Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/32332e38382e3233322e302f32312d3234203d3e2037303239.roa
File:                     32332e38382e3233322e302f32312d3234203d3e2037303239.roa (raw, json)
Hash identifier:          MvRv0vfOS1OgMjcO7lWwRLeEP6zblxkhL54pi6xZrA4=
Subject key identifier:   C0:B8:F4:3A:F8:CA:21:8F:34:D9:AB:64:2A:14:9E:1F:D3:13:92:0A
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       6FD1F2AB017A919FC1C1130474347FB9C71C8FCD
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/32332e38382e3233322e302f32312d3234203d3e2037303239.roa
Signing time:             Mon 11 Jul 2022 10:35:28 +0000
ROA not before:           Mon 11 Jul 2022 10:30:28 +0000
ROA not after:            Mon 10 Jul 2023 10:35:28 +0000
asID:                     7029
IP address blocks:        23.88.232.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d1:f2:ab:01:7a:91:9f:c1:c1:13:04:74:34:7f:b9:c7:1c:8f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:28 2022 GMT
            Not After : Jul 10 10:35:28 2023 GMT
        Subject: CN=C0B8F43AF8CA218F34D9AB642A149E1FD313920A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d7:92:88:11:d6:2b:e5:6b:91:3c:d9:2d:c8:
                    b3:d2:44:47:62:d3:a2:7f:b6:c1:a2:5a:45:ae:6f:
                    43:79:80:bb:01:0a:a4:27:f6:60:f1:5e:68:52:02:
                    1a:31:a8:7c:fd:96:47:06:4d:3c:9f:91:b5:f8:ce:
                    3c:0d:e3:26:5f:bd:0f:5b:e1:8e:53:62:b1:70:96:
                    13:1e:90:4f:17:21:d8:97:a8:c7:b1:99:84:0e:46:
                    0f:65:40:42:58:7a:21:a1:d5:e9:1a:55:31:71:c9:
                    79:26:6b:05:3f:2a:bd:e7:91:b7:89:41:31:f2:43:
                    a4:76:bd:57:53:70:f9:3b:3c:d3:a2:bd:c8:dc:e9:
                    fc:5d:3f:1b:4a:92:92:a5:cd:2f:c7:83:b6:30:a0:
                    35:78:bf:19:60:6f:79:53:72:da:a8:68:6e:b0:68:
                    ca:b0:c5:1e:fb:5a:55:f9:9a:79:49:b5:d7:5a:2a:
                    85:0d:5f:cc:fe:ef:39:de:a0:5d:07:e4:6e:b1:77:
                    56:e1:ea:85:8c:30:36:cd:a6:c8:3b:89:7e:b2:59:
                    15:74:7b:52:42:a9:19:93:fd:17:36:67:02:ee:cf:
                    29:80:c3:ed:de:0c:8d:8b:5a:88:29:a2:9b:d4:54:
                    0c:54:e9:2c:ba:24:d6:3e:81:73:6e:ce:4e:25:35:
                    62:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:B8:F4:3A:F8:CA:21:8F:34:D9:AB:64:2A:14:9E:1F:D3:13:92:0A
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/32332e38382e3233322e302f32312d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         56:75:7e:97:a1:cc:29:78:7f:5f:ca:8e:11:a8:f8:68:ce:56:
         79:90:16:4a:63:6e:10:3f:34:c3:16:e7:62:b5:d2:1d:57:af:
         3d:9c:c5:33:11:55:2a:fe:28:c1:c1:d0:4e:02:19:5d:bb:29:
         6f:b4:4e:d5:27:05:19:e4:f7:19:b9:2d:05:ca:e5:da:56:86:
         e3:99:2b:c3:10:76:7d:c1:63:ad:5d:e7:e8:17:37:81:43:13:
         65:90:f3:42:43:5b:f3:14:c4:64:ff:f6:ad:ca:76:a1:5a:26:
         58:b9:6c:8a:6a:d7:c7:bd:ce:ce:a1:0d:df:c5:76:ed:88:34:
         53:60:c9:b1:65:8b:35:fd:05:28:ad:35:50:1d:11:4b:71:3e:
         24:35:f5:40:af:e6:f7:b6:4e:93:1d:dd:93:93:b2:13:30:7a:
         f3:f4:ae:0a:62:26:c4:50:c2:ef:2d:a7:7a:41:f3:d1:64:10:
         9d:8b:91:3d:98:9b:67:9b:ce:0d:fb:cb:49:6c:59:77:51:29:
         67:24:5f:45:ae:65:41:d8:2b:27:80:62:aa:34:72:0d:ec:21:
         bb:39:17:38:22:e4:b0:69:ba:3a:59:49:39:2d:ab:3d:fb:97:
         4a:63:1c:5f:d0:89:e5:ba:72:07:66:8b:ff:f6:f4:58:9c:74:
         d6:6f:8a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----