Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/2/32332e3136342e3135322e302f32332d3234203d3e203630383538.roa
File:                     32332e3136342e3135322e302f32332d3234203d3e203630383538.roa (raw, json)
Hash identifier:          dlmM95wN8CN2N3Gtwt4ehQTh1/PHw4HeKeH2+exjMUM=
Subject key identifier:   EE:4E:81:2D:80:11:79:88:55:01:52:B6:5F:6B:EE:1B:E4:03:25:89
Certificate issuer:       /CN=d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df
Certificate serial:       6D59461A7780B0CF5314FA6C972522AD6BDD01D0
Authority key identifier: 1A:E9:05:CA:D2:46:1E:1C:76:66:49:9F:2F:7D:68:BA:DF:E7:81:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/2/32332e3136342e3135322e302f32332d3234203d3e203630383538.roa
Signing time:             Tue 21 May 2024 12:05:00 +0000
ROA not before:           Tue 21 May 2024 12:00:00 +0000
ROA not after:            Tue 20 May 2025 12:05:00 +0000
asID:                     60858
IP address blocks:        23.164.152.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:59:46:1a:77:80:b0:cf:53:14:fa:6c:97:25:22:ad:6b:dd:01:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df
        Validity
            Not Before: May 21 12:00:00 2024 GMT
            Not After : May 20 12:05:00 2025 GMT
        Subject: CN=EE4E812D80117988550152B65F6BEE1BE4032589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ae:9e:41:90:c3:99:03:5c:9d:f3:17:f8:07:
                    6a:ed:0a:bc:da:cb:88:83:d3:5c:eb:29:25:9c:85:
                    d3:a6:04:7d:5e:b1:7c:91:6c:8f:9b:24:d6:f2:9f:
                    ca:b0:a9:ed:94:2f:ce:b6:73:82:3b:40:ae:56:03:
                    27:81:ee:b2:be:d9:0c:13:99:6b:86:fe:aa:e3:e3:
                    46:f5:5f:f1:aa:5e:c1:0f:82:86:ce:8d:ad:33:e3:
                    e2:da:bd:eb:16:68:c4:82:bd:1f:ec:82:6c:31:32:
                    88:5b:54:d8:f0:83:e7:16:15:51:20:86:34:6e:87:
                    4d:47:04:84:1d:38:92:ac:dc:e2:6c:a0:45:b9:d6:
                    93:b9:f4:3f:06:9d:97:44:60:06:77:5c:86:64:08:
                    77:cb:44:af:e5:d2:b2:f0:b1:0c:33:b8:dc:86:6a:
                    7e:b1:64:c2:1e:76:e7:81:a0:15:e1:a8:6d:c8:85:
                    08:08:1c:c9:f8:60:74:83:96:34:4c:12:70:0c:06:
                    bc:37:42:b4:3b:f0:ff:1f:9c:3b:fd:9e:8d:ef:d8:
                    71:63:87:e7:3d:0e:6c:53:b1:80:ce:bd:29:3b:8e:
                    79:36:91:5c:88:5d:01:9e:ff:47:78:35:1e:f5:1c:
                    30:5f:8a:30:1a:fc:8f:2e:eb:e4:39:1b:18:96:94:
                    65:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4E:81:2D:80:11:79:88:55:01:52:B6:5F:6B:EE:1B:E4:03:25:89
            X509v3 Authority Key Identifier:
                keyid:1A:E9:05:CA:D2:46:1E:1C:76:66:49:9F:2F:7D:68:BA:DF:E7:81:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/2/1AE905CAD2461E1C7666499F2F7D68BADFE781BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a20be938d311f64dbe5a93065e1d30b29cf0a83df.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/04032c8f-1d57-4c3b-9043-a0e7febf167d/2/32332e3136342e3135322e302f32332d3234203d3e203630383538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.164.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:31:c4:df:87:8c:39:be:fa:b0:ee:59:a2:de:31:e4:19:31:
         d2:08:20:13:e8:0d:17:c4:30:82:5c:34:c3:75:43:cd:90:e3:
         c1:6f:c5:6c:5d:5f:bb:be:e8:c3:b3:5a:04:c6:2e:9e:00:ae:
         c4:b1:29:3d:41:ea:fa:2f:67:00:24:29:c8:90:35:05:21:c8:
         ad:05:a9:36:05:d4:55:50:7a:c6:85:88:50:47:ff:bf:65:93:
         1c:8c:82:fe:95:b4:7d:b1:da:42:12:d1:5d:6f:f1:bf:79:4c:
         ef:ca:5f:cd:f5:b4:cc:db:01:d9:c4:39:03:e0:fe:3b:1d:cb:
         d7:e5:c9:42:59:cf:c4:a0:fa:d8:dc:d9:80:a6:c1:ca:20:ce:
         ed:06:87:93:f9:3c:ae:3a:86:6d:87:7a:69:71:3a:a4:67:c1:
         81:f5:80:ff:40:d0:b5:4a:fb:a5:d1:41:22:21:9b:41:40:fb:
         18:d6:c6:7a:d7:3f:77:16:22:60:6e:c0:b9:69:f8:bf:0e:f7:
         02:74:05:8e:bb:bf:8f:86:83:4c:32:7e:02:ec:85:c0:c8:be:
         b5:2f:ad:36:40:6e:24:66:1f:c7:b8:7f:81:dd:61:7a:9a:a8:
         ea:67:2b:50:93:b1:07:2b:de:7e:f8:2a:13:6c:0c:29:6c:e5:
         eb:44:a6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----