Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230332e302f32342d3234203d3e20383334.roa
File:                     3231362e3138352e3230332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          sJ8bswaBWokY9SQMTKABR8uPS+5QHMhwIGC65dCd0Gk=
Subject key identifier:   8A:4E:D8:E5:8D:53:8A:70:CE:F3:14:83:9E:17:91:53:F7:0D:1A:7F
Certificate issuer:       /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial:       2CF65DC03E0C8E8378B2BE1D52D0ABB989640EB1
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230332e302f32342d3234203d3e20383334.roa
Signing time:             Wed 12 Apr 2023 18:30:05 +0000
ROA not before:           Wed 12 Apr 2023 18:25:05 +0000
ROA not after:            Wed 10 Apr 2024 18:30:05 +0000
asID:                     834
IP address blocks:        216.185.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f6:5d:c0:3e:0c:8e:83:78:b2:be:1d:52:d0:ab:b9:89:64:0e:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
        Validity
            Not Before: Apr 12 18:25:05 2023 GMT
            Not After : Apr 10 18:30:05 2024 GMT
        Subject: CN=8A4ED8E58D538A70CEF314839E179153F70D1A7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:94:7c:3c:fb:7c:27:8f:31:96:a2:20:0c:10:
                    9d:9e:29:87:06:93:9d:d1:f6:77:11:7c:21:83:71:
                    34:35:0d:d6:ec:dd:98:47:c8:a6:ae:9f:b6:1b:9e:
                    4e:85:15:cf:83:60:a5:f2:c3:62:d5:09:a4:d6:4b:
                    cd:db:a7:53:58:04:ea:92:e4:24:c4:60:89:f4:f4:
                    84:9b:0b:ce:df:8a:b7:42:95:e3:ef:38:91:90:02:
                    5b:ba:00:58:a7:44:76:ed:02:81:67:53:78:e0:e1:
                    dd:1d:f4:17:0c:c1:bf:2b:4d:1e:8c:c2:ff:cc:c2:
                    50:92:d0:93:5f:92:e7:80:c4:13:4e:00:2d:30:fb:
                    b8:88:c8:09:6c:4d:15:ac:d8:15:1e:c7:72:7a:c7:
                    03:e2:db:51:e3:b2:aa:cc:ee:d4:a7:c0:4a:b0:46:
                    94:7e:7b:d7:a3:ec:ad:36:10:5f:1a:1d:5d:e9:b7:
                    f8:1c:ec:13:d3:a0:c9:d6:59:16:2d:30:e5:1b:01:
                    ac:58:74:25:5a:ac:ab:76:20:4d:c3:f1:09:f9:cc:
                    de:37:b9:fa:39:7a:3d:4f:07:2f:e5:63:f7:67:28:
                    06:e6:d0:bf:a8:60:a1:d7:23:bb:be:fd:99:c7:16:
                    05:16:51:07:b1:cf:28:e4:53:2d:d2:e4:5f:12:69:
                    e0:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:4E:D8:E5:8D:53:8A:70:CE:F3:14:83:9E:17:91:53:F7:0D:1A:7F
            X509v3 Authority Key Identifier:
                keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:ed:0b:f7:16:38:52:a0:28:16:42:b8:6c:f8:52:46:7a:38:
         47:28:8c:f5:d2:1d:70:aa:f9:b4:01:47:d1:f3:be:60:52:bb:
         50:d8:e1:e5:70:e0:2b:e4:1c:86:51:79:ba:5a:03:4f:66:79:
         19:15:06:70:b6:01:7a:29:b3:50:c7:86:a5:18:34:22:b4:ee:
         23:58:0d:a2:b4:1a:b9:67:d7:30:d4:8f:9b:ec:5d:16:be:ee:
         c6:67:8b:fa:92:0f:a2:92:5e:1d:a5:11:46:ad:01:9a:02:f1:
         55:38:74:19:3d:be:0c:0f:2a:9c:42:b3:33:64:6e:14:81:9b:
         e6:15:32:c1:7c:c2:22:cb:c1:94:7f:c6:40:38:8b:38:16:54:
         53:cd:17:e1:a9:07:07:54:b6:fc:b7:c8:1e:99:88:24:b6:ae:
         50:30:29:3d:69:45:45:84:3b:53:4c:4a:68:fd:bf:f2:d4:7b:
         0e:9a:29:9e:85:f9:3b:c8:dd:a2:d4:62:b9:8b:c3:f7:7a:c4:
         a8:21:c6:1e:3f:4e:7e:b2:bc:3e:60:8a:90:7d:21:82:e4:73:
         a3:52:52:ca:e9:61:0b:9a:d2:de:28:d2:f5:db:49:bd:e6:b7:
         04:1c:e2:87:f1:bd:1f:79:34:c0:af:74:a5:f8:e6:0e:40:62:
         f1:91:3a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----