Route Origin Authorization

$ rpki-client -vvf rpki.akrn.net/repo/AKRN/1/32332e3138352e3230382e302f32342d3234203d3e203338313336.roa
File:                     32332e3138352e3230382e302f32342d3234203d3e203338313336.roa (raw, json)
Hash identifier:          hua0v1l/PhPDjq4Q9xQxBmEyPkvdYTnF/AEq093WTA0=
Subject key identifier:   EF:AF:33:2C:CE:14:B2:02:B5:13:AB:2C:57:3F:B2:84:A1:D7:6D:B0
Certificate issuer:       /CN=99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054
Certificate serial:       36112849008AB4C64DA91942111B1307E1A11A68
Authority key identifier: 75:CD:9B:B1:70:C2:C4:20:F0:B6:DA:A7:78:8F:CC:B0:BF:7B:4F:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054.cer
Subject info access:      rsync://rpki.akrn.net/repo/AKRN/1/32332e3138352e3230382e302f32342d3234203d3e203338313336.roa
Signing time:             Tue 18 Jun 2024 16:25:11 +0000
ROA not before:           Tue 18 Jun 2024 16:20:11 +0000
ROA not after:            Tue 17 Jun 2025 16:25:11 +0000
asID:                     38136
IP address blocks:        23.185.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:11:28:49:00:8a:b4:c6:4d:a9:19:42:11:1b:13:07:e1:a1:1a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054
        Validity
            Not Before: Jun 18 16:20:11 2024 GMT
            Not After : Jun 17 16:25:11 2025 GMT
        Subject: CN=EFAF332CCE14B202B513AB2C573FB284A1D76DB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ee:45:3b:17:a5:f4:be:45:47:d0:1d:f1:b0:
                    65:8b:07:37:7b:c5:2e:ad:b0:c9:1f:06:cb:6f:ba:
                    b3:da:5f:f2:55:0a:30:6d:55:de:33:8d:0b:75:35:
                    4c:d3:43:98:4b:9b:fd:b0:7b:b5:2e:df:81:17:c5:
                    ae:47:5f:8a:55:4c:02:4a:18:ee:c5:50:d6:1c:6c:
                    ea:15:33:ee:2b:43:ea:9e:24:94:dc:0e:bb:86:4f:
                    d6:72:70:79:52:a2:f8:90:b4:c0:7d:12:c1:15:f0:
                    dc:46:46:4c:5e:f6:f4:98:6a:11:a3:2b:c8:aa:f3:
                    b2:57:22:34:62:95:cf:da:46:d3:2d:e4:5c:79:9d:
                    91:9b:cb:5f:60:2e:97:98:8e:be:d8:c9:49:1c:fa:
                    55:df:42:ed:cb:54:a5:3d:d7:90:31:52:2e:94:d7:
                    eb:76:b9:c8:c3:33:24:78:59:4e:fe:1c:3c:65:44:
                    4b:36:cd:a7:6a:d4:69:44:62:ee:35:2e:6b:39:f8:
                    c9:5d:2d:bb:b7:d1:4c:56:c9:49:25:98:e4:d4:8d:
                    08:31:46:ab:8a:83:5c:4b:d1:18:c4:ba:1e:93:be:
                    1f:6d:38:8c:cc:0b:a4:12:f2:04:ae:bf:30:1e:58:
                    61:a4:c6:d2:e7:43:31:dc:6e:d8:e2:ce:53:3d:a2:
                    02:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AF:33:2C:CE:14:B2:02:B5:13:AB:2C:57:3F:B2:84:A1:D7:6D:B0
            X509v3 Authority Key Identifier:
                keyid:75:CD:9B:B1:70:C2:C4:20:F0:B6:DA:A7:78:8F:CC:B0:BF:7B:4F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.akrn.net/repo/AKRN/1/75CD9BB170C2C420F0B6DAA7788FCCB0BF7B4FAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.akrn.net/repo/AKRN/1/32332e3138352e3230382e302f32342d3234203d3e203338313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:9f:c3:5d:9f:20:a9:aa:1d:1b:63:3d:ab:42:3d:65:7e:1d:
