Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7/32332e3135332e3233322e302f32342d3234203d3e203537383730.roa
File:                     32332e3135332e3233322e302f32342d3234203d3e203537383730.roa (raw, json)
Hash identifier:          axQ+lwfaNxsTMIkYwp8sfx+8RAH+rCTwuJVtjyiPGF4=
Subject key identifier:   30:77:CA:C6:C7:23:FB:F4:09:D2:E2:61:2C:32:67:04:AA:7C:6F:B9
Certificate issuer:       /CN=4b43c64a687a7f29b1e394a7fd64a6dddf2eceebbcf5cd8c44
Certificate serial:       07649CA4681D4F8B3FBBB028E9C18C75E4B1CA2B
Authority key identifier: 2F:10:9D:2D:30:06:3E:6B:C5:80:23:A5:9C:9A:87:B6:05:87:6C:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a687a7f29b1e394a7fd64a6dddf2eceebbcf5cd8c44.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7/32332e3135332e3233322e302f32342d3234203d3e203537383730.roa
Signing time:             Tue 23 May 2023 06:59:56 +0000
ROA not before:           Tue 23 May 2023 06:54:56 +0000
ROA not after:            Tue 21 May 2024 06:59:56 +0000
asID:                     57870
IP address blocks:        23.153.232.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:64:9c:a4:68:1d:4f:8b:3f:bb:b0:28:e9:c1:8c:75:e4:b1:ca:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b43c64a687a7f29b1e394a7fd64a6dddf2eceebbcf5cd8c44
        Validity
            Not Before: May 23 06:54:56 2023 GMT
            Not After : May 21 06:59:56 2024 GMT
        Subject: CN=3077CAC6C723FBF409D2E2612C326704AA7C6FB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1e:c7:c9:d8:b5:fa:54:da:06:25:f6:90:00:
                    a4:bb:fd:5e:c4:98:65:40:11:40:8b:14:8f:6c:ba:
                    b7:a0:f4:e6:8e:0a:a6:5d:ee:a1:1c:fe:22:bf:e7:
                    36:3d:b1:5b:f0:78:16:68:36:b6:56:b1:0a:cb:6c:
                    e3:19:a9:f5:00:09:fd:b3:d0:eb:85:64:29:99:d4:
                    fb:f3:eb:4f:74:92:7e:80:24:bc:1b:55:77:44:7b:
                    01:11:18:19:e2:f9:99:88:54:bf:7a:f3:09:74:e1:
                    c1:8a:f2:18:39:c3:97:91:5f:c3:a7:4e:da:aa:ac:
                    fc:3b:2b:8e:70:b8:07:a7:74:89:af:8a:14:33:62:
                    75:8d:17:69:4b:e4:79:ef:96:a0:92:33:d0:6b:12:
                    2c:4f:f3:18:7e:e0:b6:16:a5:72:01:a4:9b:f7:18:
                    d5:e2:6c:ab:0b:1a:84:1f:80:0d:fa:f3:50:cd:df:
                    80:25:1e:94:1f:86:fd:3a:87:10:ce:cb:38:f2:b7:
                    9a:b6:a1:9d:3c:9b:17:94:cb:06:d4:96:95:79:f0:
                    e4:28:9f:18:4a:4b:d1:72:97:ce:ee:1e:c9:27:68:
                    9c:9f:c4:50:93:40:31:0b:75:23:ff:75:3d:0f:6c:
                    74:fb:bf:7f:e5:fe:3f:ee:e4:16:7a:24:bc:7b:d7:
                    37:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:77:CA:C6:C7:23:FB:F4:09:D2:E2:61:2C:32:67:04:AA:7C:6F:B9
            X509v3 Authority Key Identifier:
                keyid:2F:10:9D:2D:30:06:3E:6B:C5:80:23:A5:9C:9A:87:B6:05:87:6C:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7/2F109D2D30063E6BC58023A59C9A87B605876C32.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b150e98d-80e9-45f6-bc63-6b40a3d59e9c/4b43c64a687a7f29b1e394a7fd64a6dddf2eceebbcf5cd8c44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37411d6b-3615-4a86-8673-340ce2f226ee/7/32332e3135332e3233322e302f32342d3234203d3e203537383730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.153.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:c9:66:21:21:7e:a6:6d:88:e5:84:dc:d3:f8:39:69:23:d0:
