Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS17447.roa
File:                     AS17447.roa (raw, json)
Hash identifier:          CVm6za8NlqC1FKO7ur4z5GvM0n3FW4XwYBIcyaba3cw=
Subject key identifier:   53:60:8B:EC:11:9C:8D:E1:00:41:38:9C:11:95:5B:77:EE:D8:8B:DA
Certificate issuer:       /CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
Certificate serial:       63EF64272A0797C814D28C2D40D776486EF6A784
Authority key identifier: 36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS17447.roa
Signing time:             Tue 13 Sep 2022 05:56:01 +0000
ROA not before:           Tue 13 Sep 2022 05:51:01 +0000
ROA not after:            Tue 12 Sep 2023 05:56:01 +0000
asID:                     17447
IP address blocks:        216.122.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:ef:64:27:2a:07:97:c8:14:d2:8c:2d:40:d7:76:48:6e:f6:a7:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc35ac4f9399e102a1f161738420e3d632039280704
        Validity
            Not Before: Sep 13 05:51:01 2022 GMT
            Not After : Sep 12 05:56:01 2023 GMT
        Subject: CN=53608BEC119C8DE10041389C11955B77EED88BDA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bf:59:28:93:15:9e:2e:c2:b9:da:d8:36:8a:
                    b0:d8:1a:9d:85:10:2d:0b:74:41:ec:f6:0d:b2:8f:
                    fe:69:0c:da:22:56:01:f4:18:95:50:4e:fc:4f:1d:
                    b4:f1:c6:d5:f9:38:aa:c7:86:15:60:2a:f2:7b:00:
                    9d:9a:a6:7a:03:5d:92:5d:de:15:85:95:50:c7:8a:
                    f1:4f:0c:14:b6:e9:33:98:00:22:d1:3c:58:c8:56:
                    5b:b4:94:5b:fd:93:2e:84:a8:11:19:08:e0:a8:14:
                    cc:e3:f5:32:52:29:5d:8d:af:d4:5c:0e:25:92:3f:
                    c0:cf:49:71:d6:0e:30:6f:66:41:fe:98:9c:25:d5:
                    2b:41:a0:6e:5c:42:39:a0:40:a2:01:df:d3:4f:81:
                    e7:ec:1d:4f:16:5e:52:a5:92:dc:fb:2f:31:09:69:
                    10:8e:58:bd:b1:65:24:99:4a:dd:b6:bc:3f:a2:bf:
                    8b:a9:eb:d0:b9:d5:55:9a:aa:5e:ac:61:f1:bf:6c:
                    07:74:5e:24:98:9a:3a:af:a2:a1:8c:22:c3:65:df:
                    d9:cd:ad:85:5f:c2:37:41:ae:78:f3:c4:e7:33:77:
                    17:ba:86:eb:c4:c3:70:b1:93:9e:e9:6f:7d:12:47:
                    87:a1:72:c8:4b:66:dd:86:39:0e:8c:71:7b:25:71:
                    e3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:60:8B:EC:11:9C:8D:E1:00:41:38:9C:11:95:5B:77:EE:D8:8B:DA
            X509v3 Authority Key Identifier:
                keyid:36:58:6C:30:90:28:07:3C:A6:EA:D3:68:8E:3D:88:93:08:73:65:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/36586C309028073CA6EAD3688E3D889308736587.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc35ac4f9399e102a1f161738420e3d632039280704.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/0/AS17447.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:39:d0:ad:19:3c:4e:c9:2b:ea:b9:2c:5e:c4:19:be:ef:be:
         bb:41:53:8d:ac:cb:d0:33:24:d8:8f:4f:d5:f3:41:97:f3:b6:
         69:b2:ec:6f:80:79:51:32:33:78:87:76:00:27:03:18:05:4d:
         bb:03:34:ac:3c:be:b5:c2:de:19:db:4e:35:16:42:f8:55:98:
         ea:f5:9b:e0:d6:d7:9d:4f:72:b4:35:83:20:61:de:b8:15:88:
         f7:8b:43:00:8c:a1:64:36:24:5c:91:49:e5:9f:23:b6:37:73:
         29:97:ef:c1:fc:0f:bc:1e:2b:34:70:75:37:11:a7:99:c8:32:
         ac:28:f1:1b:80:61:7f:37:21:9d:5c:47:5a:a9:2d:81:83:3e:
         ba:9a:e6:70:30:f7:4f:a9:f4:8e:1f:f5:e9:c3:8b:79:44:1b:
         f2:76:f2:15:e6:fe:11:80:5c:20:83:cc:6f:82:0b:dc:ad:8c:
         04:46:83:dd:55:f5:a3:dc:39:0b:3e:69:ea:3d:b1:04:0c:bb:
         5a:e8:ed:cc:92:a4:78:10:5f:a1:b9:75:41:65:94:32:f1:2e:
         e2:38:46:15:ef:33:54:14:64:0d:c2:1d:90:cd:ef:9e:b3:cb:
         04:1a:ab:6e:69:2c:dd:0d:72:0c:81:16:5a:cd:cc:0f:1f:85:
         37:55:8a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----