Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230332e302f32342d3234203d3e20323037323739.roa
File:                     3231362e3138352e3230332e302f32342d3234203d3e20323037323739.roa (raw, json)
Hash identifier:          hBQk/Fb4M4XMhjMRqbkGp86QnZpumNqee/zT6/Mn9Ag=
Subject key identifier:   57:FB:59:AB:D8:62:EE:E3:9B:E4:0C:A5:34:8D:4D:2D:45:22:5C:4B
Certificate issuer:       /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial:       378CB93BC1DAA0983A20F3B7628F7D17937928F1
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230332e302f32342d3234203d3e20323037323739.roa
Signing time:             Thu 26 Jan 2023 06:31:06 +0000
ROA not before:           Thu 26 Jan 2023 06:26:06 +0000
ROA not after:            Thu 25 Jan 2024 06:31:06 +0000
asID:                     207279
IP address blocks:        216.185.203.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:8c:b9:3b:c1:da:a0:98:3a:20:f3:b7:62:8f:7d:17:93:79:28:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
        Validity
            Not Before: Jan 26 06:26:06 2023 GMT
            Not After : Jan 25 06:31:06 2024 GMT
        Subject: CN=57FB59ABD862EEE39BE40CA5348D4D2D45225C4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3f:86:38:ee:d7:81:04:92:e2:54:06:56:73:
                    e9:dc:a3:a0:9e:37:e2:96:82:7f:05:17:ee:3b:5c:
                    16:a7:62:ae:2c:5a:27:c3:bb:e8:5e:bf:30:e8:b2:
                    ea:a1:36:e9:1d:0c:15:0e:66:c3:62:2b:af:0a:fe:
                    fb:90:b6:60:76:34:c3:4a:4c:89:13:06:be:23:9c:
                    8c:86:c0:6b:4b:e8:ed:08:b8:b5:0b:e9:44:f9:b1:
                    44:30:f7:dd:7c:d5:54:de:a5:42:af:a6:68:24:50:
                    6a:f9:90:ba:57:c0:44:03:e0:f0:fe:ec:b0:c2:80:
                    a8:aa:41:e6:e3:c7:78:c8:3f:ab:48:7a:7a:ee:db:
                    0a:8c:35:d1:03:55:e4:fa:66:21:4c:fd:16:19:5b:
                    1f:cf:87:45:cd:0d:16:fd:75:88:4d:6b:8e:66:6e:
                    8b:cb:f6:84:a5:33:aa:ca:84:4f:1a:85:80:2b:ab:
                    a2:05:a8:81:aa:f5:08:ba:12:a8:5e:42:d6:3a:83:
                    a3:94:78:cb:b7:60:26:b6:33:d6:b0:b2:ef:44:18:
                    6e:c2:34:34:c3:84:9f:3c:fd:5e:d6:f4:94:a1:e5:
                    3b:29:de:75:0f:81:c0:ff:42:b3:3c:31:92:b4:d1:
                    d0:71:f7:00:40:27:6a:cf:9e:2a:f3:08:1b:e3:a1:
                    ea:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:FB:59:AB:D8:62:EE:E3:9B:E4:0C:A5:34:8D:4D:2D:45:22:5C:4B
            X509v3 Authority Key Identifier:
                keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230332e302f32342d3234203d3e20323037323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:9b:2e:eb:fe:78:c0:6a:11:84:c6:00:ea:e4:ce:ad:94:13:
         c5:5c:db:7c:12:b2:e6:ab:83:8d:65:83:b7:36:59:1d:8b:d4:
         4d:98:4a:c7:0e:59:01:b3:59:b4:b4:d0:de:61:e2:39:91:c3:
         47:d4:a1:ec:74:56:c6:c1:44:d2:32:81:89:6e:7c:27:61:ad:
         4f:fb:ea:40:c3:f6:93:01:8f:9f:11:87:f8:59:5b:24:a5:1c:
         f3:8b:9a:f6:98:fc:d0:9a:47:e2:0f:66:ec:d9:16:a3:53:e8:
         9e:bc:04:e7:72:2e:4b:2f:54:05:f8:62:3f:22:e8:77:4c:67:
         b0:0d:6d:7b:10:04:fd:0f:09:95:51:79:82:15:0f:38:07:54:
         ac:b9:35:5c:e2:59:34:c5:55:3a:92:f4:51:bf:b0:a3:62:02:
         17:a1:17:60:d0:7a:1d:59:db:50:a0:2b:04:98:18:b3:10:42:
         01:32:50:c9:69:4d:ec:64:a4:26:20:35:04:d8:3a:47:9a:3e:
         23:68:46:10:f9:27:03:43:bd:2c:75:6e:74:4a:63:4a:30:e3:
         73:8d:ea:f5:5c:24:df:dc:8f:1c:18:60:ad:2d:e5:e8:77:95:
         aa:a2:a0:d5:81:a2:ea:8c:aa:21:b0:09:e7:32:01:a2:4b:6e:
         3e:36:88:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----