Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/32332e3133302e3133382e3234302f32392d3239203d3e20393234.roa
File:                     32332e3133302e3133382e3234302f32392d3239203d3e20393234.roa (raw, json)
Hash identifier:          HMZXSGSRpm/0R6yidDtdi7c87jICsDhbm81JamKwAhE=
Subject key identifier:   F7:27:4D:6F:5F:AF:B2:F0:D8:DB:C9:39:91:81:94:07:DA:64:52:A7
Certificate issuer:       /CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
Certificate serial:       1F2CC4384EE0D87D94D1484AB570B80BE445E21C
Authority key identifier: 7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/32332e3133302e3133382e3234302f32392d3239203d3e20393234.roa
Signing time:             Tue 04 Apr 2023 07:23:43 +0000
ROA not before:           Tue 04 Apr 2023 07:18:43 +0000
ROA not after:            Tue 02 Apr 2024 07:23:43 +0000
asID:                     924
IP address blocks:        23.130.138.240/29 maxlen: 29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2c:c4:38:4e:e0:d8:7d:94:d1:48:4a:b5:70:b8:0b:e4:45:e2:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5
        Validity
            Not Before: Apr  4 07:18:43 2023 GMT
            Not After : Apr  2 07:23:43 2024 GMT
        Subject: CN=F7274D6F5FAFB2F0D8DBC93991819407DA6452A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:69:6d:a4:66:ce:be:92:78:ad:98:9d:6f:5f:
                    de:54:cd:b7:c5:c8:6a:ee:53:72:c5:99:a0:45:51:
                    8e:f5:55:ab:f0:f9:49:78:97:a2:81:6d:82:4d:97:
                    95:c4:b4:5c:a6:68:2c:c5:7f:22:e9:e2:30:4d:c5:
                    ed:6e:ac:2d:5c:fd:67:25:8f:ec:12:b8:35:99:80:
                    77:a0:ad:1a:9b:e7:08:98:f3:ff:bb:b1:7f:43:ef:
                    72:e2:31:cd:2d:43:bb:56:cd:96:06:e4:7c:2b:84:
                    7a:b1:f1:de:7a:c0:95:26:2f:5f:59:f0:5d:86:8f:
                    8a:bc:d8:09:b3:f5:20:eb:de:70:4e:56:c3:de:b9:
                    65:dd:0a:9e:42:cc:f6:7a:47:75:69:da:50:01:91:
                    df:19:f0:04:57:93:dd:64:a2:b3:0a:4f:90:0d:a4:
                    5a:86:51:20:f1:ac:ed:71:55:cb:d1:06:a4:01:fd:
                    e1:6b:5a:f4:62:e8:9e:89:aa:84:51:d4:ca:21:8b:
                    69:62:f0:68:3d:4d:cf:f7:14:d2:52:17:8e:4d:c1:
                    a1:85:a5:d8:bd:4b:69:e9:c0:33:2f:37:c8:e8:90:
                    92:dc:e0:3a:ce:7d:c0:d9:f7:ff:3c:0a:5f:85:6a:
                    77:89:22:d8:d2:b2:c7:75:ef:28:bb:e3:cb:4f:37:
                    76:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:27:4D:6F:5F:AF:B2:F0:D8:DB:C9:39:91:81:94:07:DA:64:52:A7
            X509v3 Authority Key Identifier:
                keyid:7E:9B:D7:63:D6:18:92:4E:EF:29:38:C2:83:CC:13:5E:90:08:38:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/7E9BD763D618924EEF2938C283CC135E90083853.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b78f571cf92f2969509ffdefcfff44936d873bbda5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f7a28acf121f/0/32332e3133302e3133382e3234302f32392d3239203d3e20393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.130.138.240/29

    Signature Algorithm: sha256WithRSAEncryption
         3d:0f:be:ac:e2:92:5f:e4:d4:7e:04:18:76:24:d1:70:2e:79:
         48:93:f0:28:02:16:43:69:31:06:90:b9:78:7b:91:99:39:34:
         e1:56:f9:6a:a7:f7:e2:50:8a:db:da:48:a4:21:f4:86:69:0a:
         97:fa:e1:0c:33:31:30:7b:68:19:ea:1f:a5:7f:b3:ff:b4:c1:
         d6:e1:b5:31:65:b8:ad:83:44:cd:fb:ca:a6:1e:9e:87:5b:ba:
         0d:a2:53:a8:af:5f:d0:e3:2d:e7:4a:db:5f:25:f6:d1:b5:25:
         79:33:64:d1:a3:6e:79:5a:b6:1c:f5:13:87:ba:f0:b4:70:5a:
         a3:df:65:b5:8b:d0:e6:85:c3:70:00:3e:7a:be:81:26:7a:a8:
         43:b3:f8:05:d2:5b:e7:2e:c3:61:d6:10:ff:3f:86:15:9a:8d:
         49:0e:10:94:49:e3:f6:f6:b9:2b:68:4e:dc:ad:be:de:ae:eb:
         47:4f:e0:ac:e3:32:a8:c6:a9:27:a7:4d:91:08:de:39:e8:98:
         79:12:16:62:d3:a5:1d:1b:ec:0e:7b:ea:b7:73:6f:f0:89:9c:
         49:84:14:09:23:63:4d:23:c3:eb:1e:c5:2c:b7:57:ce:5b:01:
         5e:cb:51:85:b0:1f:35:17:72:25:eb:74:ce:43:ce:07:fc:b8:
         bf:0d:d7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----