Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/32332e3133302e3133372e302f32342d3234203d3e20323132393334.roa
File:                     32332e3133302e3133372e302f32342d3234203d3e20323132393334.roa (raw, json)
Hash identifier:          IDQu1+CDRCmBKnJYfcXPwuM0sBz8jQQCsp57YmwQq+M=
Subject key identifier:   36:3A:0E:39:CB:07:36:66:0C:D6:26:81:2D:8D:C3:7F:52:B5:43:9B
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       1B3C8853307805976F540D39BB7EA4C65E8451D6
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/32332e3133302e3133372e302f32342d3234203d3e20323132393334.roa
Signing time:             Fri 09 Dec 2022 16:06:45 +0000
ROA not before:           Fri 09 Dec 2022 16:01:45 +0000
ROA not after:            Fri 08 Dec 2023 16:06:45 +0000
asID:                     212934
IP address blocks:        23.130.137.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3c:88:53:30:78:05:97:6f:54:0d:39:bb:7e:a4:c6:5e:84:51:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec  9 16:01:45 2022 GMT
            Not After : Dec  8 16:06:45 2023 GMT
        Subject: CN=363A0E39CB0736660CD626812D8DC37F52B5439B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e9:e7:2c:5a:cc:ec:42:92:31:95:cd:95:ee:
                    f1:1f:21:26:38:53:0a:96:b8:62:46:8a:1c:c2:35:
                    26:e8:6f:b1:18:64:3e:b6:78:ed:a9:2f:01:de:62:
                    2a:bc:62:ae:16:02:00:4b:46:9f:5c:f3:40:3f:d5:
                    5c:63:70:74:2a:67:03:0c:b2:51:e8:56:38:a3:fe:
                    b9:37:0e:6a:45:fe:cd:d9:22:67:5e:d9:28:44:33:
                    bc:70:43:a1:17:01:1f:28:e2:c1:1d:d7:96:60:78:
                    3c:d3:bd:d9:15:45:9b:4a:12:33:08:52:c5:cb:0d:
                    cf:b4:f4:8b:b7:97:ff:fc:18:4c:9b:e0:59:93:fc:
                    1a:3d:73:a1:e1:9c:d4:43:77:20:9d:98:bb:ec:b9:
                    f6:ab:30:83:78:dc:29:a3:67:d1:2a:c3:61:09:77:
                    0d:35:f7:08:0c:97:bd:a5:24:49:25:b2:ba:73:ab:
                    4e:25:26:0c:4a:b0:2e:a4:04:7d:3b:3b:69:5c:52:
                    5e:0b:3d:2b:a0:2f:20:c3:be:33:fe:fb:6b:3b:cb:
                    ac:5a:f1:5c:4f:71:7c:fc:29:5e:31:fe:61:d5:b1:
                    3a:c1:9e:ba:69:90:5d:03:42:86:dc:a9:8e:8f:66:
                    ca:e7:5f:0a:a0:95:8a:4b:95:ca:12:0e:7b:97:1e:
                    93:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:3A:0E:39:CB:07:36:66:0C:D6:26:81:2D:8D:C3:7F:52:B5:43:9B
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/32332e3133302e3133372e302f32342d3234203d3e20323132393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:57:e0:55:fa:6f:0a:9d:37:7d:d6:36:22:c7:a2:10:c1:65:
