Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS272011.roa
File:                     AS272011.roa (raw, json)
Hash identifier:          AnEa1V3vsLifnB6dmjNMqu0Ube2BODsCJfaOzVfyJOo=
Subject key identifier:   1B:D5:79:A7:3B:3B:A3:83:39:76:2C:C0:D0:BE:D6:97:EC:59:67:58
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       34D070228E367ECEFE182FFAD6AD6B6841249729
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS272011.roa
Signing time:             Mon 28 Nov 2022 09:41:22 +0000
ROA not before:           Mon 28 Nov 2022 09:36:22 +0000
ROA not after:            Mon 27 Nov 2023 09:41:22 +0000
asID:                     272011
IP address blocks:        216.122.181.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d0:70:22:8e:36:7e:ce:fe:18:2f:fa:d6:ad:6b:68:41:24:97:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:22 2022 GMT
            Not After : Nov 27 09:41:22 2023 GMT
        Subject: CN=1BD579A73B3BA38339762CC0D0BED697EC596758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8c:54:ac:0a:3e:f5:50:77:9e:23:52:d5:d2:
                    f3:2b:40:73:7e:bd:cf:58:f3:5c:01:f2:b8:42:50:
                    84:19:6d:64:92:76:e5:d3:b2:81:1f:a7:bd:c2:a4:
                    a7:f7:33:32:e6:bc:9c:53:cf:8a:cd:90:1b:28:2c:
                    38:f5:2f:c0:22:16:8f:bd:d5:9e:fa:a5:c1:2e:8b:
                    99:b8:19:d1:72:f6:a4:5f:d5:35:89:ff:21:5b:18:
                    08:6f:a0:44:4f:58:f8:1e:cc:b6:78:16:23:7b:8c:
                    2b:8a:7f:58:5b:bd:14:14:68:d0:09:bd:04:7c:12:
                    0c:97:0b:ef:d5:aa:db:5c:40:01:ae:fd:8d:e4:76:
                    47:98:de:b0:74:1e:1f:f8:44:6c:a3:b5:76:52:f1:
                    61:be:85:62:6b:b3:ca:51:0b:38:b4:f1:08:05:20:
                    47:38:88:c7:ca:9c:3e:8c:4e:a3:7d:2c:5f:7e:73:
                    cd:ad:56:06:9d:36:b2:07:d5:21:94:d2:78:7b:6f:
                    65:8e:e5:c2:94:8c:47:37:6a:54:3c:51:13:57:eb:
                    d0:82:80:2b:29:b5:be:2e:63:ff:e8:1f:37:da:12:
                    20:90:e1:57:92:e3:f8:95:e0:f4:39:c8:e6:29:86:
                    49:5c:c6:16:43:73:f6:60:69:71:dd:a2:1a:c7:8d:
                    a3:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:D5:79:A7:3B:3B:A3:83:39:76:2C:C0:D0:BE:D6:97:EC:59:67:58
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS272011.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:00:b6:9e:8f:24:d9:9e:8f:14:24:d9:dd:11:de:f0:9c:44:
         6e:7c:6c:05:3d:e1:98:f0:48:82:fa:da:ed:c9:00:9d:a3:5b:
         f6:37:8c:7b:1e:7d:20:b6:d5:a7:ab:37:03:b2:f8:a3:d9:a5:
         6e:cc:2c:83:92:7c:a8:07:16:34:03:2e:71:33:02:a9:a9:16:
         12:1e:0e:1d:12:2b:63:e4:3b:e3:96:f9:1e:df:ee:62:76:87:
         03:b9:d0:cf:3d:39:45:29:53:4b:a9:59:37:71:98:f6:cf:86:
         12:66:fb:71:68:40:30:b7:a6:7a:6b:23:34:f3:77:86:14:b2:
         fc:f0:13:22:13:73:61:0f:31:a7:e2:b0:2d:dc:a8:2a:32:85:
         26:10:73:6b:91:54:5e:f8:e5:fd:63:1f:2c:38:4b:3e:c9:39:
         6d:8d:30:72:a0:ed:1a:7e:f0:50:10:d9:8e:d3:4e:01:7c:73:
         a5:8f:d0:fe:f9:53:dd:66:fd:a0:67:61:47:17:6b:4f:c5:8c:
         21:f0:c7:48:99:bc:6a:08:40:98:0d:93:f6:58:75:b4:8f:da:
         62:58:d8:41:53:03:c3:7a:00:a7:0c:9a:7f:bc:72:d5:23:79:
         92:bb:18:6d:f6:7f:f2:d0:db:3e:95:55:81:b5:d2:18:9a:ad:
         51:f5:18:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----