Route Origin Authorization

$ rpki-client -vvf rpki-rsync.e15f.net/repo/MISAKA-RPKI/7/3230392e3230392e35362e302f32322d3234203d3e20393137.roa
File:                     3230392e3230392e35362e302f32322d3234203d3e20393137.roa (raw, json)
Hash identifier:          wZiA+rt/upIu8OzNFTX5pXo4jX8r7Vqo5ltwAryZ9X8=
Subject key identifier:   96:2C:68:2A:1D:19:CA:88:90:79:03:1D:4E:43:31:A5:71:72:38:6E
Certificate issuer:       /CN=06fc27b2b491fb34e62ece17689ef26024c0927e806cd27ee3
Certificate serial:       45E790690ABE7FE493342AC086A1E1EFB92AF4AB
Authority key identifier: 48:98:5C:4F:CB:B5:7F:50:73:AD:91:9D:EA:34:E7:5E:3E:59:0D:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b491fb34e62ece17689ef26024c0927e806cd27ee3.cer
Subject info access:      rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/7/3230392e3230392e35362e302f32322d3234203d3e20393137.roa
Signing time:             Tue 14 Jun 2022 01:30:23 +0000
ROA not before:           Tue 14 Jun 2022 01:25:23 +0000
ROA not after:            Tue 13 Jun 2023 01:30:23 +0000
asID:                     917
IP address blocks:        209.209.56.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:e7:90:69:0a:be:7f:e4:93:34:2a:c0:86:a1:e1:ef:b9:2a:f4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b491fb34e62ece17689ef26024c0927e806cd27ee3
        Validity
            Not Before: Jun 14 01:25:23 2022 GMT
            Not After : Jun 13 01:30:23 2023 GMT
        Subject: CN=962C682A1D19CA889079031D4E4331A57172386E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:cb:f2:d7:b3:68:13:6e:79:eb:d8:27:0b:b3:
                    a3:0d:bc:f4:47:cf:25:52:a5:e0:7f:e6:78:10:d3:
                    a5:10:0f:e7:b4:e3:95:26:c0:1a:3f:cd:1a:f0:75:
                    58:3c:c8:80:e8:7d:45:28:fd:0d:b7:64:0f:6d:9e:
                    9a:98:a0:e0:fa:6d:2b:4d:80:2b:b6:25:ac:5a:0b:
                    ac:e1:d5:f9:8b:94:79:f5:35:13:55:09:72:37:4e:
                    75:b7:24:d9:ad:84:7c:f4:65:da:22:94:f1:94:d2:
                    d6:9c:79:7b:af:20:c2:03:80:70:39:f4:d4:50:b7:
                    2b:1a:98:ea:fc:e2:27:7d:46:91:55:82:a1:78:48:
                    e4:3a:ba:58:d5:92:ab:a0:c0:f2:54:04:d1:3b:e9:
                    bb:94:ee:71:a3:61:6f:37:37:ea:62:ce:3a:f5:b9:
                    82:a2:06:a5:e4:42:59:8b:7a:90:58:d6:1e:07:4e:
                    7f:84:ad:aa:61:31:9c:a7:65:ba:7b:1c:aa:ea:04:
                    99:19:7c:8a:2e:73:c5:3d:c0:a1:a9:de:d7:26:0b:
                    9c:a7:d9:64:8f:9e:4b:a9:a0:03:2a:ba:cb:95:ee:
                    21:f9:d3:9f:dc:e6:3c:a7:c7:22:a4:3a:ba:56:b5:
                    c7:d7:de:2d:40:20:45:b3:2b:96:36:8d:16:7f:08:
                    c2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:2C:68:2A:1D:19:CA:88:90:79:03:1D:4E:43:31:A5:71:72:38:6E
            X509v3 Authority Key Identifier:
                keyid:48:98:5C:4F:CB:B5:7F:50:73:AD:91:9D:EA:34:E7:5E:3E:59:0D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/7/48985C4FCBB57F5073AD919DEA34E75E3E590DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b491fb34e62ece17689ef26024c0927e806cd27ee3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.e15f.net/repo/MISAKA-RPKI/7/3230392e3230392e35362e302f32322d3234203d3e20393137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:1d:c8:f8:d3:3a:f9:99:b2:ac:d7:32:4d:11:6c:ff:66:67:
         f8:7d:a1:39:48:da:31:76:91:0f:da:4c:d3:02:9b:65:39:bb:
         25:6c:be:e9:47:5a:31:01:70:18:d4:dd:5c:18:62:25:45:69:
         49:78:84:e6:7b:a3:3f:b6:ad:1d:cf:0f:b7:72:5a:3a:26:20:
         17:a0:1e:0c:7f:22:54:1b:d3:a4:c5:5c:f4:65:8d:27:6a:a9:
         e2:e8:94:d1:4f:37:bb:73:1f:31:3b:91:4a:a8:42:67:60:02:
         5f:ab:8d:73:e7:ec:f9:c2:14:91:57:f1:ca:18:f9:3e:72:04:
         dc:cc:0d:7c:2c:fc:95:59:7f:7d:dc:ae:54:74:67:ba:46:38:
         92:40:40:98:28:e7:d0:b4:35:aa:3b:f9:6c:ee:36:9a:11:67:
         b7:59:44:22:8d:d9:db:f6:35:4e:3d:98:77:e3:9f:04:a8:a3:
         c1:b1:e7:ad:94:e8:98:15:e4:25:51:5d:e4:70:81:3e:4b:7f:
         c0:1e:80:e1:8b:05:99:aa:3d:fd:12:97:19:aa:43:f8:f5:78:
         c1:07:d5:95:69:30:6b:81:ca:f1:69:a3:08:a9:0a:2a:e0:5a:
         f9:5f:09:31:b6:fe:86:c6:12:72:76:78:9e:92:c4:fb:4f:40:
         9c:5b:ea:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----