Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/0/3230342e36392e3231372e302f32342d3234203d3e20383334.roa
File:                     3230342e36392e3231372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          PrD4FfwS09IP5JN4jeX4Vgt5I6RIXZ087RT95+nB1g8=
Subject key identifier:   F1:BA:10:45:F0:2E:5C:45:40:95:4C:14:17:5C:75:96:B7:3A:AC:F3
Certificate issuer:       /CN=6f2db144aefb387c21a8d8ce65c0958972a0da5e6ad8a9166b
Certificate serial:       65BEB174CC3CDEA6D9D27C5842812DABD693F56A
Authority key identifier: 7E:C9:52:94:F5:65:8D:A6:1A:E3:13:13:69:2F:6C:DA:B9:7E:6A:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144aefb387c21a8d8ce65c0958972a0da5e6ad8a9166b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/0/3230342e36392e3231372e302f32342d3234203d3e20383334.roa
Signing time:             Sun 12 Mar 2023 15:23:13 +0000
ROA not before:           Sun 12 Mar 2023 15:18:13 +0000
ROA not after:            Sun 10 Mar 2024 15:23:13 +0000
asID:                     834
IP address blocks:        204.69.217.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:be:b1:74:cc:3c:de:a6:d9:d2:7c:58:42:81:2d:ab:d6:93:f5:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f2db144aefb387c21a8d8ce65c0958972a0da5e6ad8a9166b
        Validity
            Not Before: Mar 12 15:18:13 2023 GMT
            Not After : Mar 10 15:23:13 2024 GMT
        Subject: CN=F1BA1045F02E5C4540954C14175C7596B73AACF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:42:1c:a5:3d:39:75:3f:52:b7:de:e1:86:
                    05:b7:a7:63:14:8b:b4:33:79:a4:6e:e3:4f:9b:06:
                    db:d0:69:bd:20:9c:04:f8:13:47:57:07:56:ec:91:
                    13:42:f2:50:56:2a:05:73:b2:b0:ca:a4:fa:10:4b:
                    59:4d:e5:5b:c6:a3:11:49:a4:ad:8c:76:b3:92:8a:
                    1a:2a:65:3e:cf:1e:9d:40:e6:a8:ed:e1:d6:a6:5a:
                    68:c3:be:46:0c:fe:f4:bb:bd:3f:2e:75:7b:d6:f8:
                    01:6e:3a:49:ef:90:ed:89:63:c7:74:32:24:a7:74:
                    4f:0e:49:65:0c:c4:f3:9e:b9:2b:6b:22:6c:e6:13:
                    cb:6e:36:a1:53:5c:60:8e:da:3f:9c:57:8c:f1:c6:
                    a3:05:82:25:5b:99:fd:69:84:81:fd:ee:4d:67:c6:
                    9c:f1:b6:cc:6b:40:16:5b:f0:f5:f8:b4:03:ee:4a:
                    fa:a5:11:7b:7f:ac:de:40:6b:3b:da:c9:d9:cc:dd:
                    c0:29:36:82:86:ef:a4:e6:c4:b2:aa:6f:22:58:de:
                    dd:d3:68:83:13:c1:cc:56:16:14:eb:c8:b9:c5:d2:
                    e4:e0:d7:70:85:b9:84:e8:d5:db:6e:2a:ee:56:e3:
                    6c:fc:ec:37:87:1d:ea:96:2e:cb:5c:b4:3b:13:ae:
                    3a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BA:10:45:F0:2E:5C:45:40:95:4C:14:17:5C:75:96:B7:3A:AC:F3
            X509v3 Authority Key Identifier:
