Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139332e302f32342d3234203d3e2036393339.roa
File:                     3231362e3138352e3139332e302f32342d3234203d3e2036393339.roa (raw, json)
Hash identifier:          9A0PQDhAQRP4vxhpJ7tFZaPr16LhRCU7HC6zNDMr+bc=
Subject key identifier:   59:13:4A:A1:B7:53:DF:57:7A:91:11:BA:91:9C:10:DF:80:0E:0A:A2
Certificate issuer:       /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial:       5E5D4FB7D8BD26CB0337A1D053F54EAA1201EC62
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139332e302f32342d3234203d3e2036393339.roa
Signing time:             Thu 26 Jan 2023 06:29:22 +0000
ROA not before:           Thu 26 Jan 2023 06:24:22 +0000
ROA not after:            Thu 25 Jan 2024 06:29:22 +0000
asID:                     6939
IP address blocks:        216.185.193.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:5d:4f:b7:d8:bd:26:cb:03:37:a1:d0:53:f5:4e:aa:12:01:ec:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
        Validity
            Not Before: Jan 26 06:24:22 2023 GMT
            Not After : Jan 25 06:29:22 2024 GMT
        Subject: CN=59134AA1B753DF577A9111BA919C10DF800E0AA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c3:c1:8f:32:2d:68:11:5a:79:5b:19:67:11:
                    75:d6:af:34:a4:c0:65:44:37:57:07:6a:8a:04:5a:
                    c8:27:b0:e1:0b:a3:6c:78:f4:fb:de:c6:4d:b4:ac:
                    4d:ca:48:ff:72:74:11:8c:1d:da:b5:a0:bd:bb:a3:
                    88:a2:40:02:37:0f:1b:00:81:b7:d2:40:24:c9:95:
                    d5:61:6b:cb:33:f0:5f:62:d2:84:52:e2:d7:79:14:
                    7b:5a:05:a4:b8:32:47:6a:87:75:f1:38:c7:7f:7b:
                    4c:94:7d:fa:79:1a:fc:f2:6e:8c:80:35:d1:16:03:
                    92:b8:6c:16:59:35:82:70:6d:41:ff:84:aa:e1:14:
                    c9:69:2b:75:31:92:7f:84:f5:01:74:2d:1d:50:32:
                    a6:89:0e:46:5a:9a:1f:a2:df:f4:b8:d8:b9:6d:20:
                    4d:de:14:c6:c8:6d:6f:2d:d3:6a:7c:9a:39:d1:24:
                    aa:13:c8:5e:87:3e:21:8c:8e:03:84:91:2b:5c:c1:
                    55:02:1b:77:25:f3:b0:ec:6e:4e:2c:38:7d:9b:cf:
                    dc:72:c2:a5:1a:0a:0b:47:ca:38:22:f9:8b:c2:3d:
                    48:40:b8:24:ed:6f:96:90:22:51:d2:1a:33:35:1b:
                    bb:d3:35:b9:71:9e:1e:a3:07:76:11:7d:58:6f:2d:
                    c2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:13:4A:A1:B7:53:DF:57:7A:91:11:BA:91:9C:10:DF:80:0E:0A:A2
            X509v3 Authority Key Identifier:
                keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139332e302f32342d3234203d3e2036393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:55:ce:78:83:e6:87:5b:a7:42:16:2b:88:f6:24:f1:47:fc:
         46:20:77:21:48:87:a7:88:64:2c:43:f0:c8:c3:bf:3e:50:ff:
         b0:d6:54:a2:a1:e0:65:1b:53:12:0d:54:f3:f2:fe:f7:08:00:
         61:c6:23:1a:64:96:09:42:25:21:5f:0b:07:92:29:7d:d0:0c:
         7b:f6:ba:84:8f:4a:c9:7c:de:83:0a:53:00:21:43:1d:68:af:
         a5:1c:f3:85:fe:45:5a:aa:55:5c:04:49:78:07:e9:42:61:ae:
         8e:fd:74:06:91:43:32:57:a5:1b:0c:44:46:7f:34:39:2b:21:
         a1:9a:cf:3d:cd:2e:04:fd:d6:3d:45:47:f1:44:a9:bd:08:39:
         10:6a:33:13:71:ab:f5:58:a9:83:72:bd:07:9b:bd:3b:cb:64:
         42:45:ae:ae:e5:65:43:45:89:ae:c2:ea:47:81:ec:6a:c3:e4:
         7b:b4:28:bc:04:f1:db:29:cf:44:f9:a1:12:14:42:95:7a:8b:
         01:83:41:4e:f3:2e:b9:e6:96:17:7f:40:bd:1d:a4:c3:a5:89:
         6c:49:5e:b7:d5:8b:a6:ad:1c:af:82:59:d9:cf:9e:71:9e:78:
         4c:b8:31:31:f2:48:e7:40:51:f3:8b:e6:d2:e2:42:27:26:fb:
         e4:42:fd:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----