Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3137322e39392e3233322e302f32342d3234203d3e20333938333935.roa
File:                     3137322e39392e3233322e302f32342d3234203d3e20333938333935.roa (raw, json)
Hash identifier:          Hm3CnUO8z3uEmmqxnNgPFgDHKbcbYzMgWF3PiO3+ZKA=
Subject key identifier:   39:5F:43:60:9E:E3:5E:FF:DB:EF:6A:97:69:99:C6:66:48:D2:BF:27
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       397430F49E904F603D10E81C6B4A6948F52A8898
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3137322e39392e3233322e302f32342d3234203d3e20333938333935.roa
Signing time:             Mon 20 Mar 2023 13:41:37 +0000
ROA not before:           Mon 20 Mar 2023 13:36:37 +0000
ROA not after:            Mon 18 Mar 2024 13:41:37 +0000
asID:                     398395
IP address blocks:        172.99.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:74:30:f4:9e:90:4f:60:3d:10:e8:1c:6b:4a:69:48:f5:2a:88:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Mar 20 13:36:37 2023 GMT
            Not After : Mar 18 13:41:37 2024 GMT
        Subject: CN=395F43609EE35EFFDBEF6A976999C66648D2BF27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:22:18:94:59:87:76:29:56:83:88:fb:3e:da:
                    84:95:7f:6a:32:fb:2b:99:c5:e7:59:53:3f:78:bf:
                    14:7f:f9:16:5d:ee:81:37:7d:7a:26:30:4c:61:55:
                    a9:1b:4f:5d:28:ee:de:13:c5:e9:aa:ad:59:a4:d1:
                    03:92:40:d2:b4:1e:29:09:31:53:90:8b:10:d8:0d:
                    1f:b4:2c:e8:18:31:e2:b0:8a:38:d4:e7:fe:b7:32:
                    80:1d:1a:70:93:0f:79:f0:88:b8:72:d3:96:bd:df:
                    97:af:76:ad:9e:ba:69:5b:7f:fb:e4:65:ef:3b:8a:
                    f8:4a:4f:c3:6e:1e:79:a9:de:87:34:6a:93:d6:c7:
                    4c:3e:f4:5a:fa:1b:2f:bb:51:36:96:4e:6d:31:9e:
                    4b:a8:75:47:81:d5:72:6f:4b:6b:b9:41:27:99:d9:
                    aa:50:45:97:da:88:84:92:2f:56:83:ec:1a:58:5a:
                    96:0c:a0:36:87:b1:de:f7:e1:51:7f:3a:02:d3:e3:
                    3b:61:78:45:4c:ad:9d:b1:0a:f6:c7:54:d1:59:80:
                    6e:7c:58:2e:8c:4b:78:8b:91:7a:82:26:0e:11:53:
                    1c:c5:4b:13:50:02:e7:c0:6f:f6:ac:c0:3e:90:13:
                    0c:47:1c:a7:f9:c4:a6:f9:0a:e1:fa:33:12:62:22:
                    62:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:5F:43:60:9E:E3:5E:FF:DB:EF:6A:97:69:99:C6:66:48:D2:BF:27
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/3137322e39392e3233322e302f32342d3234203d3e20333938333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:32:b3:ac:ac:2e:d3:32:be:1f:7d:51:ea:30:57:c0:85:85:
         74:fe:06:36:67:7f:b5:9e:d1:06:58:0d:f0:c1:8a:01:b6:93:
         a1:c7:9c:83:8f:b5:18:df:54:16:a3:72:f2:1f:54:76:cf:62:
         4b:30:e6:d3:eb:0d:5f:64:92:24:d4:5b:c9:b5:0b:b8:38:b5:
         c3:58:d0:78:17:51:eb:d5:6f:5a:5e:8e:cd:17:1f:7c:2b:a7:
         dd:59:b1:e1:d3:87:af:b4:64:72:a2:07:00:14:89:3e:37:38:
         8e:69:02:b7:18:01:e3:21:99:57:59:fa:b8:ad:22:37:ad:1c:
         8f:6d:ba:f4:6b:ac:3b:af:ba:a6:b0:70:28:20:78:75:42:3a:
         f5:df:27:c2:fd:a1:2b:87:a1:c7:3d:01:a0:c8:d5:24:e6:cc:
         31:71:63:3c:6d:31:f5:4a:05:4d:7c:3b:91:13:be:30:2f:2b:
         83:eb:31:11:ae:79:5a:0a:16:75:ea:0c:fe:fc:a0:fd:f3:13:
         fe:0d:04:b7:6f:8e:66:03:23:1b:02:db:da:33:61:06:c9:15:
         3f:51:e6:ab:25:1b:39:24:82:c5:71:a3:f9:4d:65:3b:f4:57:
         f4:b2:6d:7f:e2:fb:9b:1e:e6:63:01:a1:1a:96:b2:dc:ec:0d:
         f6:d8:07:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----