Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS13213.roa
File:                     AS13213.roa (raw, json)
Hash identifier:          RhbONcLVof6j1QTqnYkw+y+LtqSCrH0J59qhwdkQ1tM=
Subject key identifier:   1A:5B:F0:4A:4A:1E:B6:89:55:E5:20:4C:EA:73:72:4F:54:14:76:15
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       1E865BFAF83C8198F1AC395A18F34377C54F5E82
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS13213.roa
Signing time:             Mon 28 Nov 2022 09:41:21 +0000
ROA not before:           Mon 28 Nov 2022 09:36:21 +0000
ROA not after:            Mon 27 Nov 2023 09:41:21 +0000
asID:                     13213
IP address blocks:        216.122.166.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:86:5b:fa:f8:3c:81:98:f1:ac:39:5a:18:f3:43:77:c5:4f:5e:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:21 2022 GMT
            Not After : Nov 27 09:41:21 2023 GMT
        Subject: CN=1A5BF04A4A1EB68955E5204CEA73724F54147615
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:da:73:e9:54:05:ec:fc:82:db:24:a2:0c:2e:
                    60:8d:23:22:a3:ff:cc:c8:f0:9d:09:27:a1:cf:bf:
                    d5:68:67:3b:15:67:be:f1:93:4c:74:2f:f7:51:30:
                    1b:5b:dd:4a:31:58:70:3d:f7:11:63:7a:7a:b6:47:
                    01:0c:27:c9:b5:4a:1f:5b:1c:d1:88:ea:78:da:12:
                    a2:53:bd:fe:59:71:a1:db:09:dd:b7:5f:41:6a:80:
                    ec:d4:2e:70:95:dc:6f:3e:e3:f4:2c:06:d9:1c:11:
                    6f:a9:d9:bd:35:81:8f:5f:28:57:50:18:30:04:7f:
                    5d:2d:43:d4:54:bf:db:7e:62:4f:f1:1f:5a:04:6f:
                    ec:ba:d8:00:57:4a:79:a0:a4:f6:70:52:43:89:75:
                    8a:05:0a:72:6f:de:a2:d1:a0:34:5d:4f:29:ac:08:
                    63:d7:ea:3e:bc:a0:5a:a7:22:72:b2:76:33:2a:93:
                    25:49:d9:c1:7d:f4:67:3d:50:c2:96:5c:13:80:78:
                    be:7c:f3:90:9d:73:c8:e0:9d:79:3d:24:a1:a6:6d:
                    ad:57:3c:22:b7:19:61:01:5e:b1:07:ff:5f:ed:3d:
                    37:df:cf:62:c5:7d:37:5f:26:80:55:e0:73:ff:44:
                    62:65:a1:d0:e6:3d:bd:37:87:b1:5e:bf:bd:86:c7:
                    3d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5B:F0:4A:4A:1E:B6:89:55:E5:20:4C:EA:73:72:4F:54:14:76:15
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS13213.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:8f:54:a7:cd:7b:c5:ec:09:5e:48:52:05:8f:4b:44:66:db:
         7a:d1:c4:d9:9d:e6:e3:2e:3e:9b:44:e9:5a:41:26:ae:ad:8c:
         8d:bd:43:d4:7d:d2:11:34:78:ec:e1:9a:e9:d2:f2:25:5b:98:
         94:f0:0a:9b:c2:6b:b1:a0:01:4d:36:60:8b:44:40:a4:e8:a1:
         60:fb:e3:6f:48:6f:c6:38:d8:cd:ab:52:e5:76:e9:92:48:2a:
         eb:c4:55:8f:e9:0e:c8:f9:d4:c9:d5:86:11:42:b3:e0:45:71:
         7f:b7:d8:a8:87:3f:b8:a6:92:45:5d:f5:dd:68:59:f5:4f:c4:
         a3:b8:84:81:6c:6c:30:a8:0c:7b:c7:fc:b6:1c:a8:2e:df:3a:
         e1:a6:ec:fa:c3:1b:be:1a:e9:fc:8c:ba:7e:05:3c:0e:c3:04:
         1b:80:ea:53:a3:b7:9a:cc:34:1c:a5:c0:e4:73:87:a2:8a:11:
         54:be:d6:30:6c:c7:ff:a4:f0:44:91:98:75:f7:46:65:f5:b4:
         a5:ac:9d:38:20:65:7a:f4:f1:e6:56:11:69:b3:25:5c:db:b2:
         35:12:d5:2f:bb:c3:71:e3:74:ba:43:2b:19:ce:d9:08:45:2a:
         6e:97:9d:45:b2:9c:5a:46:13:4f:41:0e:69:ce:77:86:d6:f9:
         12:f0:1d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----