Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/32332e38382e3232342e302f32312d3234203d3e2037303239.roa
File:                     32332e38382e3232342e302f32312d3234203d3e2037303239.roa (raw, json)
Hash identifier:          97giryrC8OYXJC75cPNT1kUUOXQdZYDfjuDllDlfLes=
Subject key identifier:   23:C4:05:FE:1C:E4:BC:33:B1:B3:59:BA:66:22:75:41:D5:43:6D:5C
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       162428267B44F61DCD1ED79A60440C250D9F0BC4
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/32332e38382e3232342e302f32312d3234203d3e2037303239.roa
Signing time:             Mon 11 Jul 2022 10:35:29 +0000
ROA not before:           Mon 11 Jul 2022 10:30:29 +0000
ROA not after:            Mon 10 Jul 2023 10:35:29 +0000
asID:                     7029
IP address blocks:        23.88.224.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:24:28:26:7b:44:f6:1d:cd:1e:d7:9a:60:44:0c:25:0d:9f:0b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:29 2022 GMT
            Not After : Jul 10 10:35:29 2023 GMT
        Subject: CN=23C405FE1CE4BC33B1B359BA66227541D5436D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f8:70:cb:0c:be:93:80:8f:dd:e2:29:2a:0b:
                    58:93:c2:96:01:ae:b7:f5:18:66:b0:e8:7a:b5:de:
                    af:c0:17:be:72:c5:92:41:37:ec:16:b5:d5:a6:fd:
                    81:4c:6b:96:ca:e6:a1:83:88:b6:bc:50:b6:c8:3e:
                    14:15:a4:37:d8:79:5e:ea:13:c8:8e:72:36:fc:06:
                    6d:93:69:e9:e2:49:da:fb:30:ad:93:fb:06:43:a0:
                    4c:a6:af:cc:d2:ac:6c:6d:4b:23:21:9e:61:69:d2:
                    91:90:2a:cb:55:f3:90:24:71:ff:f2:03:32:11:9a:
                    00:8d:69:b4:f4:75:09:15:3e:76:1a:d2:c1:14:1b:
                    6e:43:c1:e5:58:18:99:71:61:13:4c:aa:ad:d3:6c:
                    59:3b:38:f2:00:df:5f:89:4f:bc:1d:fa:8a:e9:dc:
                    a3:36:07:cb:9c:16:4f:aa:e4:80:e0:6f:82:74:28:
                    b9:e2:04:26:7c:e1:84:a0:1c:86:f8:6e:71:16:55:
                    46:0c:35:33:d9:58:e3:87:35:8a:64:a1:13:4b:d1:
                    71:83:3c:5b:79:91:35:5d:77:c0:14:81:a5:67:35:
                    76:e7:88:fc:46:d1:c3:2a:45:2f:72:a9:19:01:bc:
                    d0:bd:69:59:61:de:83:89:bf:13:45:ae:e5:35:bf:
                    d2:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C4:05:FE:1C:E4:BC:33:B1:B3:59:BA:66:22:75:41:D5:43:6D:5C
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/32332e38382e3232342e302f32312d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6b:d0:50:a0:4c:a1:9c:f4:6e:6b:56:ed:7c:b6:29:e8:6c:8a:
         6d:cb:5a:ed:d6:fc:88:0f:b1:2e:ab:48:e5:1f:1f:64:80:b6:
         55:92:20:94:b3:16:22:a3:6a:e2:ae:35:57:68:88:62:d4:0b:
         7b:e0:bb:ee:50:93:b9:c1:2b:c0:f9:ef:6a:64:fb:ce:00:91:
         60:2a:46:db:36:5f:40:38:9d:ac:05:45:61:90:19:23:0d:a0:
         97:b4:c2:f7:63:dd:68:5e:e3:5c:19:ab:cf:cc:bd:e8:0c:66:
         cf:22:64:ba:d7:ba:7c:e3:fe:2e:c2:3e:bd:56:ea:12:eb:32:
         7d:1a:4a:4f:87:62:b7:49:50:c1:fa:6d:a6:f7:6f:db:01:a2:
         b1:5c:10:9a:cd:9e:0b:44:2a:b1:96:c8:ee:65:1d:97:03:a5:
         76:2c:88:a9:25:d3:08:18:be:91:e6:43:c5:66:23:f2:2f:45:
         ad:07:aa:70:d0:0f:79:64:de:12:d7:aa:83:78:a5:52:88:ae:
         01:7e:ee:70:4a:bf:12:47:ca:fb:8c:7f:2f:b2:0a:da:3f:7b:
         65:55:63:a0:be:93:1b:30:3a:b7:d5:1c:af:a3:92:dd:66:32:
         57:99:ec:91:ae:22:6f:26:e5:96:64:15:33:f0:af:04:d2:06:
         41:ef:39:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----