Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS9009.roa
File:                     AS9009.roa (raw, json)
Hash identifier:          k5dCcfa+8R2QOhKGrnQBeC8jXCIoIJCAV1Oc3R6Gefc=
Subject key identifier:   DC:2D:F1:CD:BA:6D:DD:F1:F0:4F:46:DE:32:67:EC:18:20:AD:DA:35
Certificate issuer:       /CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
Certificate serial:       56194EDEA674FC39109F90AB2E23115D115A8C0A
Authority key identifier: 4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS9009.roa
Signing time:             Mon 28 Nov 2022 09:41:21 +0000
ROA not before:           Mon 28 Nov 2022 09:36:21 +0000
ROA not after:            Mon 27 Nov 2023 09:41:21 +0000
asID:                     9009
IP address blocks:        216.122.172.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:19:4e:de:a6:74:fc:39:10:9f:90:ab:2e:23:11:5d:11:5a:8c:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac
        Validity
            Not Before: Nov 28 09:36:21 2022 GMT
            Not After : Nov 27 09:41:21 2023 GMT
        Subject: CN=DC2DF1CDBA6DDDF1F04F46DE3267EC1820ADDA35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:07:d4:5f:2a:ee:2d:a9:d9:fd:70:64:0d:08:
                    bc:e4:ee:1d:da:5c:45:c4:e3:c8:89:12:d0:c3:c6:
                    14:18:fd:d7:de:68:1f:a0:42:fa:57:9f:3e:b6:96:
                    46:18:71:f9:26:13:56:d2:a6:b2:47:20:e0:11:f9:
                    32:3a:24:2c:53:4d:bd:48:4a:c1:c5:53:99:d9:f8:
                    93:67:90:b8:72:59:1a:fe:99:13:8a:2c:78:a1:c4:
                    be:24:d1:78:1c:ec:4e:2f:36:dc:ac:c3:44:e0:ba:
                    9c:de:7f:ed:ef:95:12:d4:5e:11:9c:26:99:7e:15:
                    9f:7b:3e:5c:ed:90:bc:4d:16:77:38:4a:7f:98:f7:
                    7f:82:6d:7a:9b:89:cb:22:d8:a4:e1:7e:42:18:04:
                    06:6d:09:58:11:0a:f8:43:b9:9b:72:bd:0c:ad:04:
                    95:40:8a:3e:6b:eb:c1:d7:61:b8:2c:80:31:2c:1b:
                    18:06:97:f2:b5:1d:68:d2:d4:d0:08:9b:6b:85:c5:
                    9c:46:a1:e8:a3:9d:37:4f:d4:05:a4:c4:b7:95:a5:
                    a4:67:69:38:bf:3c:a6:06:8e:5b:6e:89:0b:af:c1:
                    91:b8:09:f1:b5:19:ce:00:ef:bd:1c:51:ac:bc:62:
                    79:7b:70:e5:0d:5f:a8:0f:47:3a:5f:f1:8d:70:1f:
                    a7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2D:F1:CD:BA:6D:DD:F1:F0:4F:46:DE:32:67:EC:18:20:AD:DA:35
            X509v3 Authority Key Identifier:
                keyid:4C:C4:39:8B:A0:FE:50:AA:A0:8B:FA:23:FE:70:1A:D0:C2:06:04:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/4CC4398BA0FE50AAA08BFA23FE701AD0C206047F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5a6cd4e3-401f-4f1d-b675-b0d995844039/02d7785dc3596543a4c90c398ad7ef699bde8c79edd2e0b8ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181ec5f2840625a/1/AS9009.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:09:51:fd:fa:b4:2f:59:10:86:58:45:d0:77:cc:0d:35:48:
         55:46:91:9e:3c:8b:e4:b4:4b:2a:ef:bd:bf:ba:c7:86:45:35:
         a0:a5:22:02:1d:8b:34:d0:a9:69:90:21:e2:49:e3:6e:79:3c:
         7a:bd:f4:dd:72:6a:d1:59:65:b2:23:7f:c3:e6:f7:d6:37:61:
         b2:43:59:d1:db:4f:79:0f:13:56:ac:eb:89:e6:3f:5c:27:f6:
         e9:06:c1:5d:9e:20:ec:1e:98:66:1b:3d:f9:83:0f:2e:da:74:
         e8:c2:88:f8:47:3e:f5:98:06:a3:03:fe:8a:ae:2a:76:51:ba:
         7d:cc:a5:d1:ce:cc:da:3a:e7:27:91:64:01:91:21:49:fe:e0:
         7a:78:93:64:4e:a9:1b:2d:89:46:34:f2:c0:0e:e7:c6:32:31:
         4c:1b:89:5d:ba:d0:d4:50:6d:e6:d4:6a:fe:56:9d:73:ef:39:
         c5:9b:e0:b0:98:46:56:02:0c:58:60:6c:17:43:3f:55:ca:eb:
         dd:80:47:01:c0:b0:38:92:78:40:2d:96:4f:8b:60:78:06:68:
         43:1e:95:2a:c1:c0:4d:a6:90:c6:11:de:04:b6:3e:e4:09:c5:
         8e:a9:1d:49:fb:6a:fe:26:e5:30:81:75:31:67:d0:12:c8:ba:
         e9:80:0b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----