Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e203134333135.roa
File:                     3231362e3135312e3136302e302f32342d3234203d3e203134333135.roa (raw, json)
Hash identifier:          iL67UvttEhhOmTflX70Gwzk2RBSGImluQQv9jFNsJFg=
Subject key identifier:   1E:BB:C2:41:E9:76:E5:65:1D:7F:C1:74:0E:4F:0F:1B:A6:8C:B9:D3
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       291EF1EC82B08C6558E3FDF55D65A2D580F1B90E
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e203134333135.roa
Signing time:             Mon 16 Sep 2024 09:49:57 +0000
ROA not before:           Mon 16 Sep 2024 09:44:57 +0000
ROA not after:            Mon 15 Sep 2025 09:49:57 +0000
asID:                     14315
IP address blocks:        216.151.160.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:1e:f1:ec:82:b0:8c:65:58:e3:fd:f5:5d:65:a2:d5:80:f1:b9:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Sep 16 09:44:57 2024 GMT
            Not After : Sep 15 09:49:57 2025 GMT
        Subject: CN=1EBBC241E976E5651D7FC1740E4F0F1BA68CB9D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:74:8e:ca:05:65:b2:d4:d9:36:eb:9d:b8:dd:
                    49:51:48:25:92:99:b4:a4:5a:de:33:86:46:a4:53:
                    95:be:1d:95:ed:c4:a9:1b:80:de:66:7e:78:51:2e:
                    18:46:99:3c:ec:ec:27:02:13:fc:23:0c:42:9f:6c:
                    25:85:97:6e:98:70:68:69:f8:44:d0:7a:6c:39:f1:
                    9f:ae:9f:61:dd:70:f5:f0:a6:d4:a9:e5:22:cf:75:
                    a6:84:6f:41:e9:6d:4a:55:63:2f:c5:be:9f:84:36:
                    1b:36:45:9f:f5:65:bb:3b:55:42:ea:1a:80:7f:eb:
                    51:7d:e2:2b:7a:4c:96:00:5a:b6:5b:bd:14:ec:6f:
                    8b:5d:67:7d:e6:20:de:e5:95:97:32:bc:a0:75:43:
                    0c:10:72:e5:81:ab:3f:5c:8f:9f:0f:3a:6a:11:9b:
                    6d:0f:f3:8f:62:7f:ad:b3:14:68:6f:27:d5:1f:77:
                    10:98:11:cb:c2:5d:18:9a:cf:d8:e4:dd:9b:f8:1e:
                    bd:51:d7:94:bd:88:ef:27:17:cc:eb:82:87:43:dd:
                    79:84:c0:e4:ed:e0:14:7b:6c:19:0b:2c:f6:a7:cd:
                    18:3e:a9:61:0b:17:4a:ba:3f:0a:01:1d:ba:da:2a:
                    3a:8a:f2:9d:71:cc:36:21:64:db:c1:54:13:f6:74:
                    5f:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BB:C2:41:E9:76:E5:65:1D:7F:C1:74:0E:4F:0F:1B:A6:8C:B9:D3
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e203134333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:91:06:01:ad:3a:22:36:d1:5a:1a:6a:2a:02:ea:50:2d:3c:
         07:12:f1:02:ae:e8:15:de:9c:a0:9c:c3:e7:55:b9:f9:2e:10:
