Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS16509.roa
File:                     AS16509.roa (raw, json)
Hash identifier:          JPeYX+P+Vj/CsO7yYK844zjk6+aY882YcFp3ojSTvk0=
Subject key identifier:   AA:2C:4A:82:82:EA:02:82:5C:5A:A9:E2:F9:9D:64:75:FE:4E:D7:52
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       648E09297455B0D185753E070D32A31A6B57953D
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS16509.roa
Signing time:             Mon 28 Nov 2022 09:41:21 +0000
ROA not before:           Mon 28 Nov 2022 09:36:21 +0000
ROA not after:            Mon 27 Nov 2023 09:41:21 +0000
asID:                     16509
IP address blocks:        216.122.176.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:8e:09:29:74:55:b0:d1:85:75:3e:07:0d:32:a3:1a:6b:57:95:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:21 2022 GMT
            Not After : Nov 27 09:41:21 2023 GMT
        Subject: CN=AA2C4A8282EA02825C5AA9E2F99D6475FE4ED752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9b:2b:20:97:0a:eb:11:6d:88:31:48:d2:69:
                    76:a2:6e:3e:9a:ac:e1:18:17:d7:7d:60:7c:92:da:
                    ae:7d:9b:11:d8:d5:04:5f:2f:9a:5d:ce:05:5c:66:
                    34:ab:74:57:fe:72:d3:93:46:f2:e7:1d:d4:ea:c3:
                    29:7d:55:f1:73:bf:f4:b0:04:bb:9b:1a:e1:42:91:
                    06:d9:1c:f4:fb:25:63:27:a3:16:3b:4d:57:7a:22:
                    1c:92:60:ae:9b:45:4a:e4:32:08:f7:21:f4:47:17:
                    8d:99:47:dd:a4:a0:58:fb:7b:e4:6c:a4:3f:0f:b2:
                    cd:11:f3:da:ed:ad:8e:83:18:c4:2b:45:42:11:b8:
                    fa:40:b4:68:3f:59:f6:e5:37:c1:16:5d:59:57:9b:
                    72:33:c0:64:41:fc:f3:5c:02:48:fb:8f:9a:cd:a4:
                    85:fb:4d:a6:cd:ca:4c:2c:77:05:1e:ce:04:f4:40:
                    10:e2:0c:1e:76:82:73:fa:71:50:83:88:c4:cf:11:
                    a2:1d:b9:fc:30:ab:71:ad:d7:87:e0:09:8e:92:b8:
                    16:1a:e8:71:b9:0b:95:02:56:3b:38:dd:ce:0d:bb:
                    17:f4:65:9e:e4:06:b2:5f:d2:46:05:2d:a4:08:c5:
                    9d:d8:00:3d:68:8d:3d:04:54:36:99:2c:b3:0c:56:
                    fa:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:2C:4A:82:82:EA:02:82:5C:5A:A9:E2:F9:9D:64:75:FE:4E:D7:52
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS16509.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:02:7e:82:2a:b6:39:75:c8:60:fc:3e:3f:00:50:d3:5f:07:
         40:cd:17:f9:af:5a:86:91:7a:ba:7e:cf:ba:a8:66:de:91:c0:
         51:5b:1f:b5:b8:91:2e:8e:60:ce:11:76:ba:c5:fd:5e:5c:77:
         b1:6a:a0:fd:fd:a7:44:4a:c4:41:b5:df:b4:5c:a9:b6:3e:39:
         6a:19:ac:77:62:83:48:50:8b:5b:9d:b6:0f:b2:bf:74:b2:dd:
         f1:d4:3a:a9:8e:48:0f:ba:4f:01:45:6e:11:7f:47:c5:04:07:
         47:ef:58:57:95:ec:a5:3b:03:a3:55:35:9d:b0:cc:31:9a:bb:
         d6:84:96:6e:a3:a4:18:ba:73:42:44:d7:35:19:47:ac:a5:11:
         b2:59:ec:10:29:f1:e4:22:83:86:fd:98:4a:97:97:0c:8f:c0:
         f0:a7:33:93:2e:d2:d2:ca:79:81:da:1d:3a:c6:6f:b5:28:76:
         81:61:ac:0a:9a:40:6a:43:94:83:27:09:9f:e0:cf:2d:ed:7a:
         72:22:ac:3f:96:51:37:ae:4d:43:7f:78:01:48:a0:a8:89:4b:
         e3:5d:9e:ca:da:37:7d:28:80:d2:6e:61:51:ea:27:70:3e:46:
         a9:6b:0e:c4:fe:f3:ea:88:23:f1:94:1e:25:51:08:8d:9d:d6:
         f8:d7:d9:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----