Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138372e302f32342d3234203d3e203230343733.roa
File:                     3231362e3132322e3138372e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          Lo5fjB3+qYQhiXkc3wMFJlOJn3Gi7PpkiYsPTu+sVx4=
Subject key identifier:   20:23:6D:AE:B0:BC:A3:8B:44:47:58:1B:B3:E4:61:ED:2D:39:79:59
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       6B1EFF50CC11D200727B88B3D95DDB7BEB12D750
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138372e302f32342d3234203d3e203230343733.roa
Signing time:             Mon 11 Jul 2022 08:30:45 +0000
ROA not before:           Mon 11 Jul 2022 08:25:45 +0000
ROA not after:            Mon 10 Jul 2023 08:30:45 +0000
asID:                     20473
IP address blocks:        216.122.187.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:1e:ff:50:cc:11:d2:00:72:7b:88:b3:d9:5d:db:7b:eb:12:d7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:45 2022 GMT
            Not After : Jul 10 08:30:45 2023 GMT
        Subject: CN=20236DAEB0BCA38B4447581BB3E461ED2D397959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9a:4a:77:fc:ba:0d:0a:fb:f4:42:69:f4:c2:
                    af:0b:f4:3d:c7:5b:94:4d:83:56:c5:71:58:c1:71:
                    4b:d8:03:36:8c:88:e6:bb:f5:81:84:f6:ab:6c:a1:
                    70:63:e5:7b:d3:ed:9e:41:c1:7c:eb:75:e3:99:26:
                    35:7d:55:0e:f7:53:cf:74:9c:9a:0b:8c:da:e9:32:
                    b0:f1:7e:df:e0:9d:d0:67:91:0b:04:38:46:41:28:
                    7f:f2:b7:4e:e1:b6:5f:d7:2c:41:50:a3:19:f0:53:
                    f9:a8:88:92:54:f5:90:97:a2:73:bb:68:4e:a1:be:
                    88:fa:3d:38:bc:66:4a:da:d4:0a:31:53:ff:67:4d:
                    2e:83:cf:b6:fb:68:e7:83:1b:48:8a:eb:68:ac:d8:
                    6f:56:b7:21:3d:1d:0d:82:8f:13:01:df:cd:7e:24:
                    20:9a:31:e2:0f:9f:ff:1a:9d:10:e0:28:cc:8a:a0:
                    0a:a2:77:c1:3e:67:21:6b:63:98:84:65:a6:9a:78:
                    f3:68:de:8f:77:db:81:f3:35:6b:95:f0:1c:88:04:
                    57:7e:36:55:87:2f:78:1a:c0:ec:c9:af:e3:e2:30:
                    d3:bd:3d:2e:db:9b:50:8c:81:b3:43:61:38:8a:7e:
                    f6:b6:be:69:58:e4:eb:fd:c8:25:dc:6e:32:a5:01:
                    12:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:23:6D:AE:B0:BC:A3:8B:44:47:58:1B:B3:E4:61:ED:2D:39:79:59
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138372e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:e1:3e:cb:e6:ac:b3:39:7e:ac:be:11:b0:58:fd:9d:79:6a:
         e2:83:da:a0:39:2c:c8:a8:d8:ab:d7:7d:01:d5:96:c5:95:b8:
         d1:a9:14:c3:87:be:a7:72:a9:da:b0:93:ef:e0:1f:34:bb:d5:
         3e:a9:ad:97:58:e6:09:8e:15:1f:a0:2a:9f:de:ae:03:f4:8e:
         af:3d:9b:9a:2d:6a:54:6c:22:af:14:51:ee:ad:54:04:24:81:
         03:60:f9:dc:7a:87:78:3c:2a:1e:32:ed:db:01:a8:67:71:b5:
         bd:e5:d0:0b:d8:73:8b:24:07:d2:6c:f3:d9:70:b7:f1:55:02:
         ef:74:fc:b4:7c:7c:36:b6:aa:12:04:ff:99:e6:3b:5c:aa:56:
         98:15:bf:3f:ae:bb:0a:ad:a1:99:81:5c:06:49:31:f9:1a:4c:
         3c:0a:e3:a1:9d:c9:42:4b:96:d8:ce:40:3b:ce:ed:a4:90:bd:
         e0:f6:2e:9b:9d:7f:34:92:39:2f:b1:09:28:0c:17:a4:d4:4e:
         a1:c7:ea:12:7d:3d:da:17:6d:fa:a1:e1:d3:3a:bf:66:fc:12:
         da:68:2a:e2:27:14:07:02:db:7f:d4:c5:17:64:e6:db:0e:d3:
         3f:11:d2:85:2f:3c:6b:83:dc:70:06:a5:d5:90:31:5b:42:48:
         04:0b:6c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----