08:30:53 +0000
asID:                     139571
IP address blocks:        216.122.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:1d:9a:04:bb:7c:a4:b2:8c:e7:3b:55:17:63:44:83:7f:92:69:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:53 2022 GMT
            Not After : Jul 10 08:30:53 2023 GMT
        Subject: CN=7CFF514B0FF01E89C1D341EEC884B13376647EE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:27:b5:35:6c:d8:a7:1d:95:9e:eb:bd:db:ec:
                    2d:9a:3c:56:3d:30:00:f3:72:86:4f:06:65:b8:f2:
                    ac:c5:99:37:b2:a7:ac:57:66:fc:3e:1d:02:c9:15:
                    82:ea:87:e2:5a:bd:23:29:68:cf:cc:e9:3d:cf:7a:
                    41:c1:54:e4:22:de:29:d0:0e:bc:19:5c:95:e5:1f:
                    12:de:4b:1b:ad:06:1b:e2:79:5d:06:26:65:db:39:
                    c8:57:48:af:b8:2d:c2:1f:1d:42:e6:d3:14:6f:cd:
                    c6:09:f4:32:11:e9:25:d7:05:21:00:cb:e7:26:eb:
                    99:d6:b5:69:e8:e8:df:b5:ec:a1:a4:d8:d7:e8:9f:
                    62:66:50:e7:03:5f:eb:c0:5e:94:36:c5:04:2e:37:
                    b3:85:dc:12:4c:a8:e5:00:26:94:50:c8:54:04:db:
                    33:1d:f4:c9:25:22:52:73:2c:b6:d2:f2:3d:56:ec:
                    5c:04:93:b4:9e:d9:d7:1a:ff:bb:18:be:fd:75:c4:
                    9a:cd:17:79:44:24:cb:7d:96:36:e2:69:1a:35:1f:
                    94:db:f6:26:38:55:cd:bd:8d:2b:47:d0:52:58:2d:
                    50:36:7f:4c:94:08:56:18:88:e2:ac:65:7f:a6:4f:
                    81:5e:0a:ed:69:21:a9:4b:db:52:8a:fb:c5:61:5c:
                    d0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FF:51:4B:0F:F0:1E:89:C1:D3:41:EE:C8:84:B1:33:76:64:7E:E3
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138372e302f32342d3234203d3e20313339353731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:67:e2:be:91:ec:a4:07:52:a7:5e:56:f0:c5:eb:20:2b:c2:
         fe:4f:4f:5a:83:16:ef:31:bc:ef:21:51:68:94:d4:f5:8c:5d:
         36:a5:8b:74:19:80:62:16:20:cf:63:18:f6:b9:30:dc:67:f6:
         3b:29:b9:60:7b:fc:19:c0:82:7d:ff:54:e4:87:6b:58:17:34:
         90:8a:17:c5:03:e7:78:0c:7d:33:1b:a5:8a:6c:ad:48:a0:ce:
         3b:77:98:ab:d9:6b:dd:71:ab:fd:0a:a3:66:30:f5:e8:67:b2:
         28:a5:02:6a:8e:4e:d8:43:dc:27:b1:7d:28:b7:c6:1d:3e:72:
         47:f0:bf:73:49:4a:94:00:07:12:a3:bd:a2:55:ff:dc:e3:72:
         ad:fb:63:83:bb:09:a3:2b:71:2c:37:19:2b:6f:05:4e:c2:7c:
         ae:ca:a2:3e:cf:02:24:a9:e7:40:55:69:a4:b3:83:da:5a:a2:
         14:e1:53:35:5a:8f:c3:a2:e1:bb:76:36:47:2d:8f:d4:d4:db:
         64:6d:b3:db:b5:37:79:40:28:6c:9a:91:4a:e2:04:17:d9:8e:
         c5:d0:bf:de:65:0e:48:20:b1:a1:be:2d:9f:25:e8:8f:d0:93:
         b7:b1:6f:eb:e4:8f:fe:3b:20:b6:77:46:a6:3c:65:28:bd:a9:
         03:4a:b1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----