Route Origin Authorization

$ rpki-client -vvf rpki.co/repo/August/14/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
File:                     3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa (raw, json)
Hash identifier:          WT+RV4T5Ln/Uymh1A3vjJAzg1rBX9HamKJkzaYUtCsE=
Subject key identifier:   3A:C8:48:7E:3B:A9:D7:A4:6B:7F:40:E2:EC:D4:69:F5:63:6F:03:D9
Certificate issuer:       /CN=eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc
Certificate serial:       4C142E3917EB153763049D628076444C1D786636
Authority key identifier: 2B:E0:E6:38:9F:AD:C8:0B:FE:86:22:5B:DF:09:12:B6:17:76:04:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc.cer
Subject info access:      rsync://rpki.co/repo/August/14/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa
Signing time:             Sat 08 Apr 2023 21:46:33 +0000
ROA not before:           Sat 08 Apr 2023 21:41:33 +0000
ROA not after:            Sat 06 Apr 2024 21:46:33 +0000
asID:                     207731
IP address blocks:        216.146.31.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:14:2e:39:17:eb:15:37:63:04:9d:62:80:76:44:4c:1d:78:66:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc
        Validity
            Not Before: Apr  8 21:41:33 2023 GMT
            Not After : Apr  6 21:46:33 2024 GMT
        Subject: CN=3AC8487E3BA9D7A46B7F40E2ECD469F5636F03D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:02:e5:b5:ec:03:5e:24:ca:07:52:66:77:ca:
                    66:63:7c:8f:bb:14:44:5a:72:d2:67:ce:81:3f:fd:
                    2f:b9:b0:f9:76:a7:49:99:29:6c:ce:b2:ac:49:1a:
                    d9:d8:c2:ec:9d:19:c2:f5:59:95:88:8b:7d:3a:cf:
                    d9:9e:38:96:9f:9e:79:8f:22:7d:0d:24:52:fc:0d:
                    1c:75:8d:47:67:6d:c2:11:d8:8b:93:97:b1:6e:40:
                    f0:19:ec:c6:4d:21:a7:86:ce:1c:c2:b6:ab:2a:2f:
                    40:39:e0:3b:2d:6a:43:50:75:24:04:07:d9:6e:ea:
                    1a:26:66:e8:df:91:ba:a1:85:5e:b9:a0:fb:04:70:
                    2d:49:13:d9:e2:61:94:53:7b:ca:86:32:b3:43:f4:
                    a7:75:fc:d3:0e:04:2b:64:a6:2c:65:e8:1a:2b:9b:
                    28:a4:44:df:3a:45:89:ba:f2:34:d7:28:a1:be:4b:
                    b8:f1:d4:b2:dc:a3:52:63:e3:be:ed:04:45:0a:dd:
                    3a:db:65:e2:3e:b1:c1:1d:11:0f:c9:ec:7d:2a:d2:
                    c9:60:df:bf:bc:32:a7:ba:83:70:1c:fc:90:8c:98:
                    d3:cc:8d:d6:b1:f1:14:87:52:e3:b6:fb:1c:30:c0:
                    f5:8c:90:5c:bb:33:e5:49:8f:fc:03:c8:c1:c0:62:
                    3f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C8:48:7E:3B:A9:D7:A4:6B:7F:40:E2:EC:D4:69:F5:63:6F:03:D9
            X509v3 Authority Key Identifier:
                keyid:2B:E0:E6:38:9F:AD:C8:0B:FE:86:22:5B:DF:09:12:B6:17:76:04:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.co/repo/August/14/2BE0E6389FADC80BFE86225BDF0912B6177604EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/54c0abe8-0a04-4316-aff2-9cdff0522fbd/eebda4791921dea66ea863749ddadf4ae550337c0bdcb343fc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.co/repo/August/14/3231362e3134362e33312e302f32342d3234203d3e20323037373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:fe:d8:32:c0:69:c0:a7:7b:5f:30:8f:6d:13:b5:6c:06:d3:
         05:b1:93:9b:0c:0e:cf:1f:ba:3c:c1:59:72:e3:ac:59:22:6f:
         d2:52:e3:75:98:b3:09:60:c9:96:96:a0:40:b8:41:fa:54:57:
         5f:c6:6f:50:7d:f2:05:37:14:f2:be:22:4a:c1:18:f7:fd:b8:
         d2:a1:8b:28:26:fc:eb:ff:a5:20:b7:b3:f7:ed:13:3d:13:e9:
         ff:46:59:f6:97:3d:a6:a3:34:53:00:08:8c:22:e8:cb:7b:d9:
         20:ed:8d:4f:78:3d:c6:3d:f4:80:de:fe:85:39:a3:77:b5:2e:
         34:76:c6:5f:16:fb:fe:29:21:00:d3:00:23:c8:ff:f8:04:df:
         16:6e:85:8d:8d:dd:f9:9a:9f:71:dc:06:7d:e6:ef:f6:75:b6:
         96:5e:c4:bf:fe:28:b4:10:c9:06:8d:a2:03:7b:30:0b:e8:3b:
         4b:44:19:2b:6f:9c:fa:8b:46:45:e9:15:ab:61:be:29:46:5b:
         2f:38:50:a3:3b:ce:6d:6b:6a:33:b4:e7:97:b2:d0:38:45:88:
         ec:0c:29:b0:0f:c6:a6:1a:4d:12:c2:aa:db:2e:31:41:a5:0e:
         02:8e:50:38:c4:06:f2:33:e2:d6:99:66:fc:96:93:9f:41:d5:
         ff:73:88:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----