Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139322e302f32342d3234203d3e20323035333230.roa
File:                     3231362e3138352e3139322e302f32342d3234203d3e20323035333230.roa (raw, json)
Hash identifier:          9bnkcjUCvUEy9ZSJkTXpYdNpJSDv0omGgvbsbGUM6B0=
Subject key identifier:   FA:63:EC:39:FE:16:B6:95:18:1D:B1:51:FD:C0:25:6F:13:B3:22:D1
Certificate issuer:       /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial:       2FBABBC554755ACA9634B5E8271CEBE4048BBDE3
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139322e302f32342d3234203d3e20323035333230.roa
Signing time:             Thu 26 Jan 2023 06:40:31 +0000
ROA not before:           Thu 26 Jan 2023 06:35:31 +0000
ROA not after:            Thu 25 Jan 2024 06:40:31 +0000
asID:                     205320
IP address blocks:        216.185.192.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ba:bb:c5:54:75:5a:ca:96:34:b5:e8:27:1c:eb:e4:04:8b:bd:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
        Validity
            Not Before: Jan 26 06:35:31 2023 GMT
            Not After : Jan 25 06:40:31 2024 GMT
        Subject: CN=FA63EC39FE16B695181DB151FDC0256F13B322D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e9:a9:db:0f:db:9c:84:58:0c:70:32:ec:ae:
                    0d:ab:26:67:99:15:52:78:17:2e:fb:d1:0d:b4:44:
                    fb:ce:f6:0a:bf:5c:e1:53:6c:fd:59:b7:9e:3e:cb:
                    84:95:a2:46:c5:e8:1c:41:94:1a:20:96:65:aa:d2:
                    26:e0:ff:da:34:75:03:60:26:49:f1:63:0e:38:dc:
                    43:16:7a:1f:81:4e:a6:51:db:29:1e:ec:c2:bd:ac:
                    6f:c1:93:eb:23:33:8f:79:64:8b:d4:84:a9:90:64:
                    e2:09:ba:89:52:f5:14:3d:2f:16:23:43:04:cd:70:
                    dc:c6:38:42:b9:e6:32:95:d9:55:55:d7:12:5b:bd:
                    49:c1:02:b9:69:fb:1a:51:50:42:d4:17:b9:6a:55:
                    f6:98:a6:2d:bb:20:93:f4:04:ba:72:68:b8:84:a3:
                    e2:4d:d5:7a:c9:42:20:c7:67:23:a5:9c:0a:6a:26:
                    99:e7:6b:7c:e5:a6:c3:37:87:4c:99:1c:3c:b4:69:
                    6f:f6:b6:9d:5b:26:d2:40:2d:70:7f:f8:91:27:3d:
                    2b:50:d3:cb:8e:a2:bb:31:3c:c6:f9:6a:bd:1f:d8:
                    42:11:bc:c5:c3:c2:92:51:09:00:6b:00:9f:a6:0c:
                    d0:74:cd:58:1f:de:f2:46:73:32:71:a2:cb:f9:ae:
                    6c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:63:EC:39:FE:16:B6:95:18:1D:B1:51:FD:C0:25:6F:13:B3:22:D1
            X509v3 Authority Key Identifier:
                keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139322e302f32342d3234203d3e20323035333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:93:c2:bf:e4:65:90:04:3b:83:f4:75:03:7a:36:b4:95:e4:
         a5:3f:a7:67:68:81:46:1d:9b:83:88:09:18:12:c5:dc:9b:12:
         e1:38:42:d2:e2:40:2c:52:14:2c:89:93:78:91:ec:fe:a7:3c:
         ba:50:9f:db:03:89:c5:af:96:42:89:6e:79:d5:d6:ae:df:ff:
         2d:fd:dd:fb:e9:e0:6d:51:04:58:34:e5:60:38:7b:2e:8f:26:
         96:98:4b:f0:43:c0:43:2d:66:c7:de:56:ff:a2:67:d4:9c:91:
         0c:fb:8e:8d:ee:d0:fe:b8:13:34:b9:a9:d0:cc:e4:a6:6a:24:
         9e:b8:fc:65:1c:a6:da:c4:ec:c9:96:21:75:1b:2a:d9:c0:d5:
         a2:d3:2c:20:71:ed:38:98:9d:69:db:f4:30:52:7b:e1:72:44:
         25:f0:73:46:df:0d:77:b2:e3:b9:7f:f9:34:07:a4:0f:ba:67:
         13:8c:4e:de:64:6a:33:e4:45:68:2f:a3:e5:7c:8d:60:fb:aa:
         7e:d2:13:85:51:73:14:e0:75:b8:e6:68:fc:1b:87:ef:ce:cf:
         a9:a4:34:b4:bb:17:1d:b2:48:e5:e3:2f:16:1c:eb:3f:e3:cd:
         df:88:48:96:c7:4a:e4:27:87:e7:a1:27:1f:fa:b9:0d:b3:4a:
         4b:e2:5f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----