Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/32332e38382e3232342e302f31392d3234203d3e2031323339.roa
File:                     32332e38382e3232342e302f31392d3234203d3e2031323339.roa (raw, json)
Hash identifier:          k6fPMMmzKT+UYkYn9RwsCah+0KyGSkaGMheQzROzaGw=
Subject key identifier:   27:A4:43:F1:F3:6F:CE:46:8E:A9:36:1E:B3:B1:E2:6F:70:E7:83:C6
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       45FFCDC77E0ABB2663F371BEF46264EEF7C39956
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/32332e38382e3232342e302f31392d3234203d3e2031323339.roa
Signing time:             Mon 11 Jul 2022 10:35:31 +0000
ROA not before:           Mon 11 Jul 2022 10:30:31 +0000
ROA not after:            Mon 10 Jul 2023 10:35:31 +0000
asID:                     1239
IP address blocks:        23.88.224.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ff:cd:c7:7e:0a:bb:26:63:f3:71:be:f4:62:64:ee:f7:c3:99:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:31 2022 GMT
            Not After : Jul 10 10:35:31 2023 GMT
        Subject: CN=27A443F1F36FCE468EA9361EB3B1E26F70E783C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e0:e9:72:23:23:b9:36:3a:4b:01:ee:f2:ee:
                    b5:29:f9:32:ee:b4:63:9e:67:07:50:00:95:81:4b:
                    eb:d3:ae:c6:6e:1a:63:2f:02:3c:6d:8a:de:a8:6d:
                    a5:a8:7f:09:61:6d:3a:f0:73:29:28:78:b8:2e:4f:
                    cf:35:02:87:11:ee:42:6f:b0:90:a5:5c:44:93:a9:
                    ff:c3:3e:76:51:56:6d:fd:f6:4b:01:a2:1b:f0:6f:
                    5e:54:01:2c:0d:1a:d1:5e:74:b4:13:03:ec:94:85:
                    dc:57:b1:6b:19:4d:b8:25:96:1c:ab:91:67:39:6b:
                    4e:5c:31:77:75:c7:a0:d0:5e:64:70:f5:3d:8d:5d:
                    19:cf:dd:a5:35:d5:53:26:7c:07:da:ea:4b:f3:f5:
                    de:f2:f7:94:84:85:97:e3:16:5b:2c:1d:46:e5:dd:
                    c6:a5:0d:13:b6:be:96:56:e7:a7:ef:98:25:fe:1a:
                    92:4f:3b:3e:0d:3e:94:94:28:44:a0:27:2d:f8:f8:
                    86:b9:36:fd:91:5e:0b:51:bf:3e:58:18:dc:ce:ee:
                    e0:dc:ae:71:81:1b:1c:ba:3a:2b:97:ae:d4:b1:40:
                    9d:8e:19:18:94:80:a7:4b:b4:53:a6:99:34:de:37:
                    16:99:3c:12:1a:25:41:2a:12:7a:6a:6c:bf:80:96:
                    12:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A4:43:F1:F3:6F:CE:46:8E:A9:36:1E:B3:B1:E2:6F:70:E7:83:C6
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/32332e38382e3232342e302f31392d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:2e:f4:9f:2e:12:8e:54:6d:51:ae:c9:10:02:89:b4:4b:45:
         20:0f:af:59:0c:34:ce:61:c5:47:4a:fb:b2:6b:9b:f4:9e:e5:
         5d:8d:2a:cf:7f:73:fe:10:83:b5:b3:16:87:95:63:38:f7:77:
         32:78:5a:ac:03:6a:de:16:b1:f1:bf:d4:c1:20:60:40:bd:4e:
         b1:5b:51:24:ef:b7:1b:ee:0a:59:e5:a6:cd:13:4a:6b:8a:b2:
         08:b1:e1:2b:1a:c2:34:b6:53:28:08:1a:30:c2:e3:e0:5d:7f:
         53:ec:20:e7:0a:0d:fe:39:35:ae:a4:fa:b6:ff:ba:e7:62:7f:
         2b:74:00:60:72:7f:1a:b2:7e:b9:b0:90:ef:67:db:89:cf:50:
         64:bb:4c:27:4f:22:36:0c:05:db:ad:0d:e2:31:93:5b:31:f5:
         d5:b9:0a:79:d1:ad:d8:28:a4:3e:14:8c:5e:c8:0e:3f:cd:a1:
         63:01:e2:6a:3b:df:ff:c4:17:54:b8:12:22:ff:ce:59:c7:a3:
         3b:27:8b:4e:c7:91:b5:3d:f1:65:64:44:3a:c7:5a:b0:69:8e:
         e8:39:9f:e3:f3:52:33:6a:4c:7c:e0:5e:7e:93:fb:c9:f4:ec:
         e1:d8:ba:f1:47:7f:5a:d3:8d:ac:35:af:62:86:11:fe:ab:1b:
         3b:fb:10:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----