Route Origin Authorization

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/32332e3134322e32352e302f32342d3234203d3e2037303138.roa
File:                     32332e3134322e32352e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          Lb27XL8r3RHQ6rUjBPXxrnTB/NW2gSdaj/1Xn3oIVl8=
Subject key identifier:   04:77:6A:85:1D:B5:7E:05:F6:8B:14:F9:92:4D:24:16:12:BC:7A:76
Certificate issuer:       /CN=6916ebca58802cf3a872f4c02bed8746ce74cb1fabf550a95f
Certificate serial:       032799AAD8D1F72083AFD4AD9D06D5A9C233790A
Authority key identifier: 67:6E:E1:F9:D8:FD:ED:22:40:A2:60:E7:25:7B:A2:A8:CD:20:D7:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca58802cf3a872f4c02bed8746ce74cb1fabf550a95f.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/32332e3134322e32352e302f32342d3234203d3e2037303138.roa
Signing time:             Fri 23 Dec 2022 00:07:51 +0000
ROA not before:           Fri 23 Dec 2022 00:02:51 +0000
ROA not after:            Fri 22 Dec 2023 00:07:51 +0000
asID:                     7018
IP address blocks:        23.142.25.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:27:99:aa:d8:d1:f7:20:83:af:d4:ad:9d:06:d5:a9:c2:33:79:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6916ebca58802cf3a872f4c02bed8746ce74cb1fabf550a95f
        Validity
            Not Before: Dec 23 00:02:51 2022 GMT
            Not After : Dec 22 00:07:51 2023 GMT
        Subject: CN=04776A851DB57E05F68B14F9924D241612BC7A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:94:7b:80:51:fa:10:65:d2:b6:29:2d:be:b8:
                    d9:74:12:23:e1:60:4b:9d:f0:6e:20:5d:6f:98:f9:
                    4a:0c:f4:2b:14:95:07:e5:70:1f:69:2a:75:b6:26:
                    90:67:75:b4:cd:79:5e:7f:57:b4:35:1c:64:2b:3c:
                    2d:02:4f:0c:26:50:16:35:db:c6:4f:ea:b4:e4:89:
                    8e:a6:09:ef:65:25:5d:44:4e:11:dc:0b:4d:30:1f:
                    1e:d4:c6:52:0c:65:9b:78:a7:7b:17:8e:37:d9:b7:
                    d7:c6:5c:1b:c6:2a:09:26:15:07:71:ba:71:c2:df:
                    92:99:90:06:1f:8f:50:89:9b:2e:ea:4d:eb:a3:43:
                    8d:8a:d4:15:be:37:0c:6c:33:ce:64:fb:4f:a3:3b:
                    1b:65:6c:7b:f2:b5:65:4b:ba:89:08:16:34:5f:b6:
                    3d:7e:c2:e4:db:ff:3b:42:4b:b5:75:3b:45:4c:24:
                    4b:d4:a1:e9:8e:60:30:e0:1a:37:e1:d5:26:b8:06:
                    00:c4:c5:74:b3:26:fe:da:63:cf:34:d0:ff:1d:ee:
                    bd:b1:54:46:a2:d1:9e:d7:a8:72:21:db:6a:14:d9:
                    07:09:42:b1:0c:12:50:00:c4:72:d4:1b:23:16:bb:
                    16:f7:2e:35:e8:97:17:1c:94:94:79:7b:e5:e3:a0:
                    75:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:77:6A:85:1D:B5:7E:05:F6:8B:14:F9:92:4D:24:16:12:BC:7A:76
            X509v3 Authority Key Identifier:
                keyid:67:6E:E1:F9:D8:FD:ED:22:40:A2:60:E7:25:7B:A2:A8:CD:20:D7:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/676EE1F9D8FDED2240A260E7257BA2A8CD20D787.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3098fc14-29c9-4916-b03a-ae4a2af101cd/6916ebca58802cf3a872f4c02bed8746ce74cb1fabf550a95f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f8e7d867-c35e-4e69-a815-ba1e9b336d62/0/32332e3134322e32352e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.142.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:f0:d2:26:09:27:1f:a0:3e:6a:07:7b:11:e2:e5:31:5b:de:
         92:52:3e:95:f1:69:ff:8b:01:f2:cd:18:69:b7:c3:fc:49:58:
         e7:3a:cc:0f:32:ea:86:3e:ca:ab:a9:04:3b:91:14:4a:9c:55:
         65:3c:08:c1:a5:1e:1b:cd:df:5c:a4:12:0c:40:b3:a1:73:e6:
         cb:86:79:ff:dd:1a:08:c4:78:78:83:0e:ed:38:66:41:bc:3c:
         8f:59:36:7c:ba:63:29:12:b6:0b:c8:38:5c:a9:24:c6:77:85:
         99:93:81:37:09:7e:16:54:d4:73:83:ea:e9:14:f2:e9:93:7f:
         c1:cc:b6:67:b2:ae:08:4e:3c:4d:d3:fc:95:31:62:36:67:a5:
         f5:cb:24:d4:e5:95:74:2d:3d:7b:26:79:42:97:42:8d:ba:10:
         00:5e:c5:f1:94:f9:9d:dc:11:a2:26:3e:a7:19:a4:bc:8c:85:
         a8:aa:2a:66:50:81:7d:03:1f:5f:33:d7:c8:5d:b3:fc:20:8c:
         24:53:c7:8a:c2:34:76:01:62:07:86:2b:8a:0a:a2:ab:c7:0d:
         74:58:73:eb:2a:40:92:59:00:51:45:0f:3e:66:01:83:00:aa:
         a9:f2:ef:df:e5:f7:65:26:22:15:37:7f:1c:ad:75:58:f8:5b:
         e9:45:f0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----