Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230352e302f32342d3234203d3e203535313534.roa
File:                     3231362e3138352e3230352e302f32342d3234203d3e203535313534.roa (raw, json)
Hash identifier:          zY9HYBBi6+Geh1cAlPfTRY4jEY2M+aLxYktm/38CwSo=
Subject key identifier:   7C:B3:4C:88:82:B9:1B:E1:7C:2C:01:5A:F5:25:F9:AE:29:F7:56:6B
Certificate issuer:       /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial:       7844DA8784C2F82DCE5B8B4ECF420E8F48BD7280
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230352e302f32342d3234203d3e203535313534.roa
Signing time:             Thu 26 Jan 2023 06:31:23 +0000
ROA not before:           Thu 26 Jan 2023 06:26:23 +0000
ROA not after:            Thu 25 Jan 2024 06:31:23 +0000
asID:                     55154
IP address blocks:        216.185.205.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:44:da:87:84:c2:f8:2d:ce:5b:8b:4e:cf:42:0e:8f:48:bd:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
        Validity
            Not Before: Jan 26 06:26:23 2023 GMT
            Not After : Jan 25 06:31:23 2024 GMT
        Subject: CN=7CB34C8882B91BE17C2C015AF525F9AE29F7566B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a1:da:27:37:ae:2b:7f:aa:8f:dd:c0:ae:47:
                    c3:0d:e7:c7:3a:22:cd:76:ad:f9:96:55:4f:30:75:
                    43:75:de:17:40:d9:15:01:58:a9:ee:f5:e1:78:cb:
                    f8:50:37:03:03:61:29:ad:c9:3a:ea:54:7c:5d:ad:
                    c0:75:26:1b:a4:37:73:c4:3a:30:d6:d7:46:63:04:
                    4e:6f:f9:de:79:34:87:83:9b:4c:4f:ba:fc:5f:c0:
                    5d:17:4a:c8:76:54:18:0b:3e:5d:37:bd:ee:47:f2:
                    fb:54:f7:54:1a:b9:a9:bd:50:85:15:4e:a4:a6:00:
                    ad:e2:62:cf:83:a0:d6:a4:34:56:a0:e1:82:a2:ce:
                    17:d5:22:05:9f:ad:81:90:a1:7a:2c:91:2a:49:33:
                    81:4b:68:6e:1c:29:af:4f:2f:d3:c4:60:0b:2a:20:
                    6b:59:da:eb:8c:75:ca:e4:5f:c6:9d:40:d3:a6:f1:
                    be:34:54:e8:21:ca:e7:92:91:8d:09:29:7b:ae:9c:
                    60:c2:71:4e:32:99:fa:f7:e9:66:b6:2f:4e:6e:87:
                    e4:32:44:b0:ea:19:3e:56:c0:8d:49:81:fb:98:43:
                    89:32:b8:32:a2:c2:3a:e5:87:eb:c4:d6:f7:2f:a4:
                    17:b6:71:62:cf:e3:71:bb:d2:70:ad:97:6f:43:a6:
                    43:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B3:4C:88:82:B9:1B:E1:7C:2C:01:5A:F5:25:F9:AE:29:F7:56:6B
            X509v3 Authority Key Identifier:
                keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230352e302f32342d3234203d3e203535313534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bd:6b:77:e1:0a:80:29:76:69:bb:60:34:8b:37:ba:4a:22:1f:
         7d:8d:7e:35:64:50:a9:bb:29:20:00:36:a0:7d:04:c1:4c:a7:
         27:1d:aa:30:50:bc:81:54:22:0d:2e:0b:91:9b:ac:ec:38:3f:
         6f:de:0f:c7:65:a2:27:0f:91:70:83:e2:91:a3:b0:aa:91:06:
         23:a5:aa:bc:2c:97:e8:ea:28:8d:4b:85:c6:5c:ae:22:ef:c0:
         3d:f7:44:b0:eb:74:a1:77:d5:86:0a:95:36:e6:1f:18:2b:f9:
         e4:82:09:e7:e2:7c:97:f6:8c:2b:1a:d5:4d:b5:b1:3c:2c:53:
         cb:87:18:2a:41:03:71:71:a5:ec:ce:b0:7c:6a:59:6f:ba:cf:
         c9:a3:20:87:fd:a2:ea:a7:fc:dd:e5:d0:be:89:7e:fe:c0:bd:
         41:6c:c3:3c:c2:aa:56:6f:4c:38:5e:aa:d8:36:2d:e6:75:da:
         e2:93:2a:f3:e3:fa:38:58:7a:63:a3:0c:1b:d9:59:4f:85:e6:
         0a:79:eb:ed:de:db:94:d6:b6:cb:8e:7c:f3:eb:f4:a2:41:db:
         36:1e:2b:8f:69:59:57:ca:27:49:1e:b2:f6:e2:9b:ee:cf:8e:
         70:5a:1b:d5:df:6b:19:64:7f:f2:93:cb:c6:fd:02:c6:af:6a:
         13:19:df:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----