Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/14/3231362e3134362e32382e302f32322d3232203d3e203530303538.roa
File:                     3231362e3134362e32382e302f32322d3232203d3e203530303538.roa (raw, json)
Hash identifier:          cOwpTMk4Gu7XNRUOc6MqLgC/yfZsHxKktX8jurzfzXk=
Subject key identifier:   3E:4C:35:66:43:32:7D:31:AD:D6:5D:F2:B9:20:00:16:6F:96:38:ED
Certificate issuer:       /CN=eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc
Certificate serial:       3F1B70FD6225737DD75C7829C57420E3EF4BCE27
Authority key identifier: 2B:E0:E6:38:9F:AD:C8:0B:FE:86:22:5B:DF:09:12:B6:17:76:04:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc.cer
Subject info access:      rsync://rpki.co/repo/August/14/3231362e3134362e32382e302f32322d3232203d3e203530303538.roa
Signing time:             Sat 08 Apr 2023 21:46:33 +0000
ROA not before:           Sat 08 Apr 2023 21:41:33 +0000
ROA not after:            Sat 06 Apr 2024 21:46:33 +0000
asID:                     50058
IP address blocks:        216.146.28.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1b:70:fd:62:25:73:7d:d7:5c:78:29:c5:74:20:e3:ef:4b:ce:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc
        Validity
            Not Before: Apr  8 21:41:33 2023 GMT
            Not After : Apr  6 21:46:33 2024 GMT
        Subject: CN=3E4C356643327D31ADD65DF2B92000166F9638ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:04:da:f4:84:fe:9e:a2:ec:52:ec:19:59:4d:
                    ac:0b:93:01:4c:7a:46:b6:a5:d1:c8:a3:01:70:40:
                    cc:1d:80:dc:96:76:99:d0:8b:19:73:b1:46:84:74:
                    50:07:4a:ac:0d:73:0a:36:2b:4e:a4:4e:9f:dc:45:
                    3e:00:ea:af:80:c8:0f:2a:35:06:0c:bb:02:d7:7b:
                    03:72:7d:32:5a:62:ac:70:cc:d2:22:4c:f9:a8:44:
                    a3:70:1e:27:ba:a8:8a:87:11:88:4b:73:2f:b5:92:
                    2a:bf:60:6c:35:8d:8e:1d:19:c6:d1:4b:38:a3:a2:
                    bd:09:74:58:67:85:2d:02:f6:74:74:80:16:12:5d:
                    49:82:59:75:d8:76:2c:9d:97:ef:4c:4f:5d:52:9d:
                    be:54:78:1d:8d:56:7d:5b:9c:aa:b3:58:5b:56:5a:
                    83:95:c5:db:e7:07:f8:d8:72:6a:c0:3e:c1:13:ff:
                    14:c7:2c:e0:32:4d:be:ad:dd:c8:6e:86:85:5b:4a:
                    4e:25:f6:b4:b2:d5:bb:ce:74:f8:bd:51:62:a7:5a:
                    7a:a0:07:19:a5:6b:c8:14:cf:4f:ce:e8:f8:c2:e1:
                    68:35:dc:fe:e4:f5:2d:41:e3:cf:55:cc:5c:4d:13:
                    80:18:fd:82:3c:7c:c4:94:c3:13:dc:5c:08:05:f8:
                    ef:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:4C:35:66:43:32:7D:31:AD:D6:5D:F2:B9:20:00:16:6F:96:38:ED
            X509v3 Authority Key Identifier:
                keyid:2B:E0:E6:38:9F:AD:C8:0B:FE:86:22:5B:DF:09:12:B6:17:76:04:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/14/2BE0E6389FADC80BFE86225BDF0912B6177604EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/14/3231362e3134362e32382e302f32322d3232203d3e203530303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         28:fa:64:8a:18:a1:49:b9:9c:c3:ef:ac:d2:79:70:3b:f2:f8:
