Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139382e302f32342d3234203d3e20313530363730.roa
File:                     3231362e3138352e3139382e302f32342d3234203d3e20313530363730.roa (raw, json)
Hash identifier:          4/gZhX4zA7jQZUnfSO167qTkfc4nUJDvgeUTx4L9QNE=
Subject key identifier:   2D:4E:16:47:E8:00:C2:39:91:6C:73:E0:71:CC:BE:1F:AD:19:7B:8F
Certificate issuer:       /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial:       425CC57F862AF14B194C7768F54DC7C7C301BDE9
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139382e302f32342d3234203d3e20313530363730.roa
Signing time:             Thu 26 Jan 2023 14:37:13 +0000
ROA not before:           Thu 26 Jan 2023 14:32:13 +0000
ROA not after:            Thu 25 Jan 2024 14:37:13 +0000
asID:                     150670
IP address blocks:        216.185.198.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:5c:c5:7f:86:2a:f1:4b:19:4c:77:68:f5:4d:c7:c7:c3:01:bd:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
        Validity
            Not Before: Jan 26 14:32:13 2023 GMT
            Not After : Jan 25 14:37:13 2024 GMT
        Subject: CN=2D4E1647E800C239916C73E071CCBE1FAD197B8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:05:39:12:7d:4f:6b:f1:bf:6d:ea:b1:0e:0c:
                    eb:36:52:cd:33:11:a0:90:70:3c:72:20:64:83:4b:
                    69:9a:dc:bd:5b:87:64:fe:11:a7:74:e0:0a:1b:ce:
                    90:ee:d9:df:0a:00:f9:99:1a:d9:74:71:5e:d5:ed:
                    01:ac:64:4d:f4:db:5e:7d:f1:46:df:73:f4:b6:75:
                    cf:91:e6:63:e0:5f:a5:c7:2a:c4:69:85:80:9a:ea:
                    68:5c:8a:3b:62:8b:77:31:2c:10:bd:8b:7f:c8:3a:
                    d3:62:0d:17:a2:30:b5:6f:6d:5d:24:fd:44:c1:0e:
                    cd:da:88:d0:fe:0f:5d:22:a5:0d:93:02:d2:50:e7:
                    35:b0:a2:b9:b0:20:9d:b8:6a:c5:68:43:01:56:1e:
                    6b:7b:f5:55:70:f9:c9:d9:23:90:7d:04:cb:0e:c4:
                    47:8a:46:d5:a9:c1:61:14:8d:ac:47:46:1f:6d:a2:
                    6e:4f:6b:b7:20:d3:e8:d2:4e:bd:0b:c0:48:6d:e9:
                    a3:6c:6d:ba:95:bd:1e:b1:18:1c:7a:e5:8b:53:1b:
                    c7:0e:f2:d0:c7:01:bc:a8:07:1e:01:34:74:d0:e1:
                    90:06:0e:75:0c:a5:df:8e:04:c7:f4:98:9c:f2:bb:
                    21:b6:81:43:7b:6c:64:53:3e:eb:2e:79:a4:63:98:
                    61:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4E:16:47:E8:00:C2:39:91:6C:73:E0:71:CC:BE:1F:AD:19:7B:8F
            X509v3 Authority Key Identifier:
                keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139382e302f32342d3234203d3e20313530363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:9b:84:fe:17:f4:84:d6:a5:be:0d:1b:bf:a3:ff:9b:e3:46:
         e5:09:72:af:b3:19:c2:d6:05:30:ca:c7:a0:44:93:c2:90:6d:
         d9:d8:d9:55:1c:92:ec:17:41:49:c0:7b:79:ca:85:c7:b1:7f:
         43:45:b9:08:b0:df:94:3d:b9:de:3e:1f:a0:9a:91:67:0d:f8:
         21:7b:2e:a2:99:91:bf:8b:86:75:64:c2:28:3c:db:c1:f4:41:
         db:a1:c9:47:0b:b0:23:bd:53:a6:5c:11:65:98:a3:aa:c7:d9:
         27:11:52:ce:6b:ec:6e:a0:60:e3:c1:69:0e:9f:73:11:55:2c:
         b8:b1:41:de:8c:43:b9:5d:c2:30:9a:72:e3:f1:8f:07:d2:45:
         a9:3d:2a:1f:ff:f6:70:7a:30:9e:aa:23:ed:66:d2:15:3c:74:
         7d:cd:a6:b2:5f:30:17:c0:e4:28:3e:fc:f6:7c:24:31:c9:b3:
         5a:11:f0:93:5b:1e:53:0f:1d:b0:36:bd:df:45:ba:c7:fd:7e:
         1d:4a:e7:83:d6:9a:20:87:64:30:ef:bf:57:63:67:30:28:b3:
         52:4a:38:52:12:87:34:f7:07:3a:75:db:6b:93:4e:23:11:5b:
         08:76:44:87:b6:7b:4e:29:2a:88:5f:a0:c2:e2:00:3b:3e:3c:
         48:96:91:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----