Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230342e302f32342d3234203d3e203630373231.roa
File:                     3231362e3138352e3230342e302f32342d3234203d3e203630373231.roa (raw, json)
Hash identifier:          IQ6hTKHlYDJEzayQxiONrKPigSnkUxudh8r+mDGtD1Q=
Subject key identifier:   6A:E3:FE:C1:67:10:C3:CF:C3:BB:13:88:E0:42:1D:44:C5:08:10:E8
Certificate issuer:       /CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
Certificate serial:       5025AF8B26AC7F69E282F12D71F827FFDEFFD7D7
Authority key identifier: 72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230342e302f32342d3234203d3e203630373231.roa
Signing time:             Thu 26 Jan 2023 06:31:13 +0000
ROA not before:           Thu 26 Jan 2023 06:26:13 +0000
ROA not after:            Thu 25 Jan 2024 06:31:13 +0000
asID:                     60721
IP address blocks:        216.185.204.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:25:af:8b:26:ac:7f:69:e2:82:f1:2d:71:f8:27:ff:de:ff:d7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed
        Validity
            Not Before: Jan 26 06:26:13 2023 GMT
            Not After : Jan 25 06:31:13 2024 GMT
        Subject: CN=6AE3FEC16710C3CFC3BB1388E0421D44C50810E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:01:82:0e:8d:2d:c0:be:b6:d6:6f:9b:3b:3d:
                    e6:e4:60:46:38:61:dc:77:05:1b:b1:6d:ec:81:79:
                    ff:eb:08:c5:67:6d:a6:32:9e:3b:13:df:37:17:50:
                    76:03:91:2b:a4:b1:c4:28:b2:c2:4a:98:5f:57:49:
                    c9:f2:85:cb:bc:db:83:a5:9f:25:20:83:f9:ec:34:
                    02:99:d1:00:f5:60:df:25:b5:d1:23:55:56:71:41:
                    0c:c7:2f:38:b9:f7:28:59:94:27:85:39:25:3c:61:
                    08:e6:f1:74:78:50:ce:28:bd:1b:0a:f7:e6:59:09:
                    06:c5:42:d6:9a:01:8b:29:e6:c7:9e:c5:04:58:69:
                    ab:f5:f9:ff:89:7c:81:1a:a4:c5:88:9b:95:de:da:
                    6f:83:71:10:80:26:4a:39:fa:7f:d5:39:38:dc:0e:
                    1a:f1:39:82:20:16:eb:dd:7a:b3:e2:de:c8:73:53:
                    71:53:5d:55:41:b0:ff:38:75:c9:b7:65:d6:11:19:
                    ed:ef:37:9b:b3:35:0f:4f:f1:d0:18:d8:e9:68:80:
                    6b:d6:5a:97:65:38:e2:b4:39:35:fb:4a:e1:58:1b:
                    1f:ac:b0:7c:96:78:c5:5f:4a:51:f0:91:0b:4a:4c:
                    20:b9:7e:3f:89:ae:56:71:a6:d4:ec:d4:42:90:51:
                    6b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E3:FE:C1:67:10:C3:CF:C3:BB:13:88:E0:42:1D:44:C5:08:10:E8
            X509v3 Authority Key Identifier:
                keyid:72:1D:57:84:DC:46:25:E6:A5:D9:39:A6:F9:77:FB:C8:A1:24:27:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/721D5784DC4625E6A5D939A6F977FBC8A1242756.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f5530c-b0e8-4f89-ab62-db870cb6680e/16acc7ae7daa21e60b23044a6b0d56e901142023a15b4881ed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8587fa200185ecc0bca54ccf/0/3231362e3138352e3230342e302f32342d3234203d3e203630373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:b6:89:65:11:af:ff:53:9c:a1:1f:be:84:1c:b5:36:e0:91:
         c7:75:d1:01:89:43:51:33:f3:31:95:1c:d2:27:62:cb:15:1c:
         70:37:39:de:b3:2f:67:ed:2d:32:e4:20:a4:d1:d4:99:23:f1:
         74:44:dc:36:b5:95:d5:c0:7a:aa:49:6c:59:df:3e:34:76:11:
         31:e6:b8:15:18:42:9b:a9:6f:f3:89:7f:07:2c:86:79:a6:8d:
         dc:2f:35:95:c7:9b:aa:d3:8b:6c:95:8b:c8:63:ed:61:a3:00:
         0d:0e:b9:0d:7e:66:a0:a0:1b:50:a1:e6:f6:e9:13:12:d7:e1:
         d0:da:62:9e:19:38:c5:35:af:0b:cf:86:b8:33:bb:b5:1a:35:
         55:6c:27:c2:7b:76:99:97:29:d1:8b:c6:3a:7d:cb:93:3f:87:
         bc:1e:91:b4:05:f3:ad:26:28:77:85:8c:47:63:cd:6a:eb:d5:
         fb:e2:5d:56:19:9e:e3:a6:6b:72:d4:ce:81:45:7e:8e:41:13:
         7d:d5:5b:f6:9e:1e:4c:6d:75:ca:0d:53:38:8d:f0:e9:46:ff:
         5b:23:61:e6:e1:7b:b1:2c:92:7f:e2:7b:68:50:07:87:ac:2d:
         f9:ac:5c:27:c9:77:dd:82:82:4e:4b:f6:a2:95:23:35:34:62:
         29:4c:3c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----