Route Origin Authorization

$ rpki-client -vvf rpki.qs.nu/repo/qsnu/1/32332e3134392e3131322e302f32342d3234203d3e20323032333134.roa
File:                     32332e3134392e3131322e302f32342d3234203d3e20323032333134.roa (raw, json)
Hash identifier:          bmXGkDoE9uY+WirY3YQVHAOetHjQqHEOyAVXFdLGZTE=
Subject key identifier:   5E:A0:7A:F0:46:9E:79:99:42:5F:37:C6:77:00:B8:5F:12:7B:27:46
Certificate issuer:       /CN=cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8
Certificate serial:       427EDBF00EF38FA420FCC90E25ADE39373423BBB
Authority key identifier: 24:AB:EF:D2:EF:B3:FE:31:9A:14:51:9E:A4:98:91:20:B0:AE:CA:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8.cer
Subject info access:      rsync://rpki.qs.nu/repo/qsnu/1/32332e3134392e3131322e302f32342d3234203d3e20323032333134.roa
Signing time:             Tue 25 Jul 2023 20:33:48 +0000
ROA not before:           Tue 25 Jul 2023 20:28:48 +0000
ROA not after:            Tue 23 Jul 2024 20:33:48 +0000
asID:                     202314
IP address blocks:        23.149.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:7e:db:f0:0e:f3:8f:a4:20:fc:c9:0e:25:ad:e3:93:73:42:3b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8
        Validity
            Not Before: Jul 25 20:28:48 2023 GMT
            Not After : Jul 23 20:33:48 2024 GMT
        Subject: CN=5EA07AF0469E7999425F37C67700B85F127B2746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:7b:a9:9b:bb:c7:78:03:54:12:ca:cd:fb:10:
                    c7:f7:ed:a5:39:ee:58:54:7e:bf:60:63:88:14:b0:
                    4b:47:ea:0c:33:ec:66:4a:60:95:c8:e0:af:18:f9:
                    1d:cc:50:8b:f7:cd:f8:6e:00:5e:a7:f8:eb:76:46:
                    f4:39:c7:e6:4c:65:51:e5:aa:b6:cd:41:69:2a:37:
                    a1:8a:e6:49:54:96:89:23:ab:93:37:85:d1:5f:bc:
                    77:57:bd:5b:10:4a:75:04:e2:1f:2b:77:76:73:f9:
                    46:af:84:66:39:57:cc:a3:ef:cc:47:2b:3e:97:4c:
                    a9:b0:52:8e:55:72:7f:4b:fb:7c:d4:8b:c7:dd:0e:
                    d4:72:e3:fa:ac:0d:d1:53:ac:2e:78:54:ee:8c:84:
                    6a:1f:32:f5:52:13:6f:db:90:60:e5:90:57:27:51:
                    76:bf:c1:0b:5d:28:cd:94:01:21:d4:3f:87:fb:01:
                    f2:26:85:02:e4:05:7f:2d:d3:5f:77:4e:4a:3d:47:
                    cf:db:31:34:af:bb:8b:51:e2:f8:8a:eb:43:95:c8:
                    3a:01:42:72:dc:23:34:c8:d7:a4:93:d8:61:c2:a0:
                    53:36:e8:9e:de:92:09:f8:5c:32:83:33:df:8c:1e:
                    30:ca:fa:c2:ac:06:55:99:b0:c1:d3:12:83:6c:01:
                    6c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A0:7A:F0:46:9E:79:99:42:5F:37:C6:77:00:B8:5F:12:7B:27:46
            X509v3 Authority Key Identifier:
                keyid:24:AB:EF:D2:EF:B3:FE:31:9A:14:51:9E:A4:98:91:20:B0:AE:CA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.qs.nu/repo/qsnu/1/24ABEFD2EFB3FE319A14519EA4989120B0AECA3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.qs.nu/repo/qsnu/1/32332e3134392e3131322e302f32342d3234203d3e20323032333134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:60:e3:af:a8:1e:eb:58:6f:e3:61:56:88:6f:17:52:70:63:
         65:5d:ea:d8:15:53:63:69:dc:c8:af:3d:21:09:93:02:76:28:
         48:77:78:5d:e2:e7:aa:5c:fa:a5:ac:2f:eb:6d:c1:ec:39:ec:
         8e:9a:6c:7f:31:b7:0f:e2:1c:d4:7f:db:d0:9f:d8:9c:64:82:
         5d:ea:24:0b:7f:47:ee:0f:a4:92:d9:d3:ac:78:ec:6f:22:26:
         02:a3:de:63:04:d4:b7:12:e6:d4:b4:6b:b6:47:b6:88:d5:69:
         bb:2d:d9:b9:13:40:ca:fc:3a:f2:a2:c9:65:c8:80:ae:b5:c2:
         2d:b7:c3:ca:83:33:d3:f7:45:26:ea:39:39:ec:38:a4:5f:e1:
         5e:f2:82:f1:e5:10:9c:d7:40:81:fd:22:81:12:a4:92:f4:c3:
         4e:4e:38:78:81:7a:df:e1:40:98:8b:bf:be:84:ff:7b:43:06:
         16:fe:59:26:54:3e:ad:02:0a:4a:31:8e:6c:09:d7:27:cf:7e:
         39:3d:0a:b0:b7:65:d8:35:28:58:97:b3:43:82:4f:66:c3:0e:
         63:b6:5e:93:ff:93:7b:69:a5:c0:dc:f1:db:af:da:d9:e6:8a:
         d4:af:b8:7c:50:09:b8:27:44:d3:95:1e:e4:36:a1:9f:fb:17:
         38:6c:50:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----