Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139342e302f32342d3234203d3e2037303138.roa
File:                     3231362e3138352e3139342e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          2UqDkcDNFofdosbXd2HvdE95a4W2FawrIPqdjLHsUIg=
Subject key identifier:   CC:13:9D:CC:DE:13:97:51:4F:1B:B8:43:71:99:F0:A8:64:8E:F8:07
Certificate issuer:       /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial:       2FE468FE17E3684F601C004D5F3B7C6F50889942
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139342e302f32342d3234203d3e2037303138.roa
Signing time:             Fri 27 Jan 2023 02:53:13 +0000
ROA not before:           Fri 27 Jan 2023 02:48:13 +0000
ROA not after:            Fri 26 Jan 2024 02:53:13 +0000
asID:                     7018
IP address blocks:        216.185.194.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:e4:68:fe:17:e3:68:4f:60:1c:00:4d:5f:3b:7c:6f:50:88:99:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
        Validity
            Not Before: Jan 27 02:48:13 2023 GMT
            Not After : Jan 26 02:53:13 2024 GMT
        Subject: CN=CC139DCCDE1397514F1BB8437199F0A8648EF807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:10:7f:fb:ab:6b:b7:3e:66:7c:00:7f:5e:cc:
                    f9:34:46:f4:6f:61:31:a7:0f:3f:f3:d1:55:8e:3d:
                    6e:c3:ce:f6:1f:20:7f:d3:4b:a7:07:56:fb:04:de:
                    6e:a5:e3:0f:fe:2d:08:8d:c5:1f:c2:dd:46:79:e9:
                    4f:d0:df:94:2b:eb:21:ed:5a:7a:a6:47:a2:83:4b:
                    fa:61:6a:d1:fc:bf:53:da:d3:32:42:c0:c9:cc:2c:
                    95:f4:a1:b7:00:90:f2:90:0e:79:4c:68:f6:04:55:
                    4b:11:94:b2:5d:be:4c:14:87:e8:fd:00:14:0f:6f:
                    69:7b:32:77:d0:d5:61:c4:55:7d:95:b9:40:61:a2:
                    b2:26:1e:b9:2f:b9:96:23:7f:c9:50:7d:06:99:08:
                    df:42:b7:0e:24:57:39:71:66:7e:b4:0e:f3:44:bd:
                    db:0e:04:01:73:ee:da:06:97:47:f4:c0:51:f3:25:
                    c7:af:cb:16:8f:86:f2:24:ad:1a:13:c2:a2:fc:d4:
                    a4:40:97:27:31:e7:23:c1:75:3c:32:dc:35:f6:a0:
                    55:86:c2:8b:d3:be:85:86:cb:d0:da:f9:c3:66:5d:
                    a2:5c:10:fe:55:a5:cd:37:32:fa:7d:95:80:64:87:
                    36:3d:f0:77:89:a0:de:5e:e5:7e:37:2b:ba:33:af:
                    f1:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:13:9D:CC:DE:13:97:51:4F:1B:B8:43:71:99:F0:A8:64:8E:F8:07
            X509v3 Authority Key Identifier:
                keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3139342e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:10:05:c9:16:ec:b2:11:2a:f1:42:3a:19:a9:21:85:95:2d:
         85:40:14:2c:9d:fb:b3:f1:6a:f5:f3:10:9e:32:dd:24:f3:7d:
         61:b3:29:d1:bd:0f:80:bd:49:b9:10:a8:1d:6b:c0:73:87:30:
         92:fa:09:0c:6b:74:34:1f:e5:42:45:99:0c:32:51:3a:3b:b3:
         e8:dd:d9:0d:fb:7a:20:ea:91:74:f4:87:7e:00:30:81:e6:a6:
         4d:4e:84:c8:46:47:80:53:e7:07:03:4f:48:6c:68:4e:d5:28:
         45:a2:33:ce:23:50:24:d2:9a:4c:02:cd:9f:ef:9f:6e:97:ec:
         91:39:17:32:41:09:06:b1:4a:09:45:8b:c6:a9:46:83:e9:7e:
         3c:8a:b5:61:c3:a8:97:f8:a3:1d:7d:9e:d2:eb:82:6c:22:cf:
         ff:f3:49:eb:3c:b1:36:c7:fe:d2:ac:de:b6:56:0c:76:2f:38:
         33:c9:ed:a6:54:b7:ee:b0:8f:a2:ed:07:be:74:9a:65:1d:1d:
         f4:fc:cc:e0:1c:ca:6c:01:26:21:11:7e:5d:99:ad:41:70:45:
         4f:93:6d:25:b0:b3:4f:25:58:7e:8b:45:ee:0c:95:3a:67:1d:
         fa:2c:08:34:25:e5:f6:30:fe:fc:b2:44:6f:13:ef:b4:8c:a9:
         59:28:64:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----