Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS400384.roa
File:                     AS400384.roa (raw, json)
Hash identifier:          TblWnyDrVZsTJeMIka+lg+ub3b9IlppMcvo0/qnD5Xo=
Subject key identifier:   60:09:79:36:72:D6:DB:42:F2:45:0B:96:ED:DA:19:65:FD:7C:E1:CE
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       10C883F2CF1716CBE9F99EA117598BD8CCB0803D
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS400384.roa
Signing time:             Mon 28 Nov 2022 09:41:22 +0000
ROA not before:           Mon 28 Nov 2022 09:36:22 +0000
ROA not after:            Mon 27 Nov 2023 09:41:22 +0000
asID:                     400384
IP address blocks:        216.122.184.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c8:83:f2:cf:17:16:cb:e9:f9:9e:a1:17:59:8b:d8:cc:b0:80:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:22 2022 GMT
            Not After : Nov 27 09:41:22 2023 GMT
        Subject: CN=6009793672D6DB42F2450B96EDDA1965FD7CE1CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:69:3d:be:47:ba:f1:58:5a:53:45:06:ec:45:
                    90:f9:02:b9:bf:9a:c8:d7:73:4c:10:c5:f7:d0:93:
                    78:00:87:87:0d:c1:b0:25:30:df:0a:fc:97:16:24:
                    4e:79:00:d5:d0:69:42:16:98:71:d3:46:7d:81:cd:
                    fe:0a:dc:64:d2:74:d2:b7:e4:e3:81:65:08:6b:8f:
                    f0:c5:03:8f:a4:ed:91:48:dc:86:67:b0:c8:3c:0d:
                    bc:b9:01:18:73:a8:d0:23:6f:a2:d4:88:2d:8e:2d:
                    6a:04:f4:0e:8e:44:d1:d6:a4:f1:12:e9:10:b6:5f:
                    ad:5b:18:4b:f5:76:80:2e:fe:7f:9d:7c:31:bc:74:
                    b5:28:a1:96:0b:f6:b7:59:8b:c4:b4:62:55:5a:6e:
                    38:90:23:48:04:a4:ad:7e:e2:36:e0:18:8c:52:ee:
                    f6:63:4e:66:63:4e:2d:4a:93:25:0c:9e:17:40:09:
                    c5:57:56:ff:a5:61:50:1a:61:6f:26:dc:38:7d:5d:
                    44:4a:7a:1e:10:16:27:f3:a0:ff:2e:de:79:f5:62:
                    6b:d6:b9:06:1d:ea:aa:d5:8d:ec:23:7c:29:fc:ef:
                    cd:5d:b9:af:3d:0f:ff:c0:dc:87:d2:5f:ab:ae:e5:
                    8b:b1:dd:70:cc:2f:4f:93:63:db:ac:6a:78:6c:ce:
                    2c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:09:79:36:72:D6:DB:42:F2:45:0B:96:ED:DA:19:65:FD:7C:E1:CE
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS400384.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:5a:58:9d:38:e7:50:ca:bc:6b:57:3e:ec:5a:b7:57:36:0f:
         e7:1c:3c:d9:cc:0a:53:ac:4a:77:a7:44:65:38:e0:8c:cc:9b:
         af:8e:1c:23:42:59:61:7d:3f:5e:b2:f5:60:e4:8c:f4:c1:52:
         46:b5:18:05:c5:50:f8:0d:6f:50:45:c2:2e:29:56:25:17:9b:
         fd:11:da:05:e5:9f:84:dc:54:cd:38:cc:89:f8:51:a9:c5:c6:
         98:37:c2:4e:8f:3f:1e:43:53:68:1b:12:de:61:c0:68:53:07:
         14:a9:18:7e:08:b1:da:03:b9:17:e3:fb:5a:6f:77:71:cc:0e:
         18:c3:89:1b:ea:57:0c:34:b2:15:bd:34:c4:12:ce:f0:b2:69:
         45:9e:82:73:08:a4:08:cd:d3:08:b1:3b:71:75:e9:3c:94:6c:
         e5:d3:e0:da:a5:e3:ea:65:b6:5c:97:ad:d8:b6:e4:57:ad:dc:
         66:f2:77:8b:ad:2b:85:2a:be:85:65:00:8f:e3:d8:d3:12:9f:
         ee:ec:f1:86:c3:43:ed:78:c4:58:4b:79:10:21:24:ee:35:0a:
         08:e2:fd:85:84:d5:b5:42:05:47:e0:78:ba:69:06:ab:04:06:
         2d:4f:c5:f7:c8:5f:bb:4c:c0:67:13:73:1d:2b:41:a3:ca:cf:
         a6:dc:44:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----