Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230312e302f32342d3234203d3e203630373231.roa
File:                     3231362e3138352e3230312e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          VGn/o0rSDf5TVuOfpo5uRfBNIF2xGO1iPLgOkvOJhTM=
Subject key identifier:   0C:CD:EB:F8:B3:97:84:C7:BE:36:43:FE:5F:F5:73:12:27:68:91:80
Certificate issuer:       /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial:       7872AFF03F766E92ED4F17F6E151DC9C62A711F1
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230312e302f32342d3234203d3e203630373231.roa
Signing time:             Thu 26 Jan 2023 06:30:49 +0000
ROA not before:           Thu 26 Jan 2023 06:25:49 +0000
ROA not after:            Thu 25 Jan 2024 06:30:49 +0000
asID:                     60721
IP address blocks:        216.185.201.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:72:af:f0:3f:76:6e:92:ed:4f:17:f6:e1:51:dc:9c:62:a7:11:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
        Validity
            Not Before: Jan 26 06:25:49 2023 GMT
            Not After : Jan 25 06:30:49 2024 GMT
        Subject: CN=0CCDEBF8B39784C7BE3643FE5FF5731227689180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6e:76:59:94:53:23:1e:78:79:60:15:b1:66:
                    fb:df:65:92:19:e7:4b:e2:38:65:a4:57:18:3a:3a:
                    fb:11:43:f1:b4:62:3c:e3:01:6a:39:ae:c9:6e:12:
                    3a:69:b9:82:bd:29:37:6a:bf:83:bc:3e:0e:9c:76:
                    73:82:f0:ca:e2:46:c0:98:9a:db:06:20:9b:c6:8a:
                    51:29:68:b9:cb:9b:2e:ce:fc:59:f9:0e:4f:82:69:
                    71:86:be:47:93:be:6d:bf:54:8b:ba:2b:8d:8e:cf:
                    9c:ec:56:64:e9:fe:5f:6b:44:fb:9d:7e:1f:04:3a:
                    9e:db:02:1c:a0:dd:e5:6f:3d:93:5a:dd:2e:9c:dc:
                    09:fe:1d:de:2b:08:89:8f:e9:5c:0c:b4:53:1d:7b:
                    ec:83:fb:37:41:c8:09:89:13:39:74:f2:4e:02:fc:
                    97:cc:53:d9:dc:c5:91:fc:02:e2:2c:f2:41:aa:f4:
                    7b:35:7c:3c:2b:4b:92:45:a8:7d:bd:a8:f0:b7:67:
                    85:f2:4f:c5:35:cf:8a:d7:66:97:da:ac:0a:36:90:
                    23:51:d0:5f:d2:9a:2f:36:fc:4b:e6:2a:07:0b:06:
                    83:a5:a0:9b:4d:02:09:e3:51:fe:44:8d:9b:22:7d:
                    ad:d2:05:c2:3d:34:f2:2e:5e:7d:b9:4a:41:88:f4:
                    57:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:CD:EB:F8:B3:97:84:C7:BE:36:43:FE:5F:F5:73:12:27:68:91:80
            X509v3 Authority Key Identifier:
                keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230312e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:54:16:a8:45:0f:d6:0e:a9:1a:b3:54:8f:83:88:72:1c:4b:
         2d:8b:76:cd:dc:db:e2:a8:7f:e8:42:63:45:10:35:5d:89:bf:
         4c:cd:c2:10:18:21:e3:8e:bd:2b:b0:6a:d0:58:ec:f8:23:d3:
         f7:e1:e3:1a:00:3a:da:b8:70:0f:77:ea:a2:84:27:0d:52:a2:
         d2:2d:5d:06:f3:b8:2c:8a:82:f1:db:80:69:4c:7a:97:53:6a:
         4b:ad:3b:47:a1:49:a6:fc:f4:c0:09:b4:b1:75:8c:f9:a1:7d:
         18:2c:54:37:77:db:71:0e:69:4e:31:df:5d:0b:d4:31:e5:1b:
         ba:1a:c0:69:5c:b7:82:18:e9:a1:ff:13:87:76:9a:05:2e:19:
         2b:5c:4f:a9:f6:7e:bb:a0:07:72:3e:78:7d:0c:8a:20:31:c8:
         79:df:5d:0d:96:f8:6a:5b:b2:58:a2:b5:ab:3a:6a:b1:44:be:
         fa:6b:11:41:f5:0c:f7:d0:f5:b1:66:93:42:78:33:87:85:03:
         5a:ca:b5:56:4d:2b:c3:2a:3a:42:cd:ed:75:03:12:66:0c:54:
         9a:ae:8e:86:03:21:93:a1:bd:11:65:2c:45:3b:3e:6e:49:20:
         51:15:d2:18:dc:5b:e2:39:bd:0f:41:2d:55:ac:f5:10:1e:8f:
         db:c7:61:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----