Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/32332e38382e3234382e302f32312d3234203d3e2037303239.roa
File:                     32332e38382e3234382e302f32312d3234203d3e2037303239.roa (raw, json)
Hash identifier:          cpotWM3VcXBBhqTWALSXFl1JIUQeV+GzmARttHTpRcE=
Subject key identifier:   4D:5C:64:A2:3C:8A:18:A5:98:6F:81:7D:9D:1A:F2:2E:E3:88:BC:BB
Certificate issuer:       /CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
Certificate serial:       3542EE80CADA6801C1B276372D1E8172F9F64D32
Authority key identifier: 2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/32332e38382e3234382e302f32312d3234203d3e2037303239.roa
Signing time:             Mon 11 Jul 2022 10:35:28 +0000
ROA not before:           Mon 11 Jul 2022 10:30:28 +0000
ROA not after:            Mon 10 Jul 2023 10:35:28 +0000
asID:                     7029
IP address blocks:        23.88.248.0/21 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:42:ee:80:ca:da:68:01:c1:b2:76:37:2d:1e:81:72:f9:f6:4d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873
        Validity
            Not Before: Jul 11 10:30:28 2022 GMT
            Not After : Jul 10 10:35:28 2023 GMT
        Subject: CN=4D5C64A23C8A18A5986F817D9D1AF22EE388BCBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0e:30:76:2d:91:07:d9:9e:7e:36:33:2c:e1:
                    2a:59:b6:e4:45:ad:38:dd:dc:8a:96:dd:a7:49:88:
                    7d:bf:f0:a9:6d:54:fd:63:05:40:29:a9:0d:69:6e:
                    53:b3:34:00:e1:d5:ac:49:34:a8:05:0b:a6:81:fb:
                    70:5d:6d:38:d7:e9:2b:95:83:19:57:48:b9:c4:87:
                    b0:3e:10:ed:b2:dc:8d:57:e8:57:10:d7:d3:fe:82:
                    97:0d:34:c5:51:de:96:db:92:23:84:5e:8a:60:b9:
                    3f:ce:03:d0:ae:b9:9c:2b:bf:df:9e:dd:4c:a2:d7:
                    c6:3c:02:b9:fb:a5:e6:78:f5:ac:3e:2b:27:5b:6f:
                    91:ad:2e:db:88:77:03:6e:88:25:91:25:fc:e0:0c:
                    75:7e:7f:c4:fb:c1:07:38:96:5d:e0:06:14:db:d7:
                    ef:87:7d:34:d6:43:45:60:8a:7c:f8:10:f6:f8:4d:
                    e9:b3:48:19:e3:b1:3b:51:fd:79:05:31:0c:15:38:
                    52:33:5a:70:bd:fb:03:cf:64:0a:53:01:6d:7e:f2:
                    3c:a5:95:16:35:ee:9c:0e:22:62:27:cb:f9:59:b4:
                    67:f2:86:6c:d7:c5:5d:29:31:c0:80:ac:3f:55:32:
                    ba:2b:a9:a4:20:01:47:ec:e7:2f:20:79:2d:c6:c1:
                    54:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5C:64:A2:3C:8A:18:A5:98:6F:81:7D:9D:1A:F2:2E:E3:88:BC:BB
            X509v3 Authority Key Identifier:
                keyid:2B:B6:A3:8B:23:39:7C:2D:AE:CC:2E:FC:DD:36:26:D6:20:4D:3E:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/2BB6A38B23397C2DAECC2EFCDD3626D6204D3EF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf0757c7ec24127f6243249fc587b6c41fc1f609835873.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/0/32332e38382e3234382e302f32312d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         05:dc:55:ee:4d:f8:d4:31:5c:2d:c1:8c:19:cc:9e:71:28:2d:
         ea:ae:c1:e9:8d:d6:5a:1e:6a:5a:15:06:ee:61:36:7a:79:19:
         75:89:0d:bb:2e:12:2a:4f:67:e1:ab:68:24:71:de:f5:97:7d:
         b9:6d:76:36:14:5f:3f:75:3e:57:8c:e1:67:d9:20:60:08:4a:
         14:21:bb:81:f2:08:d4:de:33:fe:e1:57:d3:0b:80:52:0d:74:
         a3:09:1f:e0:71:00:3e:3b:46:42:ba:67:b4:7b:c2:a4:6f:23:
         58:38:d5:fc:a1:0c:29:15:03:a9:23:5b:4c:f9:05:55:38:52:
         a6:cb:e1:36:45:cd:e5:58:ea:90:85:b1:b6:23:e8:56:c4:71:
         c8:2c:97:70:6a:e6:a5:97:36:c5:9e:a0:19:39:67:a2:d0:45:
         fc:27:4a:78:62:f7:ac:a9:eb:c2:87:3f:78:c7:00:12:09:93:
         0f:f6:94:75:45:0d:54:2a:bc:f0:30:30:60:3b:2f:11:3d:f9:
         90:bc:6a:09:15:3e:66:90:b7:68:08:c0:bb:a8:06:47:55:29:
         46:65:1e:a6:2c:f3:61:94:61:66:44:9a:36:9b:1b:de:fc:cb:
         23:f9:54:8a:fc:24:e3:be:08:b2:a6:da:39:8e:bf:6d:c1:3a:
         34:8b:e2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----