         72:e3:f9:82:93:89:7f:49:a9:42:47:a6:fb:14:71:88:3c:b4:
         83:c0:d8:91:e3:0c:a1:dd:9e:07:5d:87:44:9d:76:8f:9c:de:
         0c:15:df:d6:5b:f8:14:4d:42:11:4a:25:95:a4:79:8f:6c:ee:
         7f:3f:49:9d:94:56:4a:eb:91:7e:c0:9a:29:ae:fb:9b:8c:03:
         9f:d3:f2:49:6a:28:a1:c9:a0:af:69:fe:95:3a:1b:17:5e:f4:
         6e:05:17:ea:99:d9:8a:e9:83:c7:af:ea:fd:80:2b:c8:3c:86:
         a7:93:dd:9f:58:24:23:1e:f4:66:03:14:43:42:d3:79:e6:a8:
         ff:4d:a3:28:92:d0:31:de:0d:96:3e:0f:46:f3:bd:ce:43:04:
         fd:d3:3b:a9:7d:1a:10:9a:03:27:a6:f5:70:a6:90:11:a7:77:
         b6:14:36:f7:17:b8:6e:4f:6d:f0:4e:3c:8c:1e:6d:e1:3e:cc:
         95:29:96:e8:8e:a8:1f:5d:32:6e:e6:2f:b5:2c:c8:0f:a8:69:
         39:3c:89:3c:cb:f4:af:cb:97:71:19:5d:4a:c7:29:71:f1:16:
         b4:54:e6:a6
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUKR7x7IKwjGVY4/31XWWi1YDxuQ4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2UyYmI0ZTU2Y2RmZTJmNDBmODI0YWJkY2NkOWI1MjM0
NjZlY2NkZGIzMDZjOTBjNWIwHhcNMjQwOTE2MDk0NDU3WhcNMjUwOTE1MDk0OTU3
WjAzMTEwLwYDVQQDEygxRUJCQzI0MUU5NzZFNTY1MUQ3RkMxNzQwRTRGMEYxQkE2
OENCOUQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnSOygVlstTZ
NuuduN1JUUglkpm0pFreM4ZGpFOVvh2V7cSpG4DeZn54US4YRpk87OwnAhP8IwxC
n2wlhZdumHBoafhE0HpsOfGfrp9h3XD18KbUqeUiz3WmhG9B6W1KVWMvxb6fhDYb
NkWf9WW7O1VC6hqAf+tRfeIrekyWAFq2W70U7G+LXWd95iDe5ZWXMrygdUMMEHLl
gas/XI+fDzpqEZttD/OPYn+tsxRobyfVH3cQmBHLwl0Yms/Y5N2b+B69UdeUvYjv
JxfM64KHQ915hMDk7eAUe2wZCyz2p80YPqlhCxdKuj8KAR262io6ivKdccw2IWTb
wVQT9nRfmQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFB67wkHpduVlHX/BdA5PDxum
jLnTMB8GA1UdIwQYMBaAFMOj2Rf0OZvCbApodxgr6jzZ/vQCMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGZkZWQxYTAwMTkwMDZlOTdjYjEyOGVmLzAv
QzNBM0Q5MTdGNDM5OUJDMjZDMEE2ODc3MTgyQkVBM0NEOUZFRjQwMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1L2VmYTAxYWNiLTUxZWMtNDA0OC04NTg5LWQwOTM5MDc5MWFlZC83ZTJi
YjRlNTZjZGZlMmY0MGY4MjRhYmRjY2Q5YjUyMzQ2NmVjY2RkYjMwNmM5MGM1Yi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThmZGVkMWEwMDE5MDA2
ZTk3Y2IxMjhlZi8wLzMyMzEzNjJlMzEzNTMxMmUzMTM2MzAyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM0MzMzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2JegMA0GCSqGSIb3DQEB
CwUAA4IBAQBJkQYBrToiNtFaGmoqAupQLTwHEvECrugV3pygnMPnVbn5LhBy4/mC
k4l/SalCR6b7FHGIPLSDwNiR4wyh3Z4HXYdEnXaPnN4MFd/WW/gUTUIRSiWVpHmP
bO5/P0mdlFZK65F+wJoprvubjAOf0/JJaiihyaCvaf6VOhsXXvRuBRfqmdmK6YPH
r+r9gCvIPIank92fWCQjHvRmAxRDQtN55qj/TaMoktAx3g2WPg9G873OQwT90zup
fRoQmgMnpvVwppARp3e2FDb3F7huT23wTjyMHm3hPsyVKZbojqgfXTJu5i+1LMgP
qGk5PIk8y/Svy5dxGV1Kxylx8Ra0VOam
-----END CERTIFICATE-----