Route Origin Authorization

$ rpki-client -vvf rpki-rsync.e15f.net/repo/MISAKA-RPKI/7/3139392e3131392e36342e302f32332d3233203d3e20393137.roa
File:                     3139392e3131392e36342e302f32332d3233203d3e20393137.roa (raw, json)
Hash identifier:          apqGCcko39LM0Rnr9aDoz6uZm4Q/EVqKe3d912osG3g=
Subject key identifier:   1F:B3:67:3D:51:0E:FC:5F:4B:F9:54:F3:AE:B5:B5:14:62:30:80:3B
Certificate issuer:       /CN=06fc27b2b491fb34e62ece17689ef26024c0927e806cd27ee3
Certificate serial:       1C34A2ACE40CD401F4FF6BB10DD76B3FC1E86156
Authority key identifier: 48:98:5C:4F:CB:B5:7F:50:73:AD:91:9D:EA:34:E7:5E:3E:59:0D:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b491fb34e62ece17689ef26024c0927e806cd27ee3.cer
Subject info access:      rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/7/3139392e3131392e36342e302f32332d3233203d3e20393137.roa
Signing time:             Tue 14 Jun 2022 01:31:01 +0000
ROA not before:           Tue 14 Jun 2022 01:26:01 +0000
ROA not after:            Tue 13 Jun 2023 01:31:01 +0000
asID:                     917
IP address blocks:        199.119.64.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:34:a2:ac:e4:0c:d4:01:f4:ff:6b:b1:0d:d7:6b:3f:c1:e8:61:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b491fb34e62ece17689ef26024c0927e806cd27ee3
        Validity
            Not Before: Jun 14 01:26:01 2022 GMT
            Not After : Jun 13 01:31:01 2023 GMT
        Subject: CN=1FB3673D510EFC5F4BF954F3AEB5B5146230803B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d8:97:d1:38:5b:02:37:d4:c8:13:42:aa:45:
                    74:5c:ea:ab:f1:db:08:6c:8e:09:af:cf:a1:de:bc:
                    78:80:16:0e:87:fb:7f:c8:f6:9c:34:9f:ee:73:12:
                    d9:60:d7:78:38:83:5b:1d:bc:98:a7:26:21:a8:71:
                    7a:e6:13:ba:04:fb:b1:c9:de:0a:12:a3:c1:a9:ac:
                    24:a9:46:09:37:cd:c6:72:bf:64:27:da:8d:8f:dc:
                    1b:fc:58:86:d8:32:12:10:03:3c:7a:c3:ca:b0:ec:
                    c8:ec:e2:45:43:0c:1d:63:b0:ce:4e:8e:a7:d9:2c:
                    e2:4b:40:b1:88:e9:d7:77:f0:52:8b:e9:f0:67:d4:
                    88:dc:67:b2:b0:92:57:fa:60:75:e1:b0:a3:41:5c:
                    1e:86:c5:83:e8:03:24:7e:77:c3:56:50:06:31:14:
                    23:aa:dc:69:8c:a5:35:24:5c:28:35:c0:62:58:d9:
                    a1:65:4e:85:e9:1a:7c:db:69:f6:4d:65:a7:bf:28:
                    ec:38:1a:51:90:60:15:1f:fd:6b:2c:af:55:c8:cb:
                    5f:ef:7c:4b:2d:01:9b:cd:f0:14:e9:ca:de:20:16:
                    b9:69:13:46:b3:e9:93:9a:bd:43:96:4a:56:a4:84:
                    f2:0f:88:44:bb:fc:7b:5b:f2:ea:b7:83:29:ea:58:
                    62:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:B3:67:3D:51:0E:FC:5F:4B:F9:54:F3:AE:B5:B5:14:62:30:80:3B
            X509v3 Authority Key Identifier:
                keyid:48:98:5C:4F:CB:B5:7F:50:73:AD:91:9D:EA:34:E7:5E:3E:59:0D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/7/48985C4FCBB57F5073AD919DEA34E75E3E590DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b491fb34e62ece17689ef26024c0927e806cd27ee3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/7/3139392e3131392e36342e302f32332d3233203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:a4:10:eb:47:94:4c:52:39:0a:0f:35:7c:83:ef:77:96:3d:
         c1:36:2c:dc:70:62:1d:62:44:3d:49:fd:e4:cf:47:6e:83:7e:
         8a:b3:1e:eb:37:85:d6:f7:ed:d1:af:fe:5e:fe:5a:2b:94:38:
         82:6a:88:c9:66:fd:77:5e:23:61:e1:21:c3:fc:f0:96:4b:eb:
         d3:b4:d5:a1:b6:8d:bc:b0:1e:c5:b9:00:3a:b8:6b:4c:d8:74:
         59:9c:0f:bd:8c:9b:dd:06:27:bc:e4:d2:e1:f3:96:19:3c:e2:
         94:30:81:f4:b5:54:8d:76:4e:36:34:63:1c:2f:a6:d0:ad:8e:
         e1:d0:d0:97:4e:33:9b:65:99:2c:9f:de:c5:54:42:fc:25:b8:
         91:32:12:bf:dd:56:67:81:d6:c4:36:93:b8:05:98:18:c9:d8:
         1e:e7:bb:8b:55:43:59:50:0a:4b:72:2f:5e:89:ad:f3:b6:2a:
         97:ea:c3:cf:56:d1:78:05:35:ea:98:59:7b:c1:90:2e:02:11:
         11:36:8f:92:6d:42:ba:00:4b:9f:71:35:69:4a:7c:bb:e8:58:
         85:51:e9:50:2d:1e:01:5f:e1:f0:f6:ab:41:1b:07:7d:33:90:
         21:ec:26:3d:f2:03:eb:a5:6d:d2:b9:89:04:78:51:0d:9c:b4:
         dd:43:c5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----