Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139342e302f32342d3234203d3e20383334.roa
File:                     3231362e3138352e3139342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          z77Z+uGnx8lsGgLufUUYYE1rJwnR6XzkhFiP7lkSDHs=
Subject key identifier:   D2:95:67:CE:E4:ED:6A:67:BD:97:53:E4:AD:F0:A4:A0:1F:40:C2:BA
Certificate issuer:       /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial:       2C5B92DA725F39A280AC2082A75096CEE3DC5AAF
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139342e302f32342d3234203d3e20383334.roa
Signing time:             Thu 26 Jan 2023 06:41:27 +0000
ROA not before:           Thu 26 Jan 2023 06:36:27 +0000
ROA not after:            Thu 25 Jan 2024 06:41:27 +0000
asID:                     834
IP address blocks:        216.185.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:5b:92:da:72:5f:39:a2:80:ac:20:82:a7:50:96:ce:e3:dc:5a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
        Validity
            Not Before: Jan 26 06:36:27 2023 GMT
            Not After : Jan 25 06:41:27 2024 GMT
        Subject: CN=D29567CEE4ED6A67BD9753E4ADF0A4A01F40C2BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:87:ec:21:ee:81:69:d6:a9:a3:13:a8:38:0b:
                    51:ea:89:f0:1e:88:5a:df:36:10:1c:75:53:c7:cb:
                    9e:22:16:c6:52:8b:d5:43:aa:37:32:ac:4d:ff:72:
                    84:3f:0e:e1:68:3b:e6:08:0b:2e:b1:1a:4a:b1:03:
                    aa:47:84:90:76:a9:1c:cb:b3:88:c3:75:c4:1f:a6:
                    8a:3c:22:4c:57:99:47:d6:a7:56:de:a7:da:e7:09:
                    47:29:b0:5c:dd:37:d8:1e:88:a5:b4:0c:84:65:df:
                    f8:44:f7:78:87:80:ea:e8:86:ba:85:11:af:d9:ed:
                    bd:24:ca:98:95:f8:55:a2:4d:d5:5b:81:74:72:2b:
                    20:ef:44:e8:0c:ae:ff:00:7e:4e:b5:36:a0:12:ce:
                    94:24:23:27:96:97:a8:1f:cb:37:33:62:57:20:db:
                    8d:1b:5d:d8:01:a1:55:40:74:84:36:21:96:f0:6b:
                    c6:76:2c:14:13:18:77:e9:1f:be:e8:9d:4d:4f:5c:
                    90:76:ff:61:03:c0:0c:b0:99:6e:fa:fb:c4:ee:39:
                    b0:45:44:4e:ce:30:4b:b0:79:43:fe:49:52:8a:31:
                    f0:df:bb:cb:b7:60:c3:1d:b0:a8:4f:ac:b0:c4:5f:
                    dc:41:0f:b6:bb:62:eb:af:8b:45:9f:45:8c:e8:7f:
                    04:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:95:67:CE:E4:ED:6A:67:BD:97:53:E4:AD:F0:A4:A0:1F:40:C2:BA
            X509v3 Authority Key Identifier:
                keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:52:5c:3e:2c:3f:d5:7a:16:76:0c:fd:47:f7:16:c9:5f:b1:
         9d:14:ee:86:e2:9d:d3:cb:32:af:0f:38:7d:c2:7e:75:dc:28:
         0e:e1:68:b9:7c:a6:8c:8b:e0:6c:d5:e4:97:d9:62:ff:4c:5d:
         6a:ab:89:89:16:9e:6a:eb:57:ff:75:1a:d1:eb:f0:0b:18:c5:
         71:c8:80:c6:f7:ef:ca:8d:43:ea:9f:58:90:12:d0:41:49:eb:
         ae:4a:24:7a:b5:87:32:9d:2f:c8:3f:3b:68:03:d3:c2:f1:59:
         f5:b1:5e:7d:9f:0e:7b:31:8f:6a:86:fc:89:85:67:84:f5:e6:
         8a:3c:3d:a5:5c:a7:27:3d:ef:70:ce:5d:62:1e:ca:ef:0f:d5:
         95:87:e3:da:30:36:f6:bd:20:10:29:79:5e:9c:7a:cc:49:98:
         f1:17:18:e8:04:ae:f6:e7:c4:e6:60:2a:34:f5:cc:65:00:cc:
         3f:5c:12:a6:bf:39:71:73:2c:55:4e:e1:e2:8d:ce:9f:93:ad:
         57:6a:56:36:56:55:21:14:fd:d7:6e:67:e5:2b:ce:19:4c:48:
         39:5f:5b:f4:66:67:1f:6b:0d:b5:a5:be:58:ac:8d:8b:56:0f:
         5c:ab:18:ed:63:c3:59:70:a0:85:17:24:c8:41:8d:fc:30:72:
         12:1e:f1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----