Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/32332e38382e3234302e302f32312d3234203d3e2037303239.roa
File:                     32332e38382e3234302e302f32312d3234203d3e2037303239.roa (raw, json)
Hash identifier:          6WacSkq3Q+QRX5SNxSzF5iYYiqFM49mWY9oU59x7JMo=
Subject key identifier:   F0:13:F9:73:7E:BA:FA:0A:F4:2F:79:05:EB:42:23:2E:12:5D:EB:4F
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       6C7F885E6EC9EC8865521B4CE152392391001D65
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/32332e38382e3234302e302f32312d3234203d3e2037303239.roa
Signing time:             Mon 11 Jul 2022 10:35:33 +0000
ROA not before:           Mon 11 Jul 2022 10:30:33 +0000
ROA not after:            Mon 10 Jul 2023 10:35:33 +0000
asID:                     7029
IP address blocks:        23.88.240.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:7f:88:5e:6e:c9:ec:88:65:52:1b:4c:e1:52:39:23:91:00:1d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:33 2022 GMT
            Not After : Jul 10 10:35:33 2023 GMT
        Subject: CN=F013F9737EBAFA0AF42F7905EB42232E125DEB4F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:64:e8:02:64:0d:af:f4:71:cf:c5:3e:9a:47:
                    a8:d3:ca:d1:67:67:70:2b:f4:15:11:e3:ba:1a:4c:
                    54:f0:e1:d9:ca:0e:78:f1:ab:18:f1:1c:02:8d:3d:
                    02:23:6b:e2:8c:bb:14:84:0f:9c:ad:17:94:e2:fe:
                    5e:13:bb:46:64:c4:e2:e0:2f:74:f1:15:56:57:09:
                    65:ef:2c:e8:99:bb:45:a3:53:5b:c1:4c:70:ad:95:
                    60:d1:88:52:d5:fd:83:a5:7d:da:27:36:10:8a:69:
                    3a:ad:0f:be:bf:6e:94:9d:9b:41:ee:de:70:8a:89:
                    da:6e:5c:eb:4d:45:82:9b:2d:b4:c4:a6:7a:86:4f:
                    89:36:e2:eb:b1:ce:1b:dc:7c:58:3c:b2:9f:aa:15:
                    2a:1e:74:d7:8b:3c:3f:db:4a:ef:0f:8a:04:2a:f9:
                    60:57:f2:74:07:ff:45:b7:b3:db:db:0d:d6:5f:08:
                    32:21:e7:ca:fb:53:6f:54:78:75:82:f9:28:1d:de:
                    e6:ea:69:92:3b:73:23:60:6d:3a:71:9c:ba:b0:28:
                    6c:2e:6f:da:b2:b1:45:68:06:55:c1:51:89:67:4d:
                    2a:6b:14:db:a4:26:79:4d:af:b9:04:d0:95:f2:18:
                    8a:66:91:af:03:22:ef:1a:5a:df:93:36:d5:68:2a:
                    c6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:13:F9:73:7E:BA:FA:0A:F4:2F:79:05:EB:42:23:2E:12:5D:EB:4F
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/32332e38382e3234302e302f32312d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:11:4b:b7:84:43:f2:86:8a:7f:49:b0:4f:4c:8e:1d:e0:34:
