Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139392e302f32342d3234203d3e20323037323739.roa
File:                     3231362e3138352e3139392e302f32342d3234203d3e20323037323739.roa (raw, json)
Hash identifier:          dVPcETLRCicJqK1cxsaxSK7QZx8WNpMKfg3pOLcuYT0=
Subject key identifier:   C8:E5:A0:CD:BC:C5:55:AF:32:08:9D:8E:DB:EF:0D:E7:77:B7:1A:AF
Certificate issuer:       /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial:       79FB65DB7BA06558F97348EB0D0135CE8B48E64B
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139392e302f32342d3234203d3e20323037323739.roa
Signing time:             Thu 26 Jan 2023 06:30:20 +0000
ROA not before:           Thu 26 Jan 2023 06:25:20 +0000
ROA not after:            Thu 25 Jan 2024 06:30:20 +0000
asID:                     207279
IP address blocks:        216.185.199.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:fb:65:db:7b:a0:65:58:f9:73:48:eb:0d:01:35:ce:8b:48:e6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
        Validity
            Not Before: Jan 26 06:25:20 2023 GMT
            Not After : Jan 25 06:30:20 2024 GMT
        Subject: CN=C8E5A0CDBCC555AF32089D8EDBEF0DE777B71AAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d4:ad:22:87:c4:e7:b1:1f:b5:2e:ab:8c:ed:
                    85:37:7b:7a:8d:a6:92:1a:8b:25:3e:d5:f3:c1:0b:
                    de:4f:ae:01:06:8d:ea:1e:58:5d:61:9f:6a:f1:bc:
                    e5:82:c9:a3:25:c6:05:90:ef:2a:57:83:3e:26:a6:
                    40:3f:e7:8a:fb:3b:8a:53:49:49:04:45:27:11:35:
                    b9:32:27:cf:8c:42:95:8a:83:1f:ce:ed:0a:46:79:
                    61:5b:b8:e0:91:b2:96:04:ac:70:81:b0:cf:cd:94:
                    78:0c:0c:f8:87:fe:fe:a5:19:bf:46:1b:9a:29:42:
                    f0:54:8a:09:09:04:db:56:f4:dd:1d:8c:b1:6e:51:
                    f2:5f:50:b9:b0:8c:45:9b:00:8d:f4:e5:8f:f1:fe:
                    09:2a:63:7e:bc:73:7f:1d:36:2b:c0:20:2d:62:5b:
                    c1:d4:d1:06:ce:ff:96:bb:29:f2:c0:37:6f:58:55:
                    fa:35:22:3c:72:61:e6:3e:57:d1:d4:5f:12:62:8c:
                    81:40:cc:e1:0b:b9:62:b3:d6:5f:9c:b4:6d:46:cf:
                    24:83:99:dc:71:cd:22:8b:c7:fb:32:c6:fb:c1:80:
                    ef:9a:74:32:99:f1:a1:2d:ed:f3:3c:04:73:62:b1:
                    b4:81:95:56:80:e3:19:5f:f3:0f:8b:f8:cb:52:29:
                    12:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E5:A0:CD:BC:C5:55:AF:32:08:9D:8E:DB:EF:0D:E7:77:B7:1A:AF
            X509v3 Authority Key Identifier:
                keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139392e302f32342d3234203d3e20323037323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:b7:60:56:64:d2:7a:7a:fb:10:ac:73:a9:d7:c7:e5:fa:5e:
         08:61:fe:aa:13:1b:95:40:70:47:a6:5f:ab:83:b5:73:8a:b7:
         20:86:19:4b:30:6d:71:fa:96:ce:c4:a5:81:ff:67:c8:10:20:
         7d:01:d1:73:a0:70:5f:d3:36:0c:26:ab:ed:14:1f:ae:cd:e8:
         06:b1:2c:4c:8e:89:bf:26:09:7d:4a:0f:2a:db:0e:e6:94:a4:
         94:fb:46:d7:85:3e:f1:d7:bf:72:0c:b6:c9:1b:38:93:30:0d:
         4c:55:ed:1a:99:c9:ac:f4:72:95:cd:6e:ad:06:b9:e3:0b:af:
         37:5b:8b:c6:26:43:8e:c5:d8:7f:ea:35:05:2c:67:32:ef:32:
         a3:06:2e:cf:86:02:ab:d1:10:ce:66:68:59:83:dc:89:74:d3:
         06:9c:70:0d:b3:bc:0f:8f:98:88:41:d6:7f:c4:b0:b4:83:4f:
         c7:3a:8c:c5:38:cf:cc:53:50:f6:b7:5b:89:55:96:a6:2a:eb:
         51:8d:6c:54:53:c6:8e:ca:12:2c:23:e9:55:fa:9a:6a:e0:3e:
         f1:25:03:a9:0d:cf:ec:e2:f8:41:8f:d5:92:11:70:4f:bb:e8:
         e0:18:9c:f0:29:68:9c:2c:2a:20:ad:17:29:0b:a0:10:bb:bd:
         1e:18:e7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----