Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/32332e3139302e3231362e302f32342d3234203d3e203430343139.roa
File:                     32332e3139302e3231362e302f32342d3234203d3e203430343139.roa (raw, json)
Hash identifier:          dXY4TWOC+QqZB1M44cyd4zOABU2oWWXn9kyKMpoyvXQ=
Subject key identifier:   C8:CA:EB:1C:03:D1:9D:A5:7E:DB:D2:7A:70:6E:27:28:EA:18:1B:62
Certificate issuer:       /CN=8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2
Certificate serial:       01D39A53769E8B0CF90EAC4BE063CABCCB99F747
Authority key identifier: A2:B4:E9:D0:61:6C:B6:17:29:62:69:2A:77:4A:39:50:5E:12:79:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/32332e3139302e3231362e302f32342d3234203d3e203430343139.roa
Signing time:             Mon 26 Oct 2026 19:53:18 +0000
ROA not before:           Mon 26 Oct 2026 19:48:18 +0000
ROA not after:            Mon 25 Oct 2027 19:53:18 +0000
asID:                     40419
IP address blocks:        23.190.216.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d3:9a:53:76:9e:8b:0c:f9:0e:ac:4b:e0:63:ca:bc:cb:99:f7:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2
        Validity
            Not Before: Oct 26 19:48:18 2026 GMT
            Not After : Oct 25 19:53:18 2027 GMT
        Subject: CN=C8CAEB1C03D19DA57EDBD27A706E2728EA181B62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:77:9b:d8:93:6d:e2:46:8a:ec:d2:8a:f6:1d:
                    9e:5f:48:4a:a1:e0:a5:91:09:25:05:09:a2:38:ba:
                    65:a9:3c:b9:dd:ae:f5:0a:84:d5:6c:4d:09:bd:9f:
                    8b:18:56:f3:4e:8e:ed:f3:66:d6:59:5b:7e:ae:b6:
                    ce:b1:34:f2:1a:dd:ec:0b:58:28:e4:32:66:a7:24:
                    e7:c2:25:26:3b:77:6a:73:06:0f:68:d6:6e:c5:d5:
                    e7:91:b6:b6:e7:5c:e0:a7:1b:1f:51:dd:84:a0:f3:
                    d3:34:49:af:5d:4d:b2:b4:81:29:ba:a9:2c:06:b4:
                    0a:b6:65:d1:80:22:56:fb:d3:5b:82:e9:22:ca:03:
                    d2:46:97:47:ad:98:6d:5c:6e:4a:b9:72:5d:dd:a4:
                    28:20:11:88:87:8a:0f:e2:b0:d1:40:dd:6f:e6:bf:
                    6e:7a:f3:a8:b5:af:95:c3:00:43:f5:8f:5f:64:ed:
                    d3:3e:40:64:8e:44:11:7c:5a:6c:14:ad:a7:7c:fe:
                    43:ce:45:03:2b:a5:31:9e:60:cf:89:fd:fe:c2:5d:
                    0d:f1:32:ac:bf:be:dc:16:b5:8b:d8:a7:d3:d8:06:
                    59:99:71:27:2c:3f:16:00:7a:b9:d0:07:cb:45:78:
                    94:dc:00:e8:45:1d:df:ea:f9:8b:b5:f5:19:d9:96:
                    4e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CA:EB:1C:03:D1:9D:A5:7E:DB:D2:7A:70:6E:27:28:EA:18:1B:62
            X509v3 Authority Key Identifier:
                keyid:A2:B4:E9:D0:61:6C:B6:17:29:62:69:2A:77:4A:39:50:5E:12:79:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/A2B4E9D0616CB6172962692A774A39505E127954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/3ce84811-817f-451f-816f-42649a6940cc/8d36ad9b3d8d460800b3dd50c620b1d43ecf8c7dd01aeb0cc2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/bf4c9c8b5d0040b9808d0a991d2c3dc7/1/32332e3139302e3231362e302f32342d3234203d3e203430343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.190.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:99:c9:2a:52:54:ba:19:ee:58:32:c1:3c:01:fc:ac:43:3b:
         6e:76:d6:1e:e1:04:50:e5:43:0a:63:b0:f1:e4:74:60:bd:11:
         9f:ec:55:f2:44:6c:32:0b:ca:be:65:09:cd:c3:94:b0:d7:2a:
         4f:6d:19:25:34:fe:04:2b:0e:c6:c9:50:94:70:7e:7c:cf:36:
         96:2f:37:f7:87:05:c1:01:1d:57:80:b5:5d:a9:4d:f7:ac:e3:
         65:52:76:30:18:cc:ba:d0:d0:a4:52:39:51:49:28:76:d4:cf:
         a1:dc:0c:d9:b6:e7:81:9c:7a:ea:0b:9f:db:e8:db:64:af:14:
         c9:bd:8c:57:0c:8a:72:2d:28:1b:0a:d9:57:c0:39:d0:9c:7c:
         85:83:5b:9b:76:c5:e9:87:38:b4:56:f6:14:09:c2:8f:e0:76:
         cf:76:a0:8a:38:11:b6:97:3a:03:4d:3a:28:3f:3e:2e:df:75:
         10:d1:c3:88:d4:aa:46:ad:d1:3a:35:65:09:c9:04:df:d1:ba:
         1b:0b:f4:86:8f:2c:07:12:e2:35:77:89:a0:77:07:67:ee:65:
         0e:fe:fd:86:06:0a:e2:a5:85:81:d0:0c:00:20:99:f7:4f:87:
         13:fe:a2:5f:3a:f8:f6:fe:a5:ea:ae:8c:78:07:03:36:59:92:
         02:f0:81:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----