         05:a2:e1:bf:2d:aa:b3:63:de:e4:57:f1:77:69:88:3f:bf:87:
         b6:e6:22:88:e0:19:c0:33:79:44:32:17:4e:f6:37:77:33:f6:
         0f:65:14:18:a7:af:0a:82:d9:35:77:5b:41:24:d6:85:6b:eb:
         d6:10:0c:03:95:79:ab:98:30:96:f4:f4:df:16:84:57:c9:60:
         d2:7f:18:fb:e8:60:b5:0e:80:40:18:de:32:1a:ca:56:69:9d:
         3e:a3:55:ae:3e:c0:7c:20:02:f7:f5:8f:8d:0c:33:87:e9:90:
         46:ba:66:0b:b4:e3:34:43:fe:04:f4:3f:91:71:49:18:2d:fe:
         73:8b:46:12:90:18:11:3f:13:e8:18:89:4f:08:c7:55:12:c5:
         94:e4:4e:b8:1a:3d:6b:80:01:e6:1f:36:17:16:08:80:c1:36:
         5e:b8:81:06:26:6c:fd:4b:1a:5c:e9:4c:2a:d8:92:b7:18:60:
         e8:65:b2:46:e0:45:e6:5e:7c:f1:a7:c7:50:58:ca:d6:c2:55:
         31:1b:a0:51:9a:88:88:98:00:13:db:80:9e:87:e2:54:ac:16:
         8a:77:37:1e:f8:7e:1d:2a:90:78:f0:3d:e2:0e:cc:b0:53:d8:
         46:d5:c1:d1
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUbH+IXm7J7IhlUhtM4VI5I5EAHWUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1N2M3ZWMyNDEyN2Y2MjQzMjQ5ZmM1ODdi
NmM0MWZjMWY2MDk4MzU4NzMwHhcNMjIwNzExMTAzMDMzWhcNMjMwNzEwMTAzNTMz
WjAzMTEwLwYDVQQDEyhGMDEzRjk3MzdFQkFGQTBBRjQyRjc5MDVFQjQyMjMyRTEy
NURFQjRGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmToAmQNr/Rx
z8U+mkeo08rRZ2dwK/QVEeO6GkxU8OHZyg548asY8RwCjT0CI2vijLsUhA+crReU
4v5eE7tGZMTi4C908RVWVwll7yzombtFo1NbwUxwrZVg0YhS1f2DpX3aJzYQimk6
rQ++v26UnZtB7t5wionablzrTUWCmy20xKZ6hk+JNuLrsc4b3HxYPLKfqhUqHnTX
izw/20rvD4oEKvlgV/J0B/9Ft7Pb2w3WXwgyIefK+1NvVHh1gvkoHd7m6mmSO3Mj
YG06cZy6sChsLm/asrFFaAZVwVGJZ00qaxTbpCZ5Ta+5BNCV8hiKZpGvAyLvGlrf
kzbVaCrGvQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFPAT+XN+uvoK9C95BetCIy4S
XetPMB8GA1UdIwQYMBaAFCu2o4sjOXwtrswu/N02JtYgTT74MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzAv
MkJCNkEzOEIyMzM5N0MyREFFQ0MyRUZDREQzNjI2RDYyMDREM0VGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3YzdlYzI0MTI3ZjYyNDMyNDlmYzU4N2I2YzQxZmMxZjYwOTgzNTg3My5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNk
MzdkYWM3MmYxLzAvMzIzMzJlMzgzODJlMzIzNDMwMmUzMDJmMzIzMTJkMzIzNDIw
M2QzZTIwMzczMDMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAMXWPAwDQYJKoZIhvcNAQELBQADggEB
AA0RS7eEQ/KGin9JsE9Mjh3gNAWi4b8tqrNj3uRX8XdpiD+/h7bmIojgGcAzeUQy
F072N3cz9g9lFBinrwqC2TV3W0Ek1oVr69YQDAOVeauYMJb09N8WhFfJYNJ/GPvo
YLUOgEAY3jIaylZpnT6jVa4+wHwgAvf1j40MM4fpkEa6Zgu04zRD/gT0P5FxSRgt
/nOLRhKQGBE/E+gYiU8Ix1USxZTkTrgaPWuAAeYfNhcWCIDBNl64gQYmbP1LGlzp
TCrYkrcYYOhlskbgReZefPGnx1BYytbCVTEboFGaiIiYABPbgJ6H4lSsFop3Nx74
fh0qkHjwPeIOzLBT2EbVwdE=
-----END CERTIFICATE-----