Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/32332e38382e3234302e302f32302d3234203d3e2031323339.roa
File:                     32332e38382e3234302e302f32302d3234203d3e2031323339.roa (raw, json)
Hash identifier:          xaXfH3d/K8bpSADDzCOTHAERCdgR0E9ujnBBj4RT7bI=
Subject key identifier:   A7:22:C9:1A:E9:A7:93:10:E2:7A:10:95:E4:2B:DE:19:E7:A9:9E:93
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       6D3076CD1FD87E3F8D97570266EAD977D1E18B6D
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/32332e38382e3234302e302f32302d3234203d3e2031323339.roa
Signing time:             Mon 11 Jul 2022 10:35:28 +0000
ROA not before:           Mon 11 Jul 2022 10:30:28 +0000
ROA not after:            Mon 10 Jul 2023 10:35:28 +0000
asID:                     1239
IP address blocks:        23.88.240.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:30:76:cd:1f:d8:7e:3f:8d:97:57:02:66:ea:d9:77:d1:e1:8b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:28 2022 GMT
            Not After : Jul 10 10:35:28 2023 GMT
        Subject: CN=A722C91AE9A79310E27A1095E42BDE19E7A99E93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ea:f8:1a:5a:0e:f8:96:b7:c2:49:02:2b:a1:
                    39:04:e7:82:d9:12:48:a5:ed:5c:31:78:a9:3f:b5:
                    98:0b:3c:6b:68:1b:04:67:f9:73:d0:5c:5a:54:64:
                    88:14:f9:4e:ec:2f:88:f1:bb:ee:90:45:c8:2e:85:
                    75:eb:56:93:93:6a:5c:c1:46:ee:aa:44:80:92:45:
                    35:a6:1e:89:94:4c:82:7a:27:b5:63:13:14:e9:94:
                    e6:df:bc:c1:b4:f5:15:4e:32:b1:3c:9e:ee:f1:03:
                    74:27:eb:0d:19:b7:60:cf:69:79:b5:72:8e:75:60:
                    1e:73:28:63:13:e5:3f:5d:22:9d:26:b9:f1:25:91:
                    81:4d:28:99:e0:51:ac:6f:4c:63:dc:f1:37:62:1e:
                    30:af:d8:4f:8f:1f:ae:a5:5a:55:86:bf:c5:54:28:
                    85:9c:48:c8:43:06:4c:fb:b3:10:73:68:0c:22:da:
                    ef:ac:d9:25:ed:99:49:48:d0:f5:6f:34:e5:81:fb:
                    7c:26:f7:c0:4a:7d:2d:57:46:16:b4:f3:99:72:fd:
                    35:59:04:84:93:4e:a3:3b:46:39:de:8b:d1:ff:e8:
                    2d:c8:e4:c3:a5:36:b2:16:94:2f:d0:82:d7:24:07:
                    c4:e3:3b:64:5f:30:df:bf:ca:74:2e:d9:5a:79:e9:
                    23:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:22:C9:1A:E9:A7:93:10:E2:7A:10:95:E4:2B:DE:19:E7:A9:9E:93
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/32332e38382e3234302e302f32302d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         32:36:96:fa:88:28:d6:d2:af:5f:3b:67:fa:40:ae:d7:aa:41:
         58:70:58:a9:3a:4b:66:0c:3b:fe:ad:9b:09:b0:b8:61:fb:14:
         62:90:c2:fc:dc:01:2e:af:29:83:bf:7d:38:dd:1c:6b:2a:99:
         3b:27:42:84:8a:35:ad:75:f8:d4:bc:cd:11:61:43:8e:99:b3:
         49:c3:12:76:01:a8:98:38:b4:3e:52:b6:84:5e:6b:11:0a:b7:
         2b:24:63:f0:74:7f:f8:02:31:0c:f9:cd:a0:48:10:6f:db:a8:
         39:f1:00:8d:e7:b2:ca:57:47:a2:b8:bc:aa:a0:ca:39:a2:7d:
         fd:c0:8d:61:98:8c:d4:b7:f8:12:23:86:c9:5b:e2:5b:35:2c:
         1c:53:6a:89:81:ad:b3:e1:9c:36:f0:66:b2:dc:4c:75:95:a6:
         2a:da:81:bb:aa:78:26:d9:85:1e:e6:c5:cb:8c:64:84:1d:0b:
         75:76:25:96:cd:11:44:53:60:b8:e1:7f:5d:78:b1:ff:6f:a3:
         ed:14:00:02:f3:be:8e:58:2a:ec:ea:89:db:1e:1e:8c:56:ed:
         ad:ce:c9:b8:a2:95:1c:7e:88:bd:ce:b2:a1:be:52:7c:ea:3a:
         16:13:9d:d2:fd:28:ff:d5:c4:2c:d7:67:90:5a:ed:05:2f:39:
         0b:86:5f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----