Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/32332e3133302e3133382e302f32342d3234203d3e203532323130.roa
File:                     32332e3133302e3133382e302f32342d3234203d3e203532323130.roa (raw, json)
Hash identifier:          P9+KoR/tLmEJnb9hm1sXzIqhi8AadR9q55FCK2Nz7MM=
Subject key identifier:   85:D7:38:EF:2C:61:62:20:C9:9A:A9:85:13:FA:E6:EC:9F:1D:36:67
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       507DCD612B1E600FCE510E755912D3AD23013548
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/32332e3133302e3133382e302f32342d3234203d3e203532323130.roa
Signing time:             Fri 09 Dec 2022 16:07:19 +0000
ROA not before:           Fri 09 Dec 2022 16:02:19 +0000
ROA not after:            Fri 08 Dec 2023 16:07:19 +0000
asID:                     52210
IP address blocks:        23.130.138.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:7d:cd:61:2b:1e:60:0f:ce:51:0e:75:59:12:d3:ad:23:01:35:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Dec  9 16:02:19 2022 GMT
            Not After : Dec  8 16:07:19 2023 GMT
        Subject: CN=85D738EF2C616220C99AA98513FAE6EC9F1D3667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:64:64:f4:29:17:0b:fa:3f:4f:39:37:2e:
                    83:ea:ff:9a:32:95:8c:14:07:73:c9:6a:4e:12:ee:
                    b0:13:bf:0c:86:e6:b6:31:d8:6c:5f:31:04:da:2a:
                    33:cd:e2:02:8f:17:75:8c:a9:ac:33:c9:f1:c3:ab:
                    f9:3c:f3:c3:2c:1e:5c:1c:8f:35:f6:0b:a3:3f:1d:
                    c1:7a:59:c4:b5:42:95:5c:7c:23:da:46:ba:2e:9c:
                    90:4e:f0:50:0d:a5:4b:a4:e6:24:7a:d7:b6:55:eb:
                    ec:21:f0:6e:c9:47:19:e9:68:3d:b4:85:85:09:64:
                    47:e6:89:cb:73:97:e6:86:3d:69:29:16:68:b7:b9:
                    5b:67:bf:84:43:21:55:24:ee:75:82:a5:81:4e:83:
                    5a:fe:a6:db:1b:de:42:2a:4f:94:07:cb:b4:fe:49:
                    c1:82:8c:a7:2d:d4:9f:1e:6f:8d:ca:75:4c:1d:66:
                    f8:40:6e:12:ad:10:96:f6:ab:59:f9:1d:8d:82:32:
                    77:0b:75:3c:05:db:ae:8b:34:e6:ca:f2:66:f3:65:
                    64:eb:db:c4:78:43:f1:c3:16:f2:92:bd:3a:0c:0b:
                    02:12:7e:f4:50:8a:87:1d:b1:16:63:a3:0d:8f:34:
                    82:e0:11:19:a8:c7:3a:4b:c2:b3:33:12:3a:98:7d:
                    df:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D7:38:EF:2C:61:62:20:C9:9A:A9:85:13:FA:E6:EC:9F:1D:36:67
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/32332e3133302e3133382e302f32342d3234203d3e203532323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:75:90:75:76:43:85:5f:b9:5d:1a:56:99:36:f1:14:45:d7:
         fe:ae:7a:f5:2f:48:3d:a8:2a:68:39:34:97:bb:25:18:64:c6:
         5d:ac:e5:f9:e1:33:5e:65:ae:a7:d5:70:29:f9:43:3f:02:70:
         e1:78:bd:74:25:de:1c:c5:72:8a:d9:f1:0d:d7:89:17:2e:d0:
         2a:9f:28:71:da:cc:16:21:68:11:cf:55:4a:59:0c:e7:bb:c3:
         d6:d3:93:5e:c1:de:c8:1f:86:01:9c:4d:57:c3:06:97:1a:96:
         f8:b0:a2:b9:70:22:de:5d:9c:b5:52:97:c9:f2:d9:09:e4:29:
         81:21:55:85:57:ec:9e:f4:41:6f:fb:a2:c6:68:8f:af:ea:7c:
         af:4b:9d:50:9f:98:ea:ca:b8:a7:a5:a9:4c:b9:7f:a0:c6:f9:
         5e:1e:e8:cf:a2:20:2f:5d:d3:69:b9:ab:52:a4:86:a3:57:8e:
         77:d0:1d:d7:06:92:c4:01:b2:1a:2a:4d:ec:36:35:e7:78:ad:
         12:3a:41:de:84:49:f5:6e:fc:29:dc:f8:1e:2d:f5:62:d8:7f:
         bf:1c:6e:31:90:72:4e:f3:32:6b:35:0e:fe:5a:ce:79:31:fc:
         e0:e7:36:d5:20:fd:ee:38:4b:9e:37:79:36:92:c3:35:2c:b5:
         70:80:da:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----