Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138392e302f32342d3234203d3e20323037333236.roa
File:                     3231362e3132322e3138392e302f32342d3234203d3e20323037333236.roa (raw, json)
Hash identifier:          adQEuTwBwloHrHF8GrQR7kQTEeH5W5lVAHOOiXKP2f0=
Subject key identifier:   D4:7A:BF:55:53:BD:E1:4D:40:75:1B:ED:2B:DC:0E:A4:37:AA:12:40
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       1AE640EDBDA79E25504FC9A7B959A668FF940F40
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138392e302f32342d3234203d3e20323037333236.roa
Signing time:             Mon 11 Jul 2022 08:30:49 +0000
ROA not before:           Mon 11 Jul 2022 08:25:49 +0000
ROA not after:            Mon 10 Jul 2023 08:30:49 +0000
asID:                     207326
IP address blocks:        216.122.189.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e6:40:ed:bd:a7:9e:25:50:4f:c9:a7:b9:59:a6:68:ff:94:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:49 2022 GMT
            Not After : Jul 10 08:30:49 2023 GMT
        Subject: CN=D47ABF5553BDE14D40751BED2BDC0EA437AA1240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:03:d2:73:4a:c8:3e:a7:ae:b6:a5:9e:fa:06:
                    91:a3:ab:b6:cc:6a:87:e0:f3:6d:9b:ad:43:8b:e0:
                    4d:1f:7f:a4:0d:7e:de:84:f7:ae:85:de:00:3d:d1:
                    fe:f8:52:fe:b8:cd:60:9d:16:30:b2:03:95:cf:a4:
                    ac:79:70:f2:74:2b:0a:a1:77:4f:e3:e0:59:97:5e:
                    b9:b9:12:9b:d0:36:e7:91:5f:6a:07:46:59:db:6f:
                    a7:a8:75:5a:0d:30:27:68:99:7e:53:79:53:da:01:
                    d8:8a:e5:55:1e:ed:38:ef:ae:f7:d0:fb:ea:a5:73:
                    86:b9:df:cb:ae:77:03:19:a1:c6:04:eb:85:75:f4:
                    a6:da:73:75:64:b4:8a:53:23:d6:cc:0e:7d:73:ef:
                    7e:e2:3e:85:77:50:34:dd:1e:9c:3d:c3:46:35:d2:
                    ed:82:3e:a3:ff:d4:e3:d1:76:9b:3a:84:2c:e4:c5:
                    32:7d:e7:62:3e:8e:c8:1f:b6:f0:60:ea:4f:71:b1:
                    ca:09:8e:6b:29:2d:86:80:d3:67:52:e0:ee:57:34:
                    2f:04:c3:35:65:d8:ad:55:5e:7b:cf:97:80:19:78:
                    26:ae:00:b6:a7:b4:2a:b1:10:65:e8:ef:28:46:96:
                    05:28:79:9f:32:4f:3c:6e:e5:16:02:00:2a:95:11:
                    f0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:7A:BF:55:53:BD:E1:4D:40:75:1B:ED:2B:DC:0E:A4:37:AA:12:40
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3138392e302f32342d3234203d3e20323037333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:bb:90:af:41:36:1a:13:48:e0:68:db:72:d3:a6:a9:2a:e6:
         ee:d8:99:fc:88:91:7a:14:f3:33:39:8f:f3:d2:f7:a3:80:6f:
         8d:90:cf:08:ba:4d:5d:a6:58:d6:54:6a:a9:2f:4b:0f:e6:7c:
         07:a7:30:15:45:72:02:24:d0:1e:18:36:58:7c:bc:79:55:94:
         a4:dd:dc:30:10:0b:54:6a:66:50:7f:cb:fc:dd:01:62:dd:9d:
         3a:22:7a:9e:83:a2:aa:d6:e3:37:b6:b3:17:a8:53:13:b3:fb:
         f3:e3:fc:d0:ca:62:3e:ac:f3:5f:6a:16:d7:81:1a:7a:43:1a:
         9c:09:53:18:4d:d9:af:f5:6f:b9:4c:18:ae:22:63:38:d7:cd:
         f5:ec:03:93:2e:5f:39:f7:10:f3:73:fb:37:9c:7a:8e:54:b1:
         bc:06:17:3a:24:9e:21:ca:08:a5:f2:3f:94:86:b3:c7:fb:59:
         9e:c8:68:0e:89:39:83:76:d6:ae:85:44:10:24:22:d7:79:26:
         56:52:bb:ff:03:bf:28:d5:36:94:b7:71:fb:39:03:f1:f1:4e:
         a9:11:3c:0b:e7:2b:c1:9a:22:89:71:84:d4:c2:33:fc:f0:04:
         f6:25:68:22:27:67:98:09:92:f6:2c:40:87:19:5a:dc:30:e0:
         57:25:68:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----