Route Origin Authorization

$ rpki-client -vvf rpki.akrn.net/repo/AKRN/1/32332e3138352e3230382e302f32342d3234203d3e20393833.roa
File:                     32332e3138352e3230382e302f32342d3234203d3e20393833.roa (raw, json)
Hash identifier:          9lleDSzQcvudGTzr6DzQQt+lMf0HrTSbUBwzxb5jIjQ=
Subject key identifier:   9B:BD:C2:2C:2C:FB:BA:D8:DA:32:B8:3C:34:ED:88:FF:0B:4C:00:CC
Certificate issuer:       /CN=99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054
Certificate serial:       6914E829DFBF4E8031EF30FC8D745A7725D228CC
Authority key identifier: 75:CD:9B:B1:70:C2:C4:20:F0:B6:DA:A7:78:8F:CC:B0:BF:7B:4F:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054.cer
Subject info access:      rsync://rpki.akrn.net/repo/AKRN/1/32332e3138352e3230382e302f32342d3234203d3e20393833.roa
Signing time:             Tue 18 Jun 2024 16:25:11 +0000
ROA not before:           Tue 18 Jun 2024 16:20:11 +0000
ROA not after:            Tue 17 Jun 2025 16:25:11 +0000
asID:                     983
IP address blocks:        23.185.208.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:14:e8:29:df:bf:4e:80:31:ef:30:fc:8d:74:5a:77:25:d2:28:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054
        Validity
            Not Before: Jun 18 16:20:11 2024 GMT
            Not After : Jun 17 16:25:11 2025 GMT
        Subject: CN=9BBDC22C2CFBBAD8DA32B83C34ED88FF0B4C00CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:57:50:ca:0f:b3:68:80:ee:4d:cc:31:8e:e5:
                    e2:2c:09:d9:7f:e1:e5:5e:62:f1:04:a6:99:ba:b6:
                    94:59:4b:40:8c:e9:3b:56:2e:71:cd:0b:17:a0:ee:
                    d5:51:cc:1a:39:d0:a7:f4:85:66:3d:9a:06:2c:2c:
                    32:a7:fa:42:29:92:40:3b:02:79:45:95:60:0d:81:
                    f6:9f:66:47:24:c1:3d:61:9a:38:37:a3:5e:5b:2c:
                    25:ac:fb:a5:f9:b2:4e:4d:13:47:20:d0:ea:a3:5c:
                    e5:dd:ad:d2:9d:d6:a0:15:83:e3:42:9d:1f:75:9e:
                    4b:9e:f2:b9:18:f9:38:f6:d0:d5:e6:56:65:c3:19:
                    1e:e4:72:36:0f:1f:28:91:ce:05:20:57:56:05:3e:
                    75:d3:2a:fa:77:fa:80:7c:d6:80:bb:0c:1e:c4:d8:
                    2b:84:b7:5c:21:59:6c:0c:a3:aa:7c:76:20:3e:e6:
                    04:31:a7:2e:cf:ce:99:c7:76:c0:1a:47:37:6c:cf:
                    c0:93:58:56:a7:8e:f8:a8:51:85:38:ce:48:32:9b:
                    79:d2:70:63:b2:a7:82:e0:8e:61:37:3a:44:f6:4c:
                    e9:28:e3:2c:83:81:6b:39:e4:f6:77:9e:f0:42:41:
                    67:5d:e0:79:25:fd:d7:03:20:25:e3:ea:48:ed:79:
                    f0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:BD:C2:2C:2C:FB:BA:D8:DA:32:B8:3C:34:ED:88:FF:0B:4C:00:CC
            X509v3 Authority Key Identifier:
                keyid:75:CD:9B:B1:70:C2:C4:20:F0:B6:DA:A7:78:8F:CC:B0:BF:7B:4F:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.akrn.net/repo/AKRN/1/75CD9BB170C2C420F0B6DAA7788FCCB0BF7B4FAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036dbfec9d3a7dc5067caa7a2aa9edb05a5178bf4e054.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.akrn.net/repo/AKRN/1/32332e3138352e3230382e302f32342d3234203d3e20393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.185.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:7f:38:bb:f2:b9:cf:93:76:33:e5:d2:3f:2d:70:b7:cc:26:
         f0:51:a5:23:1b:d9:ea:aa:ad:3f:0d:26:97:ac:ba:8e:c1:ed:
         22:7d:73:82:b4:ee:14:aa:80:d4:1f:bc:c2:ba:91:7d:c5:3e:
         21:42:73:4c:aa:7b:31:5c:07:61:eb:2d:23:c1:7c:00:2d:5a:
         17:74:b7:0d:1e:3e:c5:fc:3a:d3:e7:c9:a6:0f:9c:16:83:5e:
         cf:f3:77:c7:e1:cf:96:bb:05:b3:80:f5:87:b9:a2:d0:42:5c:
         8a:5a:13:38:31:24:ff:35:e5:45:fc:da:eb:af:09:16:c7:45:
         4b:66:33:cb:ee:1f:36:f2:f8:02:1c:85:65:51:e2:59:8c:b8:
         91:f1:27:86:72:e9:60:64:60:19:da:6f:2a:0e:f1:38:ed:29:
         91:65:e7:93:e3:ee:87:fe:7f:6f:01:49:90:92:70:81:f3:29:
         b8:e1:d9:62:23:b7:96:20:9c:fa:24:de:68:5e:2b:3f:8b:f8:
         c3:40:72:f0:f6:3a:00:73:ec:c9:4c:93:70:e9:75:f4:b1:fd:
         dc:06:d8:9c:4b:f3:f5:43:2c:fc:8f:9f:c5:88:55:2a:e9:98:
         48:0c:60:63:8a:f9:c7:ee:c0:73:c9:dc:d0:c4:d8:33:6b:d9:
         2d:16:f0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----