Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138372e302f32342d3234203d3e203230343534.roa
File:                     3231362e3132322e3138372e302f32342d3234203d3e203230343534.roa (raw, json)
Hash identifier:          MSu6jIUFKh0vjMP3I3/tAejDH2uToG6alNJQUaSjLew=
Subject key identifier:   89:82:20:3C:1C:DA:A6:23:5D:29:DF:7A:31:F7:F0:D1:ED:C2:58:D7
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       07F970B3FB0B5B1665A55DC5E543B53BDB220F50
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138372e302f32342d3234203d3e203230343534.roa
Signing time:             Fri 02 Sep 2022 16:15:10 +0000
ROA not before:           Fri 02 Sep 2022 16:10:10 +0000
ROA not after:            Fri 01 Sep 2023 16:15:10 +0000
asID:                     20454
IP address blocks:        216.122.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f9:70:b3:fb:0b:5b:16:65:a5:5d:c5:e5:43:b5:3b:db:22:0f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Sep  2 16:10:10 2022 GMT
            Not After : Sep  1 16:15:10 2023 GMT
        Subject: CN=8982203C1CDAA6235D29DF7A31F7F0D1EDC258D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3f:ed:23:85:a9:45:f4:09:cb:37:c8:ae:9b:
                    c4:8e:0f:1c:8e:c1:87:aa:21:c3:cc:02:cc:11:a6:
                    a0:19:ad:79:bc:50:43:2b:4d:38:27:39:d1:8d:c8:
                    0a:ed:4a:49:3b:2f:12:17:fd:12:15:b9:cf:f9:09:
                    a4:cc:a4:f8:70:36:59:d2:3c:1d:ac:08:cc:05:b0:
                    a6:31:7f:2f:5d:53:b2:09:cd:27:cf:bf:2b:8c:71:
                    8f:4a:dc:cf:62:6b:8f:ac:1b:93:7c:bf:d8:65:58:
                    90:1b:29:1c:ae:ed:d8:76:c4:77:92:30:ec:0d:1b:
                    1a:5d:75:f6:1e:2a:06:a3:9f:3d:82:82:b7:cb:bf:
                    5e:5d:31:d2:84:20:b9:6c:66:ae:57:3e:bd:41:02:
                    47:34:2f:fb:c3:4b:10:63:0d:09:d2:55:db:b8:6b:
                    86:b5:9d:99:e8:14:b2:1a:6f:a7:5a:65:21:97:59:
                    c3:18:5f:f1:f9:e0:0c:d4:c5:8a:5f:8b:3c:42:0a:
                    69:30:c1:c1:5e:f4:6d:21:ee:7f:a5:30:0e:0b:56:
                    57:9f:9d:c2:0a:f9:f0:f9:b2:20:ed:03:41:14:2d:
                    2e:44:80:65:1c:d6:58:81:df:72:bd:96:cb:ad:4e:
                    7f:75:d4:0b:08:14:af:00:da:74:b8:95:92:97:a7:
                    45:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:82:20:3C:1C:DA:A6:23:5D:29:DF:7A:31:F7:F0:D1:ED:C2:58:D7
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138372e302f32342d3234203d3e203230343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:ac:d2:b3:5a:ef:a3:f2:d5:2e:c6:01:7e:b6:1c:bd:cf:79:
         c7:7e:29:7e:98:23:28:23:c8:c0:14:93:54:9b:b7:cf:56:37:
         4d:ce:e2:5f:29:db:3b:a6:86:e1:71:96:f7:02:a9:cd:fe:5b:
         a5:19:b9:8f:80:79:83:23:c1:33:8e:a0:49:c0:70:44:4d:ee:
         8b:61:b4:a1:ba:14:6a:a1:12:fb:df:18:7c:18:52:4a:64:8a:
         ca:23:bd:c1:98:58:53:b0:1d:98:c8:6c:d3:b6:ea:d8:9e:14:
         95:b7:90:d6:96:29:07:f2:ee:fa:f8:06:ae:b8:c1:9f:fa:12:
         83:21:80:a5:73:92:c0:87:b1:78:ba:92:0e:c7:f7:8a:f0:e2:
         76:d7:f1:75:a7:fd:3f:29:34:b5:45:83:0f:f4:74:33:b7:13:
         8e:1e:9a:61:06:4d:ec:6f:c8:6e:eb:40:ac:51:0e:89:28:72:
         40:ce:36:63:38:2d:b0:18:bf:2e:9e:58:34:4a:3a:ae:6c:09:
         28:f1:10:8f:66:c2:5f:2a:fc:09:11:d2:c7:a5:86:cd:65:67:
         9d:28:f9:0b:d6:b2:06:b7:fe:0b:21:85:51:e0:13:56:9a:ea:
         c0:37:5c:f9:e0:f1:13:6d:5c:a3:db:9d:bd:d7:90:44:29:94:
         da:19:72:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----