Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS136744.roa
File:                     AS136744.roa (raw, json)
Hash identifier:          vOgXiQnsIBCEo0nr3MdkwQ2ZiBbNk6FV4bYFTAP1rlo=
Subject key identifier:   AD:09:59:98:37:DA:7E:1C:EE:F8:30:DA:0D:AE:54:33:A5:DD:E1:8A
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       097C278D7D4CA5C4F1465753A1F809B702FACB3B
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS136744.roa
Signing time:             Thu 08 Sep 2022 06:49:10 +0000
ROA not before:           Thu 08 Sep 2022 06:44:10 +0000
ROA not after:            Thu 07 Sep 2023 06:49:10 +0000
asID:                     136744
IP address blocks:        216.122.162.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:7c:27:8d:7d:4c:a5:c4:f1:46:57:53:a1:f8:09:b7:02:fa:cb:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Sep  8 06:44:10 2022 GMT
            Not After : Sep  7 06:49:10 2023 GMT
        Subject: CN=AD09599837DA7E1CEEF830DA0DAE5433A5DDE18A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:15:d0:fd:b9:7a:11:34:df:14:07:41:6a:21:
                    20:1e:cb:49:0b:61:64:81:ae:3e:e6:83:33:a4:26:
                    5b:18:15:ac:16:cc:5e:8a:82:95:0b:38:02:b7:44:
                    eb:42:e6:15:f2:ef:af:17:f9:6e:34:93:de:86:77:
                    06:d6:14:aa:dd:fc:72:00:8b:4c:78:b2:d9:5d:b1:
                    aa:27:75:1e:f1:50:b4:ea:59:24:67:94:f0:00:71:
                    74:8e:1f:e9:74:ce:5a:e1:9e:98:1c:d2:5d:f4:07:
                    b4:e3:08:12:d9:dc:8e:80:4b:b3:05:4a:4a:42:95:
                    29:c7:7c:39:0a:1a:d1:17:45:6a:53:53:81:a9:90:
                    bb:f8:32:b3:65:d4:97:09:da:54:da:a8:c1:a5:5a:
                    b5:c0:04:8d:c3:bb:ba:8d:10:f2:37:70:3d:cc:e5:
                    ce:0d:71:f6:af:43:f5:e3:9b:6a:98:eb:52:f7:91:
                    a6:00:6b:8d:d2:8e:df:73:ae:5d:19:fa:dc:cd:e0:
                    93:e1:3e:43:3a:65:a3:54:40:51:34:44:a6:07:7e:
                    26:8a:e4:2f:a6:fe:d1:70:6d:48:bb:34:81:73:1a:
                    47:56:ec:5b:99:3f:f6:8e:31:57:13:33:85:fb:e5:
                    44:3f:1d:20:2a:f2:00:58:e7:6a:49:eb:ee:c6:75:
                    f5:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:09:59:98:37:DA:7E:1C:EE:F8:30:DA:0D:AE:54:33:A5:DD:E1:8A
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS136744.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:cc:3c:cb:7f:f4:01:44:3c:51:d1:9c:1f:5c:76:01:88:94:
         38:b5:d8:52:47:20:56:26:71:8e:58:a0:72:ab:47:7a:01:16:
         a6:0e:80:87:e6:de:b5:2c:c6:03:93:ab:34:b4:3d:9c:11:0c:
         8f:29:50:81:58:f0:0a:ac:2b:7d:8c:e5:81:11:9c:3d:b9:2b:
         74:24:76:60:f6:4e:37:8b:72:7b:f1:e6:00:26:0d:28:02:d7:
         92:d4:99:62:59:18:5a:f8:b1:d0:0e:73:85:43:4d:2a:58:ee:
         b9:bd:df:8a:e1:df:fe:14:02:90:0b:b5:b5:e2:89:2d:d6:6b:
         33:b2:2e:de:ee:16:00:f2:82:e4:4b:fe:6a:66:53:d9:96:60:
         72:52:dc:8d:80:ac:63:99:64:b4:93:15:40:a2:79:d5:13:33:
         8c:65:49:9b:14:41:0e:f2:53:eb:ca:a8:ef:73:77:ff:44:0a:
         5d:9c:45:3c:6e:2c:8c:9b:f4:a8:0f:2b:85:fd:fd:92:d1:12:
         8e:82:90:c1:29:04:15:9e:71:69:39:b6:f5:85:a8:e0:55:01:
         0c:39:5e:6d:98:ab:ca:c2:85:af:20:b6:b7:50:ea:cb:aa:bc:
         80:58:ff:e3:11:7b:21:34:44:97:61:f9:49:e0:fd:a7:a6:9e:
         60:21:72:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----