Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/5/32332e3136322e3136382e302f32342d3234203d3e203135333533.roa
File:                     32332e3136322e3136382e302f32342d3234203d3e203135333533.roa (raw, json)
Hash identifier:          eUGG1RqL+vnntqRDuRF1ttAQPOPTnP5FHkrCzTYyvTw=
Subject key identifier:   BC:F5:61:BD:8A:8D:A0:82:5E:F4:D4:68:CD:8B:2B:E1:DB:39:A8:14
Certificate issuer:       /CN=7c4424b0ef761568c29557b5f128d49a127610ee55feac9235
Certificate serial:       4BAD1F264EE796E8D38FFB28EC6C53CF0D4B4C40
Authority key identifier: A9:80:C9:07:35:84:AE:DF:F8:00:CA:D3:F0:89:96:83:DE:9E:B0:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef761568c29557b5f128d49a127610ee55feac9235.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/5/32332e3136322e3136382e302f32342d3234203d3e203135333533.roa
Signing time:             Wed 27 Sep 2023 22:09:19 +0000
ROA not before:           Wed 27 Sep 2023 22:04:19 +0000
ROA not after:            Wed 25 Sep 2024 22:09:19 +0000
asID:                     15353
IP address blocks:        23.162.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ad:1f:26:4e:e7:96:e8:d3:8f:fb:28:ec:6c:53:cf:0d:4b:4c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4424b0ef761568c29557b5f128d49a127610ee55feac9235
        Validity
            Not Before: Sep 27 22:04:19 2023 GMT
            Not After : Sep 25 22:09:19 2024 GMT
        Subject: CN=BCF561BD8A8DA0825EF4D468CD8B2BE1DB39A814
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a9:69:ba:89:b4:cb:72:38:80:64:ca:8b:bd:
                    39:a8:be:02:ef:66:6f:cf:c0:ac:90:ad:15:0b:1f:
                    cf:eb:02:76:b4:cf:f7:16:b5:ed:e1:32:dd:b2:5c:
                    c5:19:af:bd:e1:2e:7a:6d:04:5a:c6:4a:f4:fd:f8:
                    bc:f4:41:b6:e0:c3:f7:6b:d7:ae:e8:33:4d:57:b1:
                    0b:47:f7:1f:43:4d:c3:ee:6e:4a:49:e3:9e:ac:6a:
                    19:20:76:95:44:27:3a:f8:7a:57:3c:6a:a5:bc:27:
                    3b:32:28:2e:f4:ba:ba:84:91:ae:5c:17:f7:4a:d0:
                    eb:1e:0f:64:2c:4b:ae:64:98:2f:25:c4:48:2a:ec:
                    2e:50:c0:d4:3c:c3:de:e9:ea:ae:18:ac:ce:ac:16:
                    e2:e8:2c:c2:4a:64:1e:39:e4:f3:62:95:a5:b6:8f:
                    b1:78:8e:71:f1:40:86:56:d3:4a:d2:ad:19:4d:25:
                    55:69:59:bb:4a:44:90:d5:cd:a5:84:3e:f0:47:85:
                    ad:83:5a:18:6b:b4:f6:a8:59:77:b5:02:61:3f:3c:
                    d5:7f:58:2f:63:3b:a7:1b:a2:c2:b7:25:41:1e:59:
                    10:55:07:e1:69:bf:8f:40:2d:81:5d:4d:6e:6d:54:
                    3a:8a:24:ea:95:09:1b:5d:bd:a3:80:62:d3:37:b2:
                    af:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F5:61:BD:8A:8D:A0:82:5E:F4:D4:68:CD:8B:2B:E1:DB:39:A8:14
            X509v3 Authority Key Identifier:
                keyid:A9:80:C9:07:35:84:AE:DF:F8:00:CA:D3:F0:89:96:83:DE:9E:B0:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/5/A980C9073584AEDFF800CAD3F0899683DE9EB0D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5138de2d-512a-4692-8c53-d2d9a6ceb549/7c4424b0ef761568c29557b5f128d49a127610ee55feac9235.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/59183bf3-1acf-4a20-8fa4-b467c2c2260b/5/32332e3136322e3136382e302f32342d3234203d3e203135333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.162.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:45:43:1d:7a:d1:8b:f4:6b:ee:3e:49:f8:4b:2f:08:33:f2:
         cf:87:6e:a0:6b:55:e9:3b:be:10:97:74:b1:08:a3:91:89:84:
         4d:67:b5:ad:a0:20:6f:77:4f:dc:65:fe:6b:f8:34:6e:73:85:
         d2:5c:cb:54:bb:2e:38:77:ae:75:fd:c2:a4:50:49:84:4e:20:
         98:fc:a8:90:da:36:ca:b2:7a:1d:b9:30:73:44:56:0b:8e:8b:
         9d:1a:d2:31:e2:c2:d1:f1:81:20:65:19:47:42:e4:b0:1c:1c:
         c7:92:cc:11:00:51:ec:0a:05:ce:c2:7d:1a:d0:d5:66:c6:47:
         2f:5a:f0:7a:c8:40:9b:b8:ea:91:b1:39:4a:1d:fe:0b:6e:7d:
         87:bf:6f:02:e7:6e:74:97:24:6c:50:ff:cf:0f:98:3d:36:45:
         f9:91:5b:6b:16:1c:84:7f:a6:0d:a9:ef:ac:d2:d3:75:e0:e8:
         13:99:f8:0f:d5:52:9a:0f:66:86:f4:73:00:ae:d7:a4:d2:5d:
         c2:be:ff:84:b7:3a:b7:f0:42:8b:12:6c:ef:05:00:ad:da:07:
         27:7f:6e:05:05:ca:fa:39:40:3e:2a:96:09:23:38:f6:64:a6:
         5b:9a:c4:42:c5:87:fe:7a:ee:16:2a:cd:ec:6f:3a:41:bb:bb:
         ef:4d:55:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----