Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138382e302f32342d3234203d3e203433323630.roa
File:                     3231362e3132322e3138382e302f32342d3234203d3e203433323630.roa (raw, json)
Hash identifier:          lihQk6ISh59yHYLJtIDkSdycv+RPAeXIvCkKG5/DM9g=
Subject key identifier:   2F:86:96:61:B9:2E:F3:43:7D:FF:48:D5:F2:0F:DC:B8:9D:C2:A6:27
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       6517B7DE5A12ECF3A6634CC2D35F3DC47D5E005B
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138382e302f32342d3234203d3e203433323630.roa
Signing time:             Mon 11 Jul 2022 08:30:50 +0000
ROA not before:           Mon 11 Jul 2022 08:25:50 +0000
ROA not after:            Mon 10 Jul 2023 08:30:50 +0000
asID:                     43260
IP address blocks:        216.122.188.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:17:b7:de:5a:12:ec:f3:a6:63:4c:c2:d3:5f:3d:c4:7d:5e:00:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:50 2022 GMT
            Not After : Jul 10 08:30:50 2023 GMT
        Subject: CN=2F869661B92EF3437DFF48D5F20FDCB89DC2A627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f7:1d:7a:9a:e6:fd:3f:1a:7f:f2:85:f9:ec:
                    df:da:72:51:89:23:fa:73:5d:3c:50:57:3d:55:cf:
                    23:2b:60:e0:a4:ad:19:1c:96:f7:80:0e:b2:7e:7d:
                    79:df:1b:92:70:56:e3:8d:6c:60:ba:ca:ce:7d:1a:
                    9a:a9:07:33:ca:23:92:27:cf:04:8b:b5:8a:92:ea:
                    a3:77:6f:ad:62:e7:5c:00:09:ed:3c:db:e4:86:58:
                    ac:7c:4e:7e:75:f7:3e:68:74:a4:b0:5d:23:19:a2:
                    1e:9e:71:08:cb:d1:ff:08:02:4d:ae:cf:94:2a:17:
                    ae:e4:83:77:53:fa:95:04:ac:ee:e8:6d:f2:de:ef:
                    98:2e:34:64:69:97:ab:3b:74:36:12:20:9a:a7:7f:
                    e8:25:cf:dc:60:d6:37:2e:71:3d:95:8e:8b:47:20:
                    f8:11:14:1f:6f:38:4a:2d:9c:7e:5b:90:b0:d1:78:
                    05:59:2b:4c:69:53:90:ad:61:1e:8c:82:45:f0:76:
                    76:78:8a:28:3e:fb:e3:fe:35:0b:dd:b8:73:fb:de:
                    f4:97:4e:46:88:1f:e1:14:3b:51:27:f9:2b:a5:93:
                    bb:0f:8c:a3:a3:3a:78:44:cf:26:ee:e1:8e:e9:fa:
                    71:6e:b3:6c:7c:d8:47:cc:37:7d:ea:5d:3e:4c:a2:
                    bf:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:86:96:61:B9:2E:F3:43:7D:FF:48:D5:F2:0F:DC:B8:9D:C2:A6:27
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138382e302f32342d3234203d3e203433323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:f7:bb:94:1f:cf:f5:b0:ee:11:79:be:ab:7f:c7:7e:6f:b9:
         93:14:c5:3d:65:24:1a:e1:eb:a6:72:e2:d3:a7:fa:50:3f:35:
         a4:a1:0c:8f:bf:a0:35:52:fb:b9:09:dc:7d:52:be:44:81:47:
         ae:ca:0e:32:f7:9c:da:1b:af:73:d3:ec:49:88:d3:e1:6e:29:
         77:8c:b3:38:99:29:b6:0b:dd:d7:fe:fc:f5:eb:36:2e:6c:c6:
         64:fd:72:40:d3:08:8b:5d:b9:3c:5c:ff:69:44:0e:ed:5c:1b:
         f5:95:57:5c:8b:04:39:a7:de:86:eb:be:d7:62:e0:ba:dd:cf:
         53:d1:47:5e:74:2d:9a:db:91:42:01:8b:f2:8a:64:36:7c:73:
         61:13:02:f2:3d:92:75:9b:0c:f9:1d:91:75:42:eb:3f:58:86:
         32:c0:75:29:a5:5f:69:a7:f2:d2:8b:83:39:c2:af:7c:d5:07:
         74:c0:ca:99:d0:59:39:f0:cb:82:13:a4:54:30:15:e7:d9:81:
         55:19:ce:94:7c:63:c9:ea:88:64:46:72:7a:3a:b6:46:29:62:
         4c:6d:cd:1f:81:bd:98:e5:e3:39:10:d2:8a:a2:1b:d4:f9:1d:
         12:3a:97:8a:52:de:85:75:20:39:59:58:0e:73:c2:8e:57:43:
         be:78:f9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----