                keyid:7E:C9:52:94:F5:65:8D:A6:1A:E3:13:13:69:2F:6C:DA:B9:7E:6A:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/0/7EC95294F5658DA61AE31313692F6CDAB97E6A47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144aefb387c21a8d8ce65c0958972a0da5e6ad8a9166b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/0/3230342e36392e3231372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:87:99:b5:d5:ed:94:b5:08:f8:3a:fe:e8:2a:67:d1:44:88:
         a7:81:68:13:ae:b1:47:d1:48:78:32:02:49:6b:05:cb:25:1c:
         56:fd:68:98:6f:7b:99:87:cf:7e:1d:8e:72:91:44:85:97:09:
         ca:e7:66:22:62:66:3a:15:25:fa:28:2a:84:dd:53:dd:1a:77:
         69:e1:be:25:d5:48:63:56:2f:a2:df:57:20:76:04:80:e0:b4:
         05:60:b2:c9:e3:92:9e:95:ab:72:2c:11:5a:ec:52:a8:b6:4b:
         16:1c:c6:64:83:29:1a:be:2d:5d:0d:51:a2:67:e0:0f:0d:e0:
         44:a5:0c:4f:ed:32:3b:49:f3:e5:68:50:e1:3e:08:22:75:fd:
         24:75:71:19:f3:c4:1c:9c:b7:47:b1:32:62:b4:8c:b4:22:2a:
         d0:d3:f7:45:41:cf:43:82:c3:5e:86:e1:73:31:4b:00:eb:13:
         c0:d2:0c:17:94:52:d6:e8:7f:eb:6a:02:4e:46:10:1d:2e:64:
         73:48:4b:ab:f8:3d:2c:17:cc:ee:99:cc:1b:65:38:24:79:a0:
         7c:ab:c5:f8:ab:3d:17:74:f6:24:05:16:50:bb:aa:f1:7c:e6:
         a7:bd:52:c3:2f:4f:76:b1:a8:8f:84:0d:fe:f0:85:0c:1c:75:
         e3:a2:55:26
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUZb6xdMw83qbZ0nxYQoEtq9aT9WowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmYyZGIxNDRhZWZiMzg3YzIxYThkOGNlNjVjMDk1ODk3
MmEwZGE1ZTZhZDhhOTE2NmIwHhcNMjMwMzEyMTUxODEzWhcNMjQwMzEwMTUyMzEz
WjAzMTEwLwYDVQQDEyhGMUJBMTA0NUYwMkU1QzQ1NDA5NTRDMTQxNzVDNzU5NkI3
M0FBQ0YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm15CHKU9OXU/
Urfe4YYFt6djFIu0M3mkbuNPmwbb0Gm9IJwE+BNHVwdW7JETQvJQVioFc7KwyqT6
EEtZTeVbxqMRSaStjHazkooaKmU+zx6dQOao7eHWplpow75GDP70u70/LnV71vgB
bjpJ75DtiWPHdDIkp3RPDkllDMTznrkrayJs5hPLbjahU1xgjto/nFeM8cajBYIl
W5n9aYSB/e5NZ8ac8bbMa0AWW/D1+LQD7kr6pRF7f6zeQGs72snZzN3AKTaChu+k
5sSyqm8iWN7d02iDE8HMVhYU68i5xdLk4NdwhbmE6NXbbiruVuNs/Ow3hx3qli7L
XLQ7E646owIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPG6EEXwLlxFQJVMFBdcdZa3
OqzzMB8GA1UdIwQYMBaAFH7JUpT1ZY2mGuMTE2kvbNq5fmpHMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2Y2Q3YTg4MzE0MmUwLzAv
N0VDOTUyOTRGNTY1OERBNjFBRTMxMzEzNjkyRjZDREFCOTdFNkE0Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2Q5NmRmMmM0LTJiYmEtNDBlMi04NDFkLThjN2MwYThkZWUxMy82ZjJk
YjE0NGFlZmIzODdjMjFhOGQ4Y2U2NWMwOTU4OTcyYTBkYTVlNmFkOGE5MTY2Yi5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2Y2Q3
YTg4MzE0MmUwLzAvMzIzMDM0MmUzNjM5MmUzMjMxMzcyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADMRdkwDQYJKoZIhvcNAQELBQADggEB
AAeHmbXV7ZS1CPg6/ugqZ9FEiKeBaBOusUfRSHgyAklrBcslHFb9aJhve5mHz34d
jnKRRIWXCcrnZiJiZjoVJfooKoTdU90ad2nhviXVSGNWL6LfVyB2BIDgtAVgssnj
kp6Vq3IsEVrsUqi2SxYcxmSDKRq+LV0NUaJn4A8N4ESlDE/tMjtJ8+VoUOE+CCJ1
/SR1cRnzxByct0exMmK0jLQiKtDT90VBz0OCw16G4XMxSwDrE8DSDBeUUtbof+tq
Ak5GEB0uZHNIS6v4PSwXzO6ZzBtlOCR5oHyrxfirPRd09iQFFlC7qvF85qe9UsMv
T3axqI+EDf7whQwcdeOiVSY=
-----END CERTIFICATE-----