Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3139312e302f32342d3234203d3e203139343337.roa
File:                     3231362e3132322e3139312e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          WnRgFsFnsSb4SabgAMvkG2g0CLUlV5j2894OBEM+hm8=
Subject key identifier:   8B:52:D9:81:0D:12:CA:7C:4B:A0:25:00:09:30:BD:23:CF:E7:6F:AE
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       546AD1173F8247E26893D6D12E7CCC1200122863
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3139312e302f32342d3234203d3e203139343337.roa
Signing time:             Mon 11 Jul 2022 08:30:54 +0000
ROA not before:           Mon 11 Jul 2022 08:25:54 +0000
ROA not after:            Mon 10 Jul 2023 08:30:54 +0000
asID:                     19437
IP address blocks:        216.122.191.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6a:d1:17:3f:82:47:e2:68:93:d6:d1:2e:7c:cc:12:00:12:28:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Jul 11 08:25:54 2022 GMT
            Not After : Jul 10 08:30:54 2023 GMT
        Subject: CN=8B52D9810D12CA7C4BA025000930BD23CFE76FAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f7:f3:50:2b:dd:76:23:c7:a5:a7:fa:c2:13:
                    a6:2f:d7:36:db:c3:14:e7:1e:49:ed:7d:29:aa:22:
                    e9:ca:40:c3:d8:87:3b:92:95:64:ae:61:90:cb:47:
                    44:68:d1:86:4d:d1:00:ae:34:1c:0f:1f:60:e7:05:
                    7d:92:83:47:b8:da:8e:d2:d6:c1:be:5f:ed:2a:ff:
                    6c:a3:1a:19:57:d9:79:41:f9:1b:aa:99:f3:e5:15:
                    1d:57:7e:f9:54:d5:bc:b2:7e:4b:4f:bb:fd:22:02:
                    c5:82:fd:c2:65:7d:7e:40:90:48:41:d7:27:93:11:
                    ab:4d:70:a7:97:e9:3c:1e:a3:77:ff:ea:44:83:f0:
                    72:af:c9:3c:cd:a6:3a:9b:7c:53:1d:f8:a1:90:46:
                    ac:34:88:2f:33:33:aa:d2:5b:4e:77:63:fb:13:b8:
                    f7:01:08:42:1f:0d:18:11:52:dc:3b:86:c4:61:7c:
                    b6:74:a6:4d:04:da:45:c6:0d:85:89:cf:44:f8:17:
                    fa:8e:4d:79:27:f1:ff:46:8f:bb:34:14:92:23:1d:
                    0f:d3:f5:6a:96:17:e5:bd:b2:c3:0f:a8:4a:2c:36:
                    5e:20:61:05:ed:db:62:cb:c1:76:fc:66:25:e4:2f:
                    19:eb:b2:79:48:76:54:9b:2b:ca:a6:0e:27:ca:c7:
                    c1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:52:D9:81:0D:12:CA:7C:4B:A0:25:00:09:30:BD:23:CF:E7:6F:AE
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/3231362e3132322e3139312e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:85:0e:25:91:e2:b0:9c:bb:37:aa:82:38:e4:5b:7b:47:fc:
         fa:70:9a:5a:13:12:b2:9c:2c:ae:a1:fd:71:e9:a6:97:61:1b:
         4f:be:cf:b8:3c:b7:06:ee:53:96:0c:1f:e2:5a:31:b2:9b:29:
         c1:68:72:1b:d1:69:df:b4:07:fb:8b:9e:b7:8a:f9:e4:3e:6d:
         59:3d:4f:da:92:2d:d9:51:aa:8d:d4:62:c7:c8:7a:44:5c:72:
         a2:18:87:ca:1e:22:c5:24:1f:db:c6:47:f6:2d:ae:98:c6:d7:
         5f:fb:53:ed:42:6b:cc:71:8d:08:58:90:4b:7b:46:18:73:96:
         96:f5:bb:3a:d3:c0:51:a0:bd:f5:7d:e9:31:a3:a6:8f:bc:88:
         87:4e:a1:89:dd:e6:a9:af:b2:b1:e6:f0:dd:a2:d3:9f:14:b9:
         b2:5b:1d:d7:d9:1e:f9:26:38:1d:fc:b8:b2:3d:22:52:bf:6a:
         0d:30:23:42:d5:ed:5c:f8:73:f7:ed:de:68:e5:0b:0d:67:bc:
         7c:64:44:6d:a9:ae:15:8d:15:29:5f:c9:e3:a6:81:6f:2b:c8:
         53:af:ef:62:a3:09:9a:26:0c:43:db:67:b9:d5:e6:34:23:69:
         9d:fc:8f:50:2c:99:00:95:61:75:23:f3:8e:19:93:cc:87:e1:
         15:fb:0c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----