         d5:79:27:6f:05:8b:35:df:37:ef:5d:d7:95:90:99:62:d4:48:
         e8:50:43:10:17:c1:7b:09:fc:52:e8:47:99:ec:96:55:47:93:
         75:2a:6b:69:dd:e8:84:5f:37:96:d8:7f:56:15:3e:b0:d7:41:
         ed:7e:8c:83:37:f8:28:d5:23:65:6d:88:0a:de:12:26:84:48:
         d2:a0:b3:e3:5c:95:80:a7:f3:15:0b:4e:10:6b:86:b2:c7:e0:
         57:88:09:ec:e8:fa:07:5c:c1:96:33:7b:68:b4:bd:4a:eb:5a:
         af:fa:1f:11:4b:7e:76:8d:62:f3:55:d0:ec:04:7e:10:00:d6:
         9a:e4:5d:78:c9:84:e9:cc:f8:ec:d1:78:5b:36:6e:13:63:56:
         b8:f0:ba:f8:17:6e:31:9d:f9:ac:c9:a9:9e:ed:a7:1c:7f:a9:
         2e:a9:06:15:b3:9e:dd:12:21:66:48:fc:b5:14:a3:c8:6f:23:
         43:05:bc:69:33:be:3c:94:46:7e:56:18:28:f1:37:66:3b:f3:
         f7:85:d7:d9:94:fd:22:db:e2:12:a4:eb:6a:1a:66:77:68:49:
         dc:da:7e:49:2b:7b:aa:9c:fc:87:f2:d1:1c:78:f0:e6:c9:7b:
         d2:65:39:83
-----BEGIN CERTIFICATE-----
MIIFzTCCBLWgAwIBAgIUB2ScpGgdT4s/u7Ao6cGMdeSxyiswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNGI0M2M2NGE2ODdhN2YyOWIxZTM5NGE3ZmQ2NGE2ZGRk
ZjJlY2VlYmJjZjVjZDhjNDQwHhcNMjMwNTIzMDY1NDU2WhcNMjQwNTIxMDY1OTU2
WjAzMTEwLwYDVQQDEygzMDc3Q0FDNkM3MjNGQkY0MDlEMkUyNjEyQzMyNjcwNEFB
N0M2RkI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth7Hydi1+lTa
BiX2kACku/1exJhlQBFAixSPbLq3oPTmjgqmXe6hHP4iv+c2PbFb8HgWaDa2VrEK
y2zjGan1AAn9s9DrhWQpmdT78+tPdJJ+gCS8G1V3RHsBERgZ4vmZiFS/evMJdOHB
ivIYOcOXkV/Dp07aqqz8OyuOcLgHp3SJr4oUM2J1jRdpS+R575agkjPQaxIsT/MY
fuC2FqVyAaSb9xjV4myrCxqEH4AN+vNQzd+AJR6UH4b9OocQzss48reatqGdPJsX
lMsG1JaVefDkKJ8YSkvRcpfO7h7JJ2icn8RQk0AxC3Uj/3U9D2x0+79/5f4/7uQW
eiS8e9c3DwIDAQABo4ICzTCCAskwHQYDVR0OBBYEFDB3ysbHI/v0CdLiYSwyZwSq
fG+5MB8GA1UdIwQYMBaAFC8QnS0wBj5rxYAjpZyah7YFh2wyMA4GA1UdDwEB/wQE
AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu
cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzM3NDExZDZiLTM2MTUtNGE4Ni04Njcz
LTM0MGNlMmYyMjZlZS83LzJGMTA5RDJEMzAwNjNFNkJDNTgwMjNBNTlDOUE4N0I2
MDU4NzZDMzIuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy
c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0
YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2Mt
NGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTUwZTk4ZC04MGU5LTQ1ZjYtYmM2My02
YjQwYTNkNTllOWMvNGI0M2M2NGE2ODdhN2YyOWIxZTM5NGE3ZmQ2NGE2ZGRkZjJl
Y2VlYmJjZjVjZDhjNDQuY2VyMIGtBggrBgEFBQcBCwSBoDCBnTCBmgYIKwYBBQUH
MAuGgY1yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
LzM3NDExZDZiLTM2MTUtNGE4Ni04NjczLTM0MGNlMmYyMjZlZS83LzMyMzMyZTMx
MzUzMzJlMzIzMzMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNzM4MzczMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEABeZ6DANBgkqhkiG9w0BAQsFAAOCAQEAr8lmISF+pm2I5YTc0/g5
aSPQ1XknbwWLNd83713XlZCZYtRI6FBDEBfBewn8UuhHmeyWVUeTdSprad3ohF83
lth/VhU+sNdB7X6Mgzf4KNUjZW2ICt4SJoRI0qCz41yVgKfzFQtOEGuGssfgV4gJ
7Oj6B1zBljN7aLS9Sutar/ofEUt+do1i81XQ7AR+EADWmuRdeMmE6cz47NF4WzZu
E2NWuPC6+BduMZ35rMmpnu2nHH+pLqkGFbOe3RIhZkj8tRSjyG8jQwW8aTO+PJRG
flYYKPE3Zjvz94XX2ZT9ItviEqTrahpmd2hJ3Np+SSt7qpz8h/LRHHjw5sl70mU5
gw==
-----END CERTIFICATE-----