Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/32332e3134322e32342e302f32322d3234203d3e20323035363633.roa
File:                     32332e3134322e32342e302f32322d3234203d3e20323035363633.roa (raw, json)
Hash identifier:          GOYf1TEzWXIte6JGxPq93VS6+hTlohK38ciy9qoHEVs=
Subject key identifier:   0D:D0:24:21:8C:A4:A0:EE:A9:53:F0:C7:81:34:B8:76:7B:04:A5:86
Certificate issuer:       /CN=6916ebca58802cf3a872f4c02bed8746ce74cb1fabf550a95f
Certificate serial:       5C8B1BF53CB57998106E62FC48C9F4F0AD6E8298
Authority key identifier: 67:6E:E1:F9:D8:FD:ED:22:40:A2:60:E7:25:7B:A2:A8:CD:20:D7:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca58802cf3a872f4c02bed8746ce74cb1fabf550a95f.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/32332e3134322e32342e302f32322d3234203d3e20323035363633.roa
Signing time:             Fri 23 Dec 2022 00:07:51 +0000
ROA not before:           Fri 23 Dec 2022 00:02:51 +0000
ROA not after:            Fri 22 Dec 2023 00:07:51 +0000
asID:                     205663
IP address blocks:        23.142.24.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8b:1b:f5:3c:b5:79:98:10:6e:62:fc:48:c9:f4:f0:ad:6e:82:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca58802cf3a872f4c02bed8746ce74cb1fabf550a95f
        Validity
            Not Before: Dec 23 00:02:51 2022 GMT
            Not After : Dec 22 00:07:51 2023 GMT
        Subject: CN=0DD024218CA4A0EEA953F0C78134B8767B04A586
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:28:82:f8:88:87:57:46:32:10:fd:43:9a:52:
                    ef:58:59:90:4f:ad:75:b3:09:ad:df:43:42:d0:f0:
                    d3:15:ac:73:9b:d6:f1:83:ba:cd:66:3e:09:54:5b:
                    5b:e2:fa:09:92:ea:44:9a:6d:7b:b2:24:09:3a:3c:
                    96:da:8b:b6:61:66:2d:b8:2b:6c:90:db:38:50:32:
                    ba:94:51:df:40:6e:3c:ef:a5:10:d5:13:ad:b0:62:
                    1d:ab:ec:d0:fa:ba:3f:b2:ba:d6:b5:69:1a:b2:e5:
                    a0:d4:16:04:e8:6c:f9:59:df:b4:ff:dd:86:93:96:
                    e6:d9:db:55:08:96:d1:07:e5:b1:de:d8:6f:b6:1a:
                    50:5d:ee:19:a9:0b:fd:1b:8e:88:27:dc:c1:17:f9:
                    8a:b8:38:a7:2c:09:ae:48:78:d3:63:41:21:97:af:
                    4d:98:6e:42:e5:98:cf:1b:36:a6:bd:b5:aa:88:aa:
                    2a:38:68:40:ae:ea:b2:6b:af:b7:54:9a:fc:59:02:
                    97:a0:67:fc:53:37:6b:c7:02:26:81:59:df:ad:f5:
                    4c:2d:9e:d6:55:03:93:34:c3:4c:85:25:52:60:bf:
                    7a:fc:d6:55:96:04:a4:ce:97:25:5c:e3:c2:d2:09:
                    c2:7e:5d:79:db:40:d1:bf:bc:a6:0b:d3:9a:ce:0c:
                    82:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D0:24:21:8C:A4:A0:EE:A9:53:F0:C7:81:34:B8:76:7B:04:A5:86
            X509v3 Authority Key Identifier:
                keyid:67:6E:E1:F9:D8:FD:ED:22:40:A2:60:E7:25:7B:A2:A8:CD:20:D7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/676EE1F9D8FDED2240A260E7257BA2A8CD20D787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca58802cf3a872f4c02bed8746ce74cb1fabf550a95f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/32332e3134322e32342e302f32322d3234203d3e20323035363633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:29:3d:bc:4e:de:f8:ac:63:6a:a6:65:38:2b:2f:d2:38:e7:
         83:ed:30:dc:71:28:d5:01:9b:1f:38:5d:77:f7:86:a8:4b:93:
         25:82:12:43:97:54:bc:d6:91:2e:a6:03:be:f7:0b:d9:75:e5:
         43:fb:ec:48:ea:eb:09:54:36:c1:9d:a7:d5:c3:c2:6a:db:b4:
         68:16:d6:ca:a7:13:28:8d:d6:c4:81:46:39:5e:85:1a:5d:f5:
         f7:3f:0a:4f:f8:5a:61:74:c5:e1:e7:b0:42:d5:49:ab:b5:bc:
         17:8c:08:2f:b0:32:e8:d9:49:10:de:aa:04:2d:b4:ed:d3:8f:
         20:f4:19:a9:25:16:d7:cc:b8:25:54:3a:dc:9c:10:28:d0:f9:
         4e:7a:c7:ae:28:7d:53:46:2a:3d:53:f6:dc:f2:a4:17:f3:30:
         42:f7:cc:31:6a:97:dc:48:69:a2:8e:79:48:a3:31:93:54:91:
         38:f1:1e:21:ee:2b:de:b7:4c:f4:fa:ea:2f:f0:35:b8:59:a1:
         2d:20:c8:7a:45:fc:2e:e1:3f:43:5c:4f:03:6b:ff:d6:c5:7a:
         ce:63:17:45:e4:18:47:df:a6:3d:d2:95:6d:d6:69:d3:89:54:
         2f:c7:5f:d5:2d:74:77:91:fb:4f:13:7f:92:40:df:82:ab:c2:
         9b:96:13:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----