Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/14/3231362e3134362e33302e302f32342d3234203d3e203539373838.roa
File:                     3231362e3134362e33302e302f32342d3234203d3e203539373838.roa (raw, json)
Hash identifier:          7NwXFf0G+hQ0+uT0fwDw4fjJXdVyNhDrkiCcEzedRRg=
Subject key identifier:   EB:C2:D8:1E:3B:FB:C6:A9:FD:49:8A:1E:E7:F9:D2:CB:31:5D:67:C1
Certificate issuer:       /CN=eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc
Certificate serial:       3F4E7E918C57CED1A5421589EEF8552FDDB0E3EC
Authority key identifier: 2B:E0:E6:38:9F:AD:C8:0B:FE:86:22:5B:DF:09:12:B6:17:76:04:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc.cer
Subject info access:      rsync://rpki.co/repo/August/14/3231362e3134362e33302e302f32342d3234203d3e203539373838.roa
Signing time:             Sat 08 Apr 2023 21:46:33 +0000
ROA not before:           Sat 08 Apr 2023 21:41:33 +0000
ROA not after:            Sat 06 Apr 2024 21:46:33 +0000
asID:                     59788
IP address blocks:        216.146.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4e:7e:91:8c:57:ce:d1:a5:42:15:89:ee:f8:55:2f:dd:b0:e3:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc
        Validity
            Not Before: Apr  8 21:41:33 2023 GMT
            Not After : Apr  6 21:46:33 2024 GMT
        Subject: CN=EBC2D81E3BFBC6A9FD498A1EE7F9D2CB315D67C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:98:11:97:c9:44:ab:aa:65:66:7a:d3:ba:eb:
                    95:df:94:94:5a:d2:e6:95:c0:5a:f8:12:c3:79:0f:
                    07:2b:2d:7f:93:9c:d2:5b:ce:7c:f2:2f:f1:30:bb:
                    27:50:fe:16:06:d6:00:0a:a8:0c:67:ce:93:1a:83:
                    85:f0:9f:80:b4:44:36:d2:d2:f6:88:64:bf:2e:8a:
                    6f:ae:41:fd:e0:6a:49:74:e4:0f:9c:28:59:2e:b3:
                    8d:87:ee:5c:d8:06:65:a2:76:5c:a7:fc:dd:18:91:
                    1f:ac:6b:da:48:38:5d:75:65:51:49:01:25:28:92:
                    e5:55:b9:44:dc:9b:ef:69:82:15:20:89:ee:9a:7b:
                    28:82:d3:91:d1:8c:c0:0e:f5:dd:74:6e:41:70:c0:
                    12:48:4b:d8:b8:83:87:b0:00:bd:ee:be:6f:b9:eb:
                    c0:56:34:09:37:1c:9d:77:30:ab:79:87:8f:9f:b8:
                    da:b4:06:80:ec:43:02:c8:37:df:ef:e0:50:c9:cc:
                    32:a0:f5:c1:b5:55:9b:05:3a:59:31:eb:4e:f5:da:
                    9f:e1:ac:19:b8:dc:ef:48:46:86:1c:35:98:e0:a6:
                    22:43:c3:32:0e:b7:f9:ee:80:2c:e0:c6:78:3b:05:
                    4a:59:7e:ac:93:81:bc:82:df:ad:52:64:f5:a5:69:
                    d5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C2:D8:1E:3B:FB:C6:A9:FD:49:8A:1E:E7:F9:D2:CB:31:5D:67:C1
            X509v3 Authority Key Identifier:
                keyid:2B:E0:E6:38:9F:AD:C8:0B:FE:86:22:5B:DF:09:12:B6:17:76:04:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/14/2BE0E6389FADC80BFE86225BDF0912B6177604EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/14/3231362e3134362e33302e302f32342d3234203d3e203539373838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:e5:8b:d9:15:8b:9e:2f:64:e9:ff:f0:57:d5:7d:23:b7:95:
         f3:df:f3:1b:43:77:c0:16:0c:b1:87:f0:da:86:53:05:98:26:
         95:39:2e:62:0e:0b:66:97:15:27:8f:06:c2:0b:ce:08:ab:b4:
         6c:e2:d2:ac:6a:1a:90:61:2d:70:90:7f:4b:d2:c4:e5:5a:6c:
         92:89:90:8e:39:f9:a1:c9:03:91:e5:da:c4:23:df:97:7b:8d:
         48:70:23:da:17:86:8b:83:dc:3b:c1:c3:c5:68:fa:a4:27:01:
         c7:3e:b1:ac:5b:d6:1b:7d:0f:aa:0c:2e:32:79:d4:65:e2:04:
         c5:1e:1b:a2:01:cb:85:b6:3e:fc:f7:b3:34:0d:c6:83:a4:9c:
         1a:13:4c:10:04:83:8e:ed:47:e1:2e:c5:b4:12:05:20:7c:3b:
         ce:76:c9:2b:e0:dd:12:d2:de:09:19:28:52:2b:e3:fe:78:35:
         85:56:89:06:3b:b5:bc:a7:a5:d8:d4:6e:15:84:c2:71:c1:7d:
         fd:06:64:0d:30:83:a9:31:78:ac:5c:80:33:2f:e6:3f:4a:df:
         91:10:97:b2:ab:a2:60:ee:96:98:00:2f:e2:a7:8a:ad:dc:c2:
         e2:21:06:a6:9a:f0:22:71:0a:32:23:df:fb:93:6b:51:ec:57:
         7d:c2:fa:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:45:23 2023 by rpki-client on console-ams.rpki-client.org