         45:e6:89:61:03:a7:a7:42:cf:50:06:ea:dc:87:79:1a:0c:96:
         84:d6:42:6d:87:0d:38:a3:d6:a4:57:13:47:d5:41:77:3a:f7:
         da:d0:9e:3d:68:2f:cf:38:16:c2:ab:65:2a:bb:66:7b:af:6d:
         5e:f4:28:55:d6:db:74:e1:2a:c0:fa:1d:43:e2:d6:10:81:b6:
         c0:09:12:e0:30:3b:b6:84:35:1c:8a:61:f3:16:ab:7c:31:bc:
         d3:df:d0:6d:00:de:d9:f8:91:cf:fe:51:a4:7b:5b:33:94:02:
         53:ff:5c:2a:64:6d:73:1b:8e:d7:78:58:f9:78:b1:14:57:59:
         97:19:65:b7:3a:d1:c6:d9:d7:6a:28:dd:bb:f3:a4:2d:af:62:
         af:9f:7d:12:14:2f:2e:9f:1b:1a:89:0a:53:d6:ed:f5:ac:74:
         83:38:f8:a3:94:2e:c7:f0:7f:9d:b3:b9:85:34:17:db:9f:1a:
         26:cc:16:a2:d4:e5:2a:30:6e:7a:5d:81:80:d9:9e:10:9a:db:
         a5:d8:68:89:60:cd:08:f2:46:25:03:33:a1:d0:48:bf:14:5c:
         ff:72:0f:e2:89:d9:43:ca:ce:8c:00:c8:71:75:69:42:23:5e:
         11:fb:a4:2f
-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIUNhEoSQCKtMZNqRlCERsTB+GhGmgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOTlhOGEwMzZkYmZlYzlkM2E3ZGM1MDY3Y2FhN2EyYWE5
ZWRiMDVhNTE3OGJmNGUwNTQwHhcNMjQwNjE4MTYyMDExWhcNMjUwNjE3MTYyNTEx
WjAzMTEwLwYDVQQDEyhFRkFGMzMyQ0NFMTRCMjAyQjUxM0FCMkM1NzNGQjI4NEEx
RDc2REIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1u5FOxel9L5F
R9Ad8bBliwc3e8UurbDJHwbLb7qz2l/yVQowbVXeM40LdTVM00OYS5v9sHu1Lt+B
F8WuR1+KVUwCShjuxVDWHGzqFTPuK0PqniSU3A67hk/WcnB5UqL4kLTAfRLBFfDc
RkZMXvb0mGoRoyvIqvOyVyI0YpXP2kbTLeRceZ2Rm8tfYC6XmI6+2MlJHPpV30Lt
y1SlPdeQMVIulNfrdrnIwzMkeFlO/hw8ZURLNs2natRpRGLuNS5rOfjJXS27t9FM
VslJJZjk1I0IMUarioNcS9EYxLoek74fbTiMzAukEvIErr8wHlhhpMbS50Mx3G7Y
4s5TPaICEwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFO+vMyzOFLICtROrLFc/soSh
122wMB8GA1UdIwQYMBaAFHXNm7FwwsQg8Lbap3iPzLC/e0+rMA4GA1UdDwEB/wQE
AwIHgDBfBgNVHR8EWDBWMFSgUqBQhk5yc3luYzovL3Jwa2kuYWtybi5uZXQvcmVw
by9BS1JOLzEvNzVDRDlCQjE3MEMyQzQyMEYwQjZEQUE3Nzg4RkNDQjBCRjdCNEZB
Qi5jcmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8v
cnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1l
ODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFj
Y2UtMTM3MjI3ZTk3MWFjLzM3ZmU4YTRhLTNmZDMtNGJhMC05NDIzLWY5NTdiZDU4
YmNhNC85OWE4YTAzNmRiZmVjOWQzYTdkYzUwNjdjYWE3YTJhYTllZGIwNWE1MTc4
YmY0ZTA1NC5jZXIweAYIKwYBBQUHAQsEbDBqMGgGCCsGAQUFBzALhlxyc3luYzov
L3Jwa2kuYWtybi5uZXQvcmVwby9BS1JOLzEvMzIzMzJlMzEzODM1MmUzMjMwMzgy
ZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzM4MzEzMzM2LnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7nQ
MA0GCSqGSIb3DQEBCwUAA4IBAQACn8NdnyCpqh0bYz2rQj1lfh1F5olhA6enQs9Q
Burch3kaDJaE1kJthw04o9akVxNH1UF3Ovfa0J49aC/POBbCq2Uqu2Z7r21e9ChV
1tt04SrA+h1D4tYQgbbACRLgMDu2hDUcimHzFqt8MbzT39BtAN7Z+JHP/lGke1sz
lAJT/1wqZG1zG47XeFj5eLEUV1mXGWW3OtHG2ddqKN2786Qtr2Kvn30SFC8unxsa
iQpT1u31rHSDOPijlC7H8H+ds7mFNBfbnxomzBai1OUqMG56XYGA2Z4Qmtul2GiJ
YM0I8kYlAzOh0Ei/FFz/cg/iidlDys6MAMhxdWlCI14R+6Qv
-----END CERTIFICATE-----