Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/14/3231362e3134362e32392e302f32342d3234203d3e20323030383237.roa
File:                     3231362e3134362e32392e302f32342d3234203d3e20323030383237.roa (raw, json)
Hash identifier:          1dfDEaEzpkguqRogmli6uLLlnTGe+fKGYSUQPl9XUWg=
Subject key identifier:   53:1C:F6:8E:FC:B0:AB:75:59:D4:CF:4B:E7:6B:FE:4A:C2:9D:97:1C
Certificate issuer:       /CN=eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc
Certificate serial:       602347AAC02F7ADB2224EBAC04F36994D797E482
Authority key identifier: 2B:E0:E6:38:9F:AD:C8:0B:FE:86:22:5B:DF:09:12:B6:17:76:04:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc.cer
Subject info access:      rsync://rpki.co/repo/August/14/3231362e3134362e32392e302f32342d3234203d3e20323030383237.roa
Signing time:             Sat 08 Apr 2023 21:46:33 +0000
ROA not before:           Sat 08 Apr 2023 21:41:33 +0000
ROA not after:            Sat 06 Apr 2024 21:46:33 +0000
asID:                     200827
IP address blocks:        216.146.29.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:23:47:aa:c0:2f:7a:db:22:24:eb:ac:04:f3:69:94:d7:97:e4:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc
        Validity
            Not Before: Apr  8 21:41:33 2023 GMT
            Not After : Apr  6 21:46:33 2024 GMT
        Subject: CN=531CF68EFCB0AB7559D4CF4BE76BFE4AC29D971C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c2:7f:cb:9c:e9:77:48:e3:3e:9c:c0:73:33:
                    fe:b1:99:be:b1:a1:ee:04:a6:e2:27:cb:f9:3e:75:
                    f3:33:73:00:74:5f:cd:a1:b7:57:e9:f0:3a:83:b7:
                    44:99:ef:fc:12:8f:2d:d0:4e:df:95:0f:72:e3:32:
                    d1:60:db:4b:f6:a3:c6:cc:e9:12:e8:bf:eb:69:99:
                    e7:94:98:ff:4a:03:98:e5:01:43:98:08:72:38:32:
                    19:d9:34:57:80:78:7b:4c:f7:8c:71:e8:c0:ed:74:
                    b9:ee:6e:35:36:e7:09:41:63:47:99:28:c8:f4:ff:
                    bb:52:bb:a3:d8:e1:07:96:65:63:60:df:5b:27:f7:
                    11:49:b8:55:1e:19:63:60:6b:c7:91:78:61:a8:a7:
                    02:ab:dc:8a:1b:1e:22:98:b2:8d:c7:2d:db:4c:bb:
                    ae:70:31:6f:22:75:86:d6:61:d8:1b:65:ac:84:59:
                    c9:61:6d:d5:52:2e:5c:1e:40:cd:f8:20:66:8f:a8:
                    f4:7d:b6:64:65:b5:87:e1:57:46:59:9b:c8:e7:aa:
                    b2:09:f0:83:65:29:f7:c5:35:d3:2f:cd:1e:39:e7:
                    f6:92:5c:f5:1e:ff:46:be:96:51:32:17:cf:88:7b:
                    54:be:c0:79:9b:ca:72:2d:39:3e:22:67:f5:35:73:
                    c4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1C:F6:8E:FC:B0:AB:75:59:D4:CF:4B:E7:6B:FE:4A:C2:9D:97:1C
            X509v3 Authority Key Identifier:
                keyid:2B:E0:E6:38:9F:AD:C8:0B:FE:86:22:5B:DF:09:12:B6:17:76:04:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/14/2BE0E6389FADC80BFE86225BDF0912B6177604EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/14/3231362e3134362e32392e302f32342d3234203d3e20323030383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:d6:c6:d1:7a:4b:d3:f2:1b:f2:e6:82:6e:60:f1:3a:ba:07:
         e8:fe:19:d2:a4:41:5e:7c:c1:65:66:09:81:5b:6d:e2:06:f0:
         43:05:2c:10:aa:91:c9:72:44:b3:1e:1a:9f:9f:7c:fb:e2:c5:
         27:35:d1:1b:9c:62:f5:1a:f2:37:0e:f8:f7:03:e1:de:a5:0d:
         43:18:b2:9b:cc:0f:9c:0c:33:09:c8:0c:28:27:bf:05:85:89:
         c1:9a:aa:c0:f4:07:2c:d9:10:a2:ce:3a:49:23:33:6e:eb:c9:
         82:5b:c1:44:41:d4:4c:35:15:d9:08:40:46:c3:79:41:95:78:
         41:c2:a9:5c:9f:8d:ee:4c:71:2f:b5:5f:42:b0:2a:9f:01:19:
         1d:f8:d6:ec:0b:21:50:cd:e8:95:12:22:58:f8:e8:b3:3c:fb:
         71:12:aa:d0:ae:57:40:b9:bc:85:df:e3:b3:f5:f5:f9:bd:cd:
         da:cc:b3:14:a1:62:b1:d4:37:49:3a:e6:4b:36:4b:ac:b4:dc:
         d4:3c:2a:71:19:f4:e3:44:a0:3b:a9:7f:32:20:c1:a5:d8:f9:
         32:06:02:75:81:cb:5b:2d:b7:fd:b0:9e:c4:d1:1b:43:71:57:
         ad:6e:77:22:3f:99:1a:24:57:ae:2a:19:af:7e:99:95:26:91:
         5c:e5:f6:d1
-----BEGIN CERTIFICATE-----
MIIFXDCCBESgAwIBAgIUYCNHqsAvetsiJOusBPNplNeX5IIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWViZGE0NzkxOTIxZGVhNjZlYTg2Mzc0OWRkYWRmNGFl
NTUwMzM3YzBiZGNiMzQzZmMwHhcNMjMwNDA4MjE0MTMzWhcNMjQwNDA2MjE0NjMz
WjAzMTEwLwYDVQQDEyg1MzFDRjY4RUZDQjBBQjc1NTlENENGNEJFNzZCRkU0QUMy
OUQ5NzFDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cJ/y5zpd0jj
PpzAczP+sZm+saHuBKbiJ8v5PnXzM3MAdF/NobdX6fA6g7dEme/8Eo8t0E7flQ9y
4zLRYNtL9qPGzOkS6L/raZnnlJj/SgOY5QFDmAhyODIZ2TRXgHh7TPeMcejA7XS5
7m41NucJQWNHmSjI9P+7Uruj2OEHlmVjYN9bJ/cRSbhVHhljYGvHkXhhqKcCq9yK
Gx4imLKNxy3bTLuucDFvInWG1mHYG2WshFnJYW3VUi5cHkDN+CBmj6j0fbZkZbWH
4VdGWZvI56qyCfCDZSn3xTXTL80eOef2klz1Hv9GvpZRMhfPiHtUvsB5m8pyLTk+
Imf1NXPEgQIDAQABo4ICXDCCAlgwHQYDVR0OBBYEFFMc9o78sKt1WdTPS+dr/krC
nZccMB8GA1UdIwQYMBaAFCvg5jifrcgL/oYiW98JErYXdgTvMA4GA1UdDwEB/wQE
AwIHgDBcBgNVHR8EVTBTMFGgT6BNhktyc3luYzovL3Jwa2kuY28vcmVwby9BdWd1
c3QvMTQvMkJFMEU2Mzg5RkFEQzgwQkZFODYyMjVCREYwOTEyQjYxNzc2MDRFRi5j
cmwwgfMGCCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBr
aS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBh
LTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2Ut
MTM3MjI3ZTk3MWFjLzU0YzBhYmU4LTBhMDQtNDMxNi1hZmYyLTljZGZmMDUyMmZi
ZC9lZWJkYTQ3OTE5MjFkZWE2NmVhODYzNzQ5ZGRhZGY0YWU1NTAzMzdjMGJkY2Iz
NDNmYy5jZXIwdwYIKwYBBQUHAQsEazBpMGcGCCsGAQUFBzALhltyc3luYzovL3Jw
a2kuY28vcmVwby9BdWd1c3QvMTQvMzIzMTM2MmUzMTM0MzYyZTMyMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjMwMzAzODMyMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADYkh0wDQYJ
KoZIhvcNAQELBQADggEBAF/WxtF6S9PyG/Lmgm5g8Tq6B+j+GdKkQV58wWVmCYFb
beIG8EMFLBCqkclyRLMeGp+ffPvixSc10RucYvUa8jcO+PcD4d6lDUMYspvMD5wM
MwnIDCgnvwWFicGaqsD0ByzZEKLOOkkjM27ryYJbwURB1Ew1FdkIQEbDeUGVeEHC
qVyfje5McS+1X0KwKp8BGR341uwLIVDN6JUSIlj46LM8+3ESqtCuV0C5vIXf47P1
9fm9zdrMsxShYrHUN0k65ks2S6y03NQ8KnEZ9ONEoDupfzIgwaXY+TIGAnWBy1st
t/2wnsTRG0NxV61udyI/mRokV64qGa9+mZUmkVzl9tE=
-----END CERTIFICATE-----