Route Origin Authorization

$ rpki-client -vvf rpki-rsync.e15f.net/repo/MISAKA-RPKI/7/3137302e33392e3232342e302f32322d3234203d3e203537363935.roa
File:                     3137302e33392e3232342e302f32322d3234203d3e203537363935.roa (raw, json)
Hash identifier:          josJQilYTCHNnmWTnyiwg6+wvGzy1pQn17pB4xwedUA=
Subject key identifier:   8B:A3:5F:F2:4E:8E:E2:3F:62:BD:86:1D:C7:5B:30:F4:28:20:4D:F7
Certificate issuer:       /CN=06fc27b2b491fb34e62ece17689ef26024c0927e806cd27ee3
Certificate serial:       0F32AD42C0AE28419451FF2BB69AC6F2B683DF30
Authority key identifier: 48:98:5C:4F:CB:B5:7F:50:73:AD:91:9D:EA:34:E7:5E:3E:59:0D:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b491fb34e62ece17689ef26024c0927e806cd27ee3.cer
Subject info access:      rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/7/3137302e33392e3232342e302f32322d3234203d3e203537363935.roa
Signing time:             Fri 18 Feb 2022 04:09:32 +0000
ROA not before:           Fri 18 Feb 2022 04:04:32 +0000
ROA not after:            Fri 17 Feb 2023 04:09:32 +0000
asID:                     57695
IP address blocks:        170.39.224.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:32:ad:42:c0:ae:28:41:94:51:ff:2b:b6:9a:c6:f2:b6:83:df:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b491fb34e62ece17689ef26024c0927e806cd27ee3
        Validity
            Not Before: Feb 18 04:04:32 2022 GMT
            Not After : Feb 17 04:09:32 2023 GMT
        Subject: CN=8BA35FF24E8EE23F62BD861DC75B30F428204DF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:e7:69:66:57:62:d1:d0:7f:24:5c:33:6d:
                    7a:88:b3:77:c8:b5:f3:58:b1:76:73:99:f5:5a:5a:
                    c6:00:34:f5:d8:01:6e:2a:13:45:63:9c:38:00:d1:
                    ed:1f:56:14:e0:6d:0f:43:ff:30:0f:80:a0:5e:73:
                    d9:9e:83:e5:83:8a:34:c7:c0:a2:f8:17:e7:7d:30:
                    ac:66:2c:e8:12:d9:5c:91:a7:5a:8b:48:3c:6f:5e:
                    13:88:ef:92:46:b7:8b:3a:3c:b2:30:cd:e9:f2:9e:
                    5a:2b:bc:7c:2c:1b:49:3d:93:b9:da:7b:2c:c4:57:
                    56:35:c1:6b:80:89:89:62:cd:fe:f6:f7:4e:20:6d:
                    29:95:09:83:4b:5e:ef:a4:89:4c:aa:cf:e4:2f:6a:
                    88:f1:19:ad:f9:df:5a:24:36:10:73:04:df:7e:31:
                    87:d9:e6:36:74:be:20:db:51:27:ac:6f:ca:72:96:
                    96:dc:06:e6:3c:53:a8:75:99:54:46:8c:06:03:1a:
                    ab:2b:d9:ab:79:ec:9c:3e:e5:5f:96:8b:c6:31:68:
                    9e:b1:da:56:d1:26:1c:9d:66:7f:e0:86:6a:0a:81:
                    cb:6e:93:a1:61:d6:7e:7e:3b:de:05:e5:0e:61:89:
                    07:2f:6f:68:7c:b7:5d:f2:af:2f:b5:fc:3e:a1:bd:
                    c8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A3:5F:F2:4E:8E:E2:3F:62:BD:86:1D:C7:5B:30:F4:28:20:4D:F7
            X509v3 Authority Key Identifier:
                keyid:48:98:5C:4F:CB:B5:7F:50:73:AD:91:9D:EA:34:E7:5E:3E:59:0D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/7/48985C4FCBB57F5073AD919DEA34E75E3E590DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b491fb34e62ece17689ef26024c0927e806cd27ee3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/7/3137302e33392e3232342e302f32322d3234203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a9:72:7a:de:c7:b9:99:96:d8:76:cd:bc:47:b9:7e:4e:82:e0:
         26:cd:9e:e0:1a:ff:ad:fd:0b:ed:a0:3a:c1:0c:6b:f3:8e:17:
         c6:5b:2f:e8:ca:fa:85:73:4d:30:1f:32:05:27:6b:1a:b5:b2:
         e0:40:be:0e:b7:d8:c1:cb:ff:bf:29:a8:81:52:98:1e:50:b6:
         30:3c:d8:7e:18:66:33:4c:5c:18:99:61:82:06:48:55:56:dc:
         0a:25:bf:52:be:83:47:a9:59:ed:f1:44:f4:c0:ad:39:f0:9b:
         f9:e3:71:9d:66:a4:d2:ab:01:60:dc:5b:c1:ea:f6:6f:b5:8e:
         3a:fb:de:40:54:53:6f:9d:5d:e9:01:d5:31:9e:5e:bf:39:fa:
         b5:fa:6e:11:41:c5:20:90:30:6f:43:f0:14:b2:35:ea:e8:46:
         7c:6f:3f:73:37:63:f8:c3:59:56:29:42:80:61:ab:fd:74:5f:
         32:75:9f:c2:c9:d1:57:8d:6f:c8:98:1f:82:8f:b9:d9:d7:15:
         3d:55:85:11:d4:b9:27:79:91:5d:38:8e:51:fb:8f:f2:8f:bd:
         93:91:40:ed:2b:5a:82:25:ff:a4:b0:61:09:7b:74:a3:1d:7e:
         77:71:2c:dd:f7:d1:d4:49:c7:a4:1f:e9:d3:0f:6b:5f:85:ce:
         ba:4a:9e:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----