Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139352e302f32342d3234203d3e20383334.roa
File:                     3231362e3138352e3139352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          lpID1xJjoar5nSsIpQl0FJnJAVuYekmNYacxocHvBEw=
Subject key identifier:   1C:1C:7D:0C:5B:A3:B2:D6:BC:CF:3F:33:15:99:05:20:8F:55:DD:78
Certificate issuer:       /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial:       236520640982EECD6576D39ABBB4915D85386E88
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139352e302f32342d3234203d3e20383334.roa
Signing time:             Wed 22 Feb 2023 11:56:03 +0000
ROA not before:           Wed 22 Feb 2023 11:51:03 +0000
ROA not after:            Wed 21 Feb 2024 11:56:03 +0000
asID:                     834
IP address blocks:        216.185.195.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:65:20:64:09:82:ee:cd:65:76:d3:9a:bb:b4:91:5d:85:38:6e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
        Validity
            Not Before: Feb 22 11:51:03 2023 GMT
            Not After : Feb 21 11:56:03 2024 GMT
        Subject: CN=1C1C7D0C5BA3B2D6BCCF3F33159905208F55DD78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cb:6a:b4:e7:24:ba:8e:82:69:65:7a:28:39:
                    af:c3:33:53:21:2f:84:67:30:07:67:d2:0c:09:a1:
                    00:aa:23:1a:fb:91:92:55:27:53:ab:fc:27:0e:3b:
                    e7:c2:e3:64:ba:89:41:03:f8:6e:e3:43:c0:f4:c4:
                    53:1c:f6:5d:79:4a:82:f1:78:52:0a:42:4a:e7:f9:
                    13:b6:b2:03:4f:5e:ac:dd:41:fa:83:28:88:8f:6d:
                    40:a8:5a:51:4f:e7:80:b5:43:d2:df:ef:ba:b5:3f:
                    6d:21:1d:2a:cf:1e:86:a8:9e:d0:a2:db:6b:2b:90:
                    eb:0f:95:bd:aa:3e:3d:e4:46:93:49:29:79:ad:6a:
                    5c:f1:bd:be:c9:61:91:86:a6:f8:ab:36:82:de:ba:
                    bd:7f:ad:30:7e:01:85:65:d9:14:a4:6c:3d:4b:79:
                    ad:19:5b:14:4c:e1:79:b7:95:75:05:b5:e8:03:e4:
                    0a:44:13:aa:5f:ef:04:b6:d6:2a:fc:37:13:a0:0e:
                    2c:ec:8d:c2:bf:f6:60:f4:03:ed:b2:6d:25:15:23:
                    22:08:10:84:3a:6f:9d:d0:e9:c8:4f:b3:4a:77:c7:
                    be:f1:c4:58:9b:9e:26:9c:26:9f:0a:8f:43:78:69:
                    81:6b:d1:f2:3e:99:37:19:8e:c6:e9:cd:05:73:5b:
                    21:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:1C:7D:0C:5B:A3:B2:D6:BC:CF:3F:33:15:99:05:20:8F:55:DD:78
            X509v3 Authority Key Identifier:
                keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:c1:23:48:a7:92:f2:7d:c8:bc:3a:17:b9:b8:fb:7e:da:69:
         15:25:f0:8e:67:de:40:cc:7c:66:ac:f3:bd:e8:ce:c7:f3:07:
         7d:4d:fb:6c:1f:6d:c0:25:05:eb:33:f7:1c:3e:b8:30:00:7e:
         66:24:e8:ab:db:c9:98:d6:6d:b4:31:a4:0b:5f:f4:76:cc:e7:
         cb:79:e7:6a:83:22:e1:fe:91:5c:ca:59:4d:b3:35:d9:65:e2:
         70:33:1f:fa:39:85:a2:60:78:92:f4:4e:22:d3:52:83:90:01:
         4d:40:ac:a8:e0:6f:9f:ed:e2:49:a9:c9:0d:79:0e:20:4d:71:
         a7:5d:c8:12:e1:46:43:94:c5:3a:f7:86:0d:fc:a0:e3:f0:a4:
         04:97:dc:ab:49:7b:ca:c6:8b:ce:f9:6d:09:67:d1:08:c7:04:
         92:52:e7:21:56:89:f4:44:7e:8f:70:7d:ab:a8:64:8e:27:26:
         e9:94:f9:5f:7f:c8:9c:0a:d3:92:50:e6:7a:6d:58:dd:ea:c5:
         f2:d2:e8:1a:fc:28:aa:6c:6f:24:f6:19:c8:53:6b:77:4c:be:
         2f:89:51:9f:6b:51:fc:15:a1:5e:68:b7:98:b4:59:76:6c:f4:
         10:2e:f9:6f:35:ef:52:71:16:d2:b2:84:cc:1d:70:cd:a5:5c:
         d3:b6:91:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----