Route Origin Authorization

$ rpki-client -vvf rpki-rsync.e15f.net/repo/MISAKA-RPKI/7/3230392e3230392e35362e302f32322d3234203d3e203537363935.roa
File:                     3230392e3230392e35362e302f32322d3234203d3e203537363935.roa (raw, json)
Hash identifier:          j5WSjVs4MOvkseX3WLtnSXEX6+A/PxgL7BVEROCVa+Y=
Subject key identifier:   B5:80:45:18:17:75:51:F5:D6:C0:E3:FF:EB:DA:26:16:23:1E:74:5D
Certificate issuer:       /CN=06fc27b2b491fb34e62ece17689ef26024c0927e806cd27ee3
Certificate serial:       4E43B8DA91B931F20F468A82386191571A11A07E
Authority key identifier: 48:98:5C:4F:CB:B5:7F:50:73:AD:91:9D:EA:34:E7:5E:3E:59:0D:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b491fb34e62ece17689ef26024c0927e806cd27ee3.cer
Subject info access:      rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/7/3230392e3230392e35362e302f32322d3234203d3e203537363935.roa
Signing time:             Fri 18 Feb 2022 04:09:33 +0000
ROA not before:           Fri 18 Feb 2022 04:04:33 +0000
ROA not after:            Fri 17 Feb 2023 04:09:33 +0000
asID:                     57695
IP address blocks:        209.209.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:43:b8:da:91:b9:31:f2:0f:46:8a:82:38:61:91:57:1a:11:a0:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b491fb34e62ece17689ef26024c0927e806cd27ee3
        Validity
            Not Before: Feb 18 04:04:33 2022 GMT
            Not After : Feb 17 04:09:33 2023 GMT
        Subject: CN=B5804518177551F5D6C0E3FFEBDA2616231E745D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:17:dc:85:c2:a6:aa:28:1f:5c:74:5f:7e:d3:
                    f0:97:18:d4:83:00:8e:ff:39:74:35:2a:75:67:6b:
                    c5:0e:c1:f3:38:f1:99:a0:b6:d1:fd:5e:65:20:ab:
                    c0:78:30:e7:a4:a2:2a:5f:58:ce:94:4d:8f:d7:1f:
                    9a:e6:dd:ed:18:18:11:a0:51:84:9c:42:99:29:3f:
                    7a:7b:b9:fa:e7:4a:a1:5a:09:ac:fb:7b:ab:59:8a:
                    c2:f9:ba:f9:d1:17:40:63:26:cd:a2:db:4b:3a:e6:
                    8b:57:45:b0:2c:55:7e:ed:19:10:45:01:d3:97:48:
                    23:f6:49:f6:65:20:a2:eb:52:f5:d1:63:b6:8a:b0:
                    af:ca:d7:3c:05:d1:a9:c9:c7:82:1f:45:22:39:0e:
                    5d:76:42:45:74:a7:e7:74:c2:b5:0d:ff:ea:0e:22:
                    2a:cf:1c:42:a2:ed:e0:93:40:09:47:b2:12:4d:f6:
                    c9:18:f0:f8:81:7e:80:d2:3c:cf:3f:e0:0f:5d:b7:
                    6e:54:b2:4c:f0:db:d5:9c:ba:b4:d8:fd:b2:36:ec:
                    d4:a9:35:de:ed:a3:7d:57:a4:e6:df:7d:cb:f1:6f:
                    a9:2c:c2:5b:fb:07:fd:4e:7d:0c:7f:73:06:19:00:
                    83:81:f1:88:d3:01:f2:0d:08:94:db:e6:2a:23:32:
                    2a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:80:45:18:17:75:51:F5:D6:C0:E3:FF:EB:DA:26:16:23:1E:74:5D
            X509v3 Authority Key Identifier:
                keyid:48:98:5C:4F:CB:B5:7F:50:73:AD:91:9D:EA:34:E7:5E:3E:59:0D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/7/48985C4FCBB57F5073AD919DEA34E75E3E590DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b491fb34e62ece17689ef26024c0927e806cd27ee3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/7/3230392e3230392e35362e302f32322d3234203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:be:1e:fd:88:b0:d9:e4:fe:82:f8:b0:92:1b:ef:a6:c0:b6:
         23:b3:05:04:e8:8e:85:8e:c9:98:1c:d3:43:eb:c4:2a:04:36:
         e0:a8:65:31:ac:d4:17:55:12:ba:dc:d3:af:e0:c9:97:6b:2b:
         02:da:d5:a0:32:00:f2:a3:37:46:1c:d4:53:08:05:b8:1a:75:
         03:bc:1e:c5:22:99:a8:41:fd:9e:e1:a9:d6:5f:fa:17:c6:cc:
         91:97:2c:47:3f:b0:1f:4f:37:39:c7:d0:d4:0c:38:39:45:fe:
         7a:93:76:dc:c6:37:28:50:fe:19:24:1d:22:3f:88:69:22:88:
         74:ed:38:63:26:a6:e9:95:5b:c9:7f:7a:bc:ac:7f:44:26:0a:
         3d:e7:4c:c6:4f:79:59:57:f7:26:3e:6f:65:b0:5e:e8:66:f8:
         0c:72:f0:da:de:5a:ed:52:ef:c8:58:2e:26:e3:91:1f:d5:0c:
         18:7a:02:64:ea:6f:93:0f:37:92:79:d7:5f:c3:b9:8e:3a:bc:
         a9:bd:f8:d8:57:48:b1:20:9f:09:41:ce:08:b3:a3:9f:25:09:
         7c:f3:fa:89:40:49:2e:50:6b:94:ff:c2:d1:78:4c:b8:d2:66:
         fc:86:f6:b2:ad:7a:3a:9a:00:ce:7e:91:89:ca:8e:f5:0f:fb:
         ef:0c:79:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----