Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136342e302f32332d3233203d3e20333937323833.roa
File:                     3231362e3135312e3136342e302f32332d3233203d3e20333937323833.roa (raw, json)
Hash identifier:          j0BPZ/pFy69/kwwMZWaPVMPnDfkNRCtDZFzBWDrkKLM=
Subject key identifier:   BF:33:BE:6C:B8:69:BA:25:56:DE:9D:7D:1D:EA:18:A1:96:9B:B5:53
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       5D7BEA4445F10706D62BF4E93D71BFE6FCAA6C6F
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136342e302f32332d3233203d3e20333937323833.roa
Signing time:             Wed 11 Sep 2024 10:08:55 +0000
ROA not before:           Wed 11 Sep 2024 10:03:55 +0000
ROA not after:            Wed 10 Sep 2025 10:08:55 +0000
asID:                     397283
IP address blocks:        216.151.164.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7b:ea:44:45:f1:07:06:d6:2b:f4:e9:3d:71:bf:e6:fc:aa:6c:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Sep 11 10:03:55 2024 GMT
            Not After : Sep 10 10:08:55 2025 GMT
        Subject: CN=BF33BE6CB869BA2556DE9D7D1DEA18A1969BB553
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:d5:e2:ca:a1:76:e7:ad:95:fe:78:4e:42:2a:
                    a1:c6:bd:59:fa:13:34:d4:33:ac:9c:c0:6b:2d:1d:
                    17:7b:09:0b:ec:5b:67:16:9f:f3:93:2e:ec:27:c0:
                    b8:0a:12:3f:49:75:31:b9:c3:1d:6e:36:69:a2:c0:
                    11:61:7e:d4:1a:b5:06:a4:e0:37:de:86:ef:fe:49:
                    6e:1c:6e:ec:ea:b9:e1:35:e7:7e:82:e5:21:f7:4d:
                    1e:07:fc:b9:13:28:56:2a:63:ae:44:55:86:3e:f5:
                    48:79:72:44:ee:47:cf:04:a1:0d:87:2f:b0:d0:d9:
                    63:c2:24:51:71:69:6b:fa:0d:87:49:45:66:43:69:
                    e7:15:1f:8c:c2:e3:bd:5f:b5:4b:79:df:0f:8e:a0:
                    46:c5:4f:72:92:b4:78:54:22:18:88:df:4c:cd:f1:
                    60:7c:09:e3:89:3c:3f:19:de:f7:35:fc:d3:77:d2:
                    b2:22:3e:66:b9:bc:09:89:ef:a6:c6:eb:6a:d6:42:
                    55:c7:e9:18:43:ed:b9:91:52:bd:3d:9f:6e:b4:5e:
                    25:3b:ff:48:c5:1c:6e:06:90:7e:ab:54:d5:1b:e0:
                    9f:15:fa:8d:63:9b:fc:cf:e6:aa:95:a3:e0:1e:eb:
                    9d:db:9c:6c:d3:49:94:f8:af:95:45:2a:7a:6b:8c:
                    0d:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:33:BE:6C:B8:69:BA:25:56:DE:9D:7D:1D:EA:18:A1:96:9B:B5:53
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136342e302f32332d3233203d3e20333937323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:72:1a:7e:9b:72:c9:e2:68:45:af:85:f8:02:bf:33:39:b1:
         82:f2:54:6b:33:51:30:7c:b2:e4:05:20:ed:85:82:fc:19:42:
         3b:92:2c:b2:1f:25:51:89:ab:d8:ce:3e:d3:87:f4:c8:53:20:
         c7:f5:55:94:56:e6:24:fa:36:b0:1f:ce:20:d1:74:ee:27:84:
         2e:52:9a:aa:60:bc:2c:70:a7:10:d2:09:41:e2:aa:ba:34:96:
         27:91:1c:c1:2e:dc:07:67:0b:f6:26:2c:5a:26:3d:57:83:ff:
         aa:bb:66:82:1c:7f:b9:1d:5f:f7:8c:25:5e:58:fb:7a:37:3c:
         d8:be:20:a9:9e:c3:ba:e7:fe:10:46:a2:73:6b:34:d5:ce:5f:
         e8:76:3f:81:db:43:a8:68:06:ca:69:7c:e5:ee:16:df:67:38:
         6b:0d:37:02:5c:43:d2:2b:19:92:fe:4d:0a:c4:63:10:be:bd:
         9a:1f:ff:55:91:62:68:d0:dc:64:81:ea:d1:73:f5:a3:9a:4d:
         71:dc:f8:d1:29:ca:4a:07:2c:26:1f:a3:95:fc:4f:50:7c:61:
         d7:c8:07:dc:99:eb:6d:7c:98:c2:76:5c:9d:df:95:1f:8d:29:
         82:7f:60:e1:2d:01:3e:5e:f6:6f:d8:a4:f9:c6:85:c0:da:00:
         fa:cd:75:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----