         12:75:65:5f:a8:fe:08:0d:4f:41:c4:27:49:80:e4:4c:36:a8:
         46:5b:77:47:3d:11:ab:04:1f:8e:03:02:38:64:b0:a8:b0:45:
         87:f1:7a:80:0c:d1:01:48:7f:4a:74:44:e2:23:2b:ea:5f:21:
         e8:7f:fe:84:67:7a:99:08:d1:1a:88:5a:ca:34:62:2b:4d:4f:
         63:13:9c:7f:5b:c6:16:31:fe:54:0e:55:82:66:8e:1c:4e:d5:
         b2:c7:b7:a9:cf:cf:d5:6a:ea:ad:bd:1b:f9:ff:cc:ee:16:c7:
         59:d3:f9:60:c6:20:dc:ad:74:48:51:14:8e:05:14:b2:db:18:
         e5:e5:60:f8:3e:86:ee:86:9b:b2:1c:9f:db:33:f2:14:2c:b5:
         38:21:0b:26:ab:b3:c9:e7:9a:8b:82:60:db:2b:3e:c7:5b:e7:
         c8:03:d9:40:62:8e:5c:6a:a2:f7:d7:95:9d:52:54:27:5e:46:
         68:0c:0f:f3:cd:0d:c5:58:e4:cb:06:b0:11:67:18:3e:44:67:
         4b:0a:e8:96:78:58:b6:6f:a3:f9:49:84:d4:fd:89:c5:5e:d1:
         9f:49:10:c4:85:9d:e8:6b:b4:b1:28:52:46:ce:84:5d:82:88:
         dd:33:f7:7c
-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIUPxtw/WIlc33XXHgpxXQg4+9LzicwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWViZGE0NzkxOTIxZGVhNjZlYTg2Mzc0OWRkYWRmNGFl
NTUwMzM3YzBiZGNiMzQzZmMwHhcNMjMwNDA4MjE0MTMzWhcNMjQwNDA2MjE0NjMz
WjAzMTEwLwYDVQQDEygzRTRDMzU2NjQzMzI3RDMxQURENjVERjJCOTIwMDAxNjZG
OTYzOEVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQTa9IT+nqLs
UuwZWU2sC5MBTHpGtqXRyKMBcEDMHYDclnaZ0IsZc7FGhHRQB0qsDXMKNitOpE6f
3EU+AOqvgMgPKjUGDLsC13sDcn0yWmKscMzSIkz5qESjcB4nuqiKhxGIS3MvtZIq
v2BsNY2OHRnG0Us4o6K9CXRYZ4UtAvZ0dIAWEl1Jgll12HYsnZfvTE9dUp2+VHgd
jVZ9W5yqs1hbVlqDlcXb5wf42HJqwD7BE/8UxyzgMk2+rd3IboaFW0pOJfa0stW7
znT4vVFip1p6oAcZpWvIFM9Pzuj4wuFoNdz+5PUtQePPVcxcTROAGP2CPHzElMMT
3FwIBfjvDQIDAQABo4ICWjCCAlYwHQYDVR0OBBYEFD5MNWZDMn0xrdZd8rkgABZv
ljjtMB8GA1UdIwQYMBaAFCvg5jifrcgL/oYiW98JErYXdgTvMA4GA1UdDwEB/wQE
AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1
c3QvMTQvMkJFMEU2Mzg5RkFEQzgwQkZFODYyMjVCREYwOTEyQjYxNzc2MDRFRi5j
cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr
aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh
LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2Ut
MTM3MjI3ZTk3MWFjLzU0YzBhYmU4LTBhMDQtNDMxNi1hZmYyLTljZGZmMDUyMmZi
ZC9lZWJkYTQ3OTE5MjFkZWE2NmVhODYzNzQ5ZGRhZGY0YWU1NTAzMzdjMGJkY2Iz
NDNmYy5jZXIwdQYIKwYBBQUHAQsEaTBnMGUGCCsGAQUFBzALhllyc3luYzovL3Jw
a2kuY28vcmVwby9BdWd1c3QvMTQvMzIzMTM2MmUzMTM0MzYyZTMyMzgyZTMwMmYz
MjMyMmQzMjMyMjAzZDNlMjAzNTMwMzAzNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2JIcMA0GCSqG
SIb3DQEBCwUAA4IBAQAo+mSKGKFJuZzD76zSeXA78vgSdWVfqP4IDU9BxCdJgORM
NqhGW3dHPRGrBB+OAwI4ZLCosEWH8XqADNEBSH9KdETiIyvqXyHof/6EZ3qZCNEa
iFrKNGIrTU9jE5x/W8YWMf5UDlWCZo4cTtWyx7epz8/VauqtvRv5/8zuFsdZ0/lg
xiDcrXRIURSOBRSy2xjl5WD4PobuhpuyHJ/bM/IULLU4IQsmq7PJ55qLgmDbKz7H
W+fIA9lAYo5caqL315WdUlQnXkZoDA/zzQ3FWOTLBrARZxg+RGdLCuiWeFi2b6P5
SYTU/YnFXtGfSRDEhZ3oa7SxKFJGzoRdgojdM/d8
-----END CERTIFICATE-----