Route Origin Authorization

$ rpki-client -vvf rpki.qs.nu/repo/qsnu/1/32332e3134392e3131322e302f32342d3234203d3e20323130303839.roa
File:                     32332e3134392e3131322e302f32342d3234203d3e20323130303839.roa (raw, json)
Hash identifier:          dmCKRiCqPTU9ouko97VC4a0pJe278xTxFBvygACcblU=
Subject key identifier:   68:86:D9:63:44:10:4D:92:70:12:28:60:1C:C7:D9:82:67:81:EE:16
Certificate issuer:       /CN=cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8
Certificate serial:       7E2ABE58B875294AB0888DB9935E2FE8026600C7
Authority key identifier: 24:AB:EF:D2:EF:B3:FE:31:9A:14:51:9E:A4:98:91:20:B0:AE:CA:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8.cer
Subject info access:      rsync://rpki.qs.nu/repo/qsnu/1/32332e3134392e3131322e302f32342d3234203d3e20323130303839.roa
Signing time:             Tue 25 Jul 2023 20:33:48 +0000
ROA not before:           Tue 25 Jul 2023 20:28:48 +0000
ROA not after:            Tue 23 Jul 2024 20:33:48 +0000
asID:                     210089
IP address blocks:        23.149.112.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:2a:be:58:b8:75:29:4a:b0:88:8d:b9:93:5e:2f:e8:02:66:00:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8
        Validity
            Not Before: Jul 25 20:28:48 2023 GMT
            Not After : Jul 23 20:33:48 2024 GMT
        Subject: CN=6886D96344104D92701228601CC7D9826781EE16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:cd:9e:49:40:d2:2d:94:c3:bc:49:40:5c:10:
                    7c:53:ac:df:a4:ce:84:f0:07:c0:33:0c:59:ca:cf:
                    77:5f:50:57:b7:15:c6:01:97:70:5e:16:99:c6:43:
                    d5:25:cb:e3:fb:3f:a1:93:7a:69:c1:6b:62:5a:7b:
                    ea:a7:46:3f:41:aa:e6:e5:fd:76:89:a7:3d:39:bf:
                    9b:18:cb:01:3b:49:d9:d2:8b:fc:10:fb:e2:ae:32:
                    c1:66:6e:00:c3:88:bb:f7:d4:8f:f8:2c:c7:93:d7:
                    4f:70:98:25:b3:ce:17:b5:5d:78:a7:02:78:29:75:
                    ac:24:d2:44:2c:55:bc:ea:3e:bd:2d:93:50:fd:5c:
                    f8:1b:f0:87:2d:e2:f3:c0:95:c0:29:09:e0:52:66:
                    f3:3d:45:49:5a:b1:e3:6f:cc:10:91:25:c8:cf:70:
                    07:67:ad:dd:64:94:68:e6:1c:1c:fa:92:09:aa:9c:
                    dc:e2:9a:0e:7d:d6:55:0c:24:bc:f7:66:9a:a6:89:
                    2f:f9:d7:88:23:46:b3:1c:85:de:02:36:6e:08:23:
                    60:ff:c8:dc:64:a9:94:b5:6b:8f:34:b2:b9:85:1b:
                    f7:7e:96:47:c5:bb:0c:c8:32:d4:86:f2:c2:18:bd:
                    9a:29:39:6d:90:45:2a:2c:ea:ca:a4:6a:f1:93:8e:
                    ac:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:86:D9:63:44:10:4D:92:70:12:28:60:1C:C7:D9:82:67:81:EE:16
            X509v3 Authority Key Identifier:
                keyid:24:AB:EF:D2:EF:B3:FE:31:9A:14:51:9E:A4:98:91:20:B0:AE:CA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.qs.nu/repo/qsnu/1/24ABEFD2EFB3FE319A14519EA4989120B0AECA3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1c804bcc-72df-429f-a7d4-aedec2326572/cbe5446eb3585d77252740048609f65d82feb30f3171b8d4c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.qs.nu/repo/qsnu/1/32332e3134392e3131322e302f32342d3234203d3e20323130303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:ec:7b:a8:b4:1d:b5:9d:35:b5:b0:e5:84:8d:5f:0f:8e:95:
         ef:cd:7f:6e:29:ab:6d:3a:23:7a:45:f8:b1:97:64:19:65:11:
         21:0e:c1:e2:15:01:21:02:64:c6:0e:86:81:8b:75:65:ab:93:
         c0:5d:55:2d:85:80:c3:84:0b:5f:49:21:3a:6d:ed:2d:06:72:
         e9:5d:a0:7c:59:91:9b:fa:4e:db:03:63:3d:43:a0:05:66:4b:
         bc:26:5f:db:7a:87:fc:9a:88:f8:69:96:b8:f7:c1:c8:0e:65:
         76:c9:7d:06:6c:0d:e9:74:1e:67:79:bc:9a:b5:05:4d:a7:79:
         d3:cd:ec:93:7d:35:ba:e8:2e:a8:53:b8:d3:81:85:0a:12:6c:
         d2:a4:4d:d4:00:90:76:fe:8b:0e:c6:30:14:b6:eb:31:ca:0a:
         e3:57:47:b4:80:22:4d:39:16:ed:d9:aa:dc:30:ec:72:4f:b0:
         bf:a0:f8:83:56:d3:25:30:0b:ba:b9:4e:cb:da:54:2f:42:82:
         71:2f:e6:f8:d9:ce:4d:46:73:25:98:16:60:05:46:39:65:46:
         7a:92:62:2a:c4:f9:2a:59:89:44:f5:9c:26:4f:95:a3:cc:cf:
         98:3c:2a:cc:4f:a3:82:c1:0e:64:f3:b8:78:18:13:d7:c1:5e:
         a0:b4:80:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----