Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/14/3231362e3134362e32382e302f32332d3233203d3e20393435.roa
File:                     3231362e3134362e32382e302f32332d3233203d3e20393435.roa (raw, json)
Hash identifier:          NzBi7+VwDkWWet2FIwdxBHU2wJJq2RYmN1lcaV8/+Pc=
Subject key identifier:   CB:62:C2:6D:B0:B8:A0:EB:E8:32:67:9A:1A:EF:48:81:BD:C8:FB:FF
Certificate issuer:       /CN=eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc
Certificate serial:       4CBA736E50169DC0F1137FF40D8A7431DBD053C6
Authority key identifier: 2B:E0:E6:38:9F:AD:C8:0B:FE:86:22:5B:DF:09:12:B6:17:76:04:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc.cer
Subject info access:      rsync://rpki.co/repo/August/14/3231362e3134362e32382e302f32332d3233203d3e20393435.roa
Signing time:             Sat 08 Apr 2023 21:46:33 +0000
ROA not before:           Sat 08 Apr 2023 21:41:33 +0000
ROA not after:            Sat 06 Apr 2024 21:46:33 +0000
asID:                     945
IP address blocks:        216.146.28.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:ba:73:6e:50:16:9d:c0:f1:13:7f:f4:0d:8a:74:31:db:d0:53:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc
        Validity
            Not Before: Apr  8 21:41:33 2023 GMT
            Not After : Apr  6 21:46:33 2024 GMT
        Subject: CN=CB62C26DB0B8A0EBE832679A1AEF4881BDC8FBFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cd:1b:da:d6:6f:ce:7a:ac:60:53:46:b5:c5:
                    2a:70:05:57:2c:e0:3a:7d:c3:ef:10:ee:f7:d3:eb:
                    c1:41:3d:72:e2:38:4e:fe:7b:97:63:63:19:e2:ec:
                    2e:67:72:13:56:00:4b:9c:e6:96:35:52:14:21:f3:
                    db:59:e6:93:13:5f:2d:4b:23:76:93:25:ac:d4:b0:
                    ae:41:fe:3f:6b:5e:82:f3:41:ef:f6:b1:d1:71:de:
                    62:fd:cc:0a:53:df:32:5c:c8:d0:3f:65:e7:79:24:
                    4e:46:15:1e:cb:06:d2:78:51:fa:a5:ed:51:c8:21:
                    b5:ae:8a:63:b9:89:a4:96:a7:e1:b8:94:de:f5:7b:
                    1e:2a:78:96:bb:5a:4d:d0:6a:7c:73:91:6e:bb:37:
                    c5:7f:57:e3:0f:48:78:ed:44:58:69:87:3d:90:ca:
                    a1:85:8e:44:8b:21:ec:8b:9c:8f:43:af:36:85:89:
                    cf:a8:32:48:d5:67:25:68:5b:da:36:81:b3:23:ed:
                    b4:c8:d2:17:83:11:f9:e3:71:0d:48:31:5f:7a:6f:
                    5b:bf:db:ec:2f:8d:67:0e:7e:69:46:cd:74:f5:58:
                    93:a2:03:84:91:6e:2f:b2:f4:bb:56:6a:73:c5:3d:
                    76:03:ad:2a:49:58:62:62:a9:76:0b:53:6b:fe:71:
                    f4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:62:C2:6D:B0:B8:A0:EB:E8:32:67:9A:1A:EF:48:81:BD:C8:FB:FF
            X509v3 Authority Key Identifier:
                keyid:2B:E0:E6:38:9F:AD:C8:0B:FE:86:22:5B:DF:09:12:B6:17:76:04:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/14/2BE0E6389FADC80BFE86225BDF0912B6177604EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/14/3231362e3134362e32382e302f32332d3233203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:84:45:d4:4a:d4:1d:83:ed:dd:3d:f4:8e:59:2f:63:42:a8:
         47:67:10:60:91:4c:93:eb:b6:07:8b:99:b7:5e:5d:80:be:af:
         ea:f2:db:9a:fe:74:fd:b9:1c:80:cf:6e:4e:b2:26:f3:96:f6:
         7e:71:7a:cf:c5:be:9b:7f:82:f0:9c:d7:b0:37:9c:eb:ea:fe:
         6a:60:72:c5:78:ae:11:be:0c:23:d4:fb:86:7e:8c:e1:48:58:
         fe:6c:d2:d1:b2:ca:12:02:1b:38:7d:e6:b1:06:05:2b:42:77:
         63:42:2f:bf:f1:41:d7:94:3d:40:37:86:d8:20:92:cf:39:9a:
         29:e2:ee:50:6e:83:80:2a:81:86:78:ca:6c:3e:f1:e1:a4:f5:
         63:0d:a6:b5:8b:ce:78:1b:f3:6d:a8:f1:e7:e7:92:5d:0c:c5:
         34:15:ca:8c:fe:f4:05:91:47:0c:02:cc:01:2b:c9:51:c5:a4:
         a2:67:fc:37:bf:3f:28:14:96:06:61:ce:95:67:01:ab:b2:e7:
         f3:1d:fb:a0:04:8d:78:94:b9:49:ad:76:da:b3:6a:38:d6:30:
         7a:a0:46:15:dc:82:22:d2:0a:ad:72:69:2d:30:f2:26:a4:34:
         8b:a8:5f:98:38:eb:e3:ed:66:27:27:3c:32:50:f4:28:ff:e0:
         0f:b7:47:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----