Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230362e302f32342d3234203d3e203533333536.roa
File:                     3231362e3138352e3230362e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          b4LziCEwAfWbIw11S7ah/fYcMzeyKsRc0ghcrtngA28=
Subject key identifier:   51:90:AF:36:CC:87:23:4D:88:9D:E4:2E:2B:C6:6B:84:F7:A3:0E:64
Certificate issuer:       /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial:       051D6A176F8BDEBE3668F8930081F1826156D9AB
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230362e302f32342d3234203d3e203533333536.roa
Signing time:             Thu 26 Jan 2023 06:31:32 +0000
ROA not before:           Thu 26 Jan 2023 06:26:32 +0000
ROA not after:            Thu 25 Jan 2024 06:31:32 +0000
asID:                     53356
IP address blocks:        216.185.206.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1d:6a:17:6f:8b:de:be:36:68:f8:93:00:81:f1:82:61:56:d9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
        Validity
            Not Before: Jan 26 06:26:32 2023 GMT
            Not After : Jan 25 06:31:32 2024 GMT
        Subject: CN=5190AF36CC87234D889DE42E2BC66B84F7A30E64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:99:9e:2a:7f:a9:61:4c:c8:bd:16:79:ec:cd:
                    18:49:03:c5:00:2f:33:6d:d8:d2:10:05:49:80:8c:
                    6c:88:c8:51:56:00:35:4f:27:e9:bd:87:ed:2d:4a:
                    c1:ca:69:e5:79:4d:37:9b:f0:15:19:d7:c9:4f:17:
                    81:c7:df:3e:89:5f:b2:75:01:4c:79:af:50:79:b1:
                    0e:ac:fe:d0:7c:63:0a:43:8d:68:12:e4:e9:78:70:
                    cc:da:52:d9:df:b9:82:f6:81:cd:43:e1:a3:73:76:
                    c2:27:01:2d:46:00:99:43:94:34:6c:97:a9:81:86:
                    54:72:df:ef:91:8f:6a:13:c5:2b:94:69:a5:36:10:
                    9c:49:80:63:fc:47:ba:54:d7:2a:3b:98:b7:98:05:
                    8a:0e:a1:62:56:b5:32:7e:41:97:9a:d9:2a:3e:41:
                    6c:31:3b:f8:43:d9:00:9b:05:e1:61:be:45:f4:c1:
                    f4:5e:61:39:cf:4e:fe:1d:16:7e:6e:63:94:a6:92:
                    e4:4a:d4:f1:6d:3f:d7:f6:0e:b2:28:dd:3b:ea:99:
                    05:0a:c4:c4:55:5d:0e:73:cb:d4:8c:97:2a:19:bd:
                    84:a0:cc:0e:72:ff:c2:4c:37:9f:cd:58:8c:26:35:
                    d4:00:00:7e:f5:f8:29:25:72:57:cc:8f:e0:ce:96:
                    5b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:90:AF:36:CC:87:23:4D:88:9D:E4:2E:2B:C6:6B:84:F7:A3:0E:64
            X509v3 Authority Key Identifier:
                keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230362e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:ed:64:8c:be:4c:cd:58:dd:46:c6:e9:ca:ed:d7:42:25:29:
         1f:d3:85:92:86:68:4b:07:c0:7e:a8:3b:04:6a:ac:e4:51:ac:
         73:6a:7e:be:ab:85:f3:63:36:86:d1:d6:d1:ad:6e:41:3f:48:
         46:89:07:b0:cf:cd:b9:44:b4:5e:97:7d:e9:5d:e1:b6:7e:6d:
         ca:90:f2:a7:d2:0b:42:fc:da:fd:40:25:e5:46:36:e2:24:69:
         ca:f6:4b:33:44:b2:6d:0c:47:6f:02:24:d2:d3:be:a0:4c:79:
         fd:66:b0:1a:5c:d2:1f:af:5a:d9:0b:bf:d9:55:f2:7d:6e:c1:
         a5:ea:ac:5c:c9:92:d2:05:e1:38:f4:63:60:93:d4:8e:a9:3a:
         d7:79:39:d4:88:05:d4:4e:35:b0:62:3d:11:11:1d:bc:87:a8:
         0c:d6:76:7b:69:33:00:ba:92:2f:37:4d:3a:17:62:1c:32:f5:
         cd:0c:e9:c5:65:0e:35:a4:6a:13:5d:5d:b0:c8:bd:0b:8b:2b:
         c5:15:11:5f:b4:61:b2:33:ac:cd:04:2a:4b:43:87:89:15:23:
         2a:af:55:6b:f2:9d:a4:a4:c6:f2:d0:d3:dd:60:fa:9f:da:f0:
         f1:04:fe:ba:44:ce:21:15:6b:a7:79:9a:f0:ca:4e:25:37:40:
         9f:56:df:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----