         b9:21:35:50:2f:8f:07:48:36:1b:2b:c8:2a:f6:28:61:52:76:
         a0:5f:f8:29:c9:18:e4:2b:5d:03:f2:d6:96:be:8e:ba:4a:6f:
         12:5c:78:91:66:24:99:58:59:21:4d:e8:8a:81:ce:f7:36:ea:
         e5:5e:ea:e4:42:16:1b:fe:33:46:af:55:9f:ae:de:a6:17:b6:
         14:38:55:61:fd:bc:92:e9:e4:8b:8b:18:f8:6e:76:c3:a8:82:
         9f:b0:a6:f8:e3:a5:13:b5:db:18:b4:20:31:a7:72:09:53:b1:
         d5:49:be:91:04:fe:7f:22:90:8e:95:35:f5:38:d3:1f:74:04:
         25:a3:3d:b8:e5:98:19:8a:69:6c:a6:03:e4:f6:fb:ef:40:8a:
         1d:58:fc:41:5c:8a:d0:9c:38:e1:95:dc:2d:57:86:b9:d9:8a:
         1c:f3:d6:cd:7b:f7:cb:92:53:24:4b:1f:fa:5c:a4:84:7c:14:
         9b:5c:a3:fd:f6:4c:b7:f6:35:c3:e4:6b:ca:81:92:c3:5a:fd:
         59:07:23:d0:95:e1:75:9e:9b:77:59:83:d6:8f:e0:c7:da:b9:
         f9:17:d3:c5:ab:83:9f:66:80:25:cc:fe:07:d0:fe:17:01:7b:
         d9:65:f7:de
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUGzyIUzB4BZdvVA05u36kxl6EUdYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2FmYWYxYzFiNzhmNTcxY2Y5MmYyOTY5NTA5ZmZkZWZj
ZmZmNDQ5MzZkODczYmJkYTUwHhcNMjIxMjA5MTYwMTQ1WhcNMjMxMjA4MTYwNjQ1
WjAzMTEwLwYDVQQDEygzNjNBMEUzOUNCMDczNjY2MENENjI2ODEyRDhEQzM3RjUy
QjU0MzlCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwennLFrM7EKS
MZXNle7xHyEmOFMKlrhiRoocwjUm6G+xGGQ+tnjtqS8B3mIqvGKuFgIAS0afXPNA
P9VcY3B0KmcDDLJR6FY4o/65Nw5qRf7N2SJnXtkoRDO8cEOhFwEfKOLBHdeWYHg8
073ZFUWbShIzCFLFyw3PtPSLt5f//BhMm+BZk/waPXOh4ZzUQ3cgnZi77Ln2qzCD
eNwpo2fRKsNhCXcNNfcIDJe9pSRJJbK6c6tOJSYMSrAupAR9OztpXFJeCz0roC8g
w74z/vtrO8usWvFcT3F8/CleMf5h1bE6wZ66aZBdA0KG3KmOj2bK518KoJWKS5XK
Eg57lx6TKwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFDY6DjnLBzZmDNYmgS2Nw39S
tUObMB8GA1UdIwQYMBaAFH6b12PWGJJO7yk4woPME16QCDhTMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODJkNWRlNDEwMTg0ZjdhMjhhY2YxMjFmLzAv
N0U5QkQ3NjNENjE4OTI0RUVGMjkzOEMyODNDQzEzNUU5MDA4Mzg1My5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYzZjVlZTcxLTMyYmMtNDRlNC1hMWNkLTEyMjZlYTNjNDc5Ny83YWZh
ZjFjMWI3OGY1NzFjZjkyZjI5Njk1MDlmZmRlZmNmZmY0NDkzNmQ4NzNiYmRhNS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgyZDVkZTQxMDE4NGY3
YTI4YWNmMTIxZi8wLzMyMzMyZTMxMzMzMDJlMzEzMzM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTMyMzkzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4KJMA0GCSqGSIb3DQEB
CwUAA4IBAQAuV+BV+m8KnTd91jYix6IQwWW5ITVQL48HSDYbK8gq9ihhUnagX/gp
yRjkK10D8taWvo66Sm8SXHiRZiSZWFkhTeiKgc73NurlXurkQhYb/jNGr1Wfrt6m
F7YUOFVh/byS6eSLixj4bnbDqIKfsKb446UTtdsYtCAxp3IJU7HVSb6RBP5/IpCO
lTX1ONMfdAQloz245ZgZimlspgPk9vvvQIodWPxBXIrQnDjhldwtV4a52Yoc89bN
e/fLklMkSx/6XKSEfBSbXKP99ky39jXD5GvKgZLDWv1ZByPQleF1npt3WYPWj+DH
2rn5F9PFq4OfZoAlzP4H0P4XAXvZZffe
-----END CERTIFICATE-----