Route Origin Authorization

$ rpki-client -vvf rsync.roa.tohunet.com:3873/repo/Kemono_Network_INC/0/32332e3134302e34302e302f32342d3234203d3e20323034353335.roa
File:                     32332e3134302e34302e302f32342d3234203d3e20323034353335.roa (raw, json)
Hash identifier:          dasgikTSFMtMRo2yQsrIWvcbwQdAA0ONJuF6AxBdGis=
Subject key identifier:   40:E8:4C:97:15:FA:EC:12:C2:51:15:03:51:0C:2C:1A:71:0D:DB:E7
Certificate issuer:       /CN=8815147978c96b2dc5313f8029c6058a1c2f53fb32096dd4f2
Certificate serial:       3D197F4BC7728A588750497F878517D6E58CB539
Authority key identifier: 20:F1:5D:A2:1E:F6:7E:41:16:98:B8:0D:1C:C3:B8:C7:76:61:21:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d765c4c6-963d-413e-b79d-bbd13dd7908d/8815147978c96b2dc5313f8029c6058a1c2f53fb32096dd4f2.cer
Subject info access:      rsync://rsync.roa.tohunet.com:3873/repo/Kemono_Network_INC/0/32332e3134302e34302e302f32342d3234203d3e20323034353335.roa
Signing time:             Sat 21 Jan 2023 03:05:50 +0000
ROA not before:           Sat 21 Jan 2023 03:00:50 +0000
ROA not after:            Sat 20 Jan 2024 03:05:50 +0000
asID:                     204535
IP address blocks:        23.140.40.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:19:7f:4b:c7:72:8a:58:87:50:49:7f:87:85:17:d6:e5:8c:b5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8815147978c96b2dc5313f8029c6058a1c2f53fb32096dd4f2
        Validity
            Not Before: Jan 21 03:00:50 2023 GMT
            Not After : Jan 20 03:05:50 2024 GMT
        Subject: CN=40E84C9715FAEC12C2511503510C2C1A710DDBE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:93:c0:2f:fe:9e:6b:0c:3f:ca:e7:22:26:ab:
                    49:15:0d:4a:ef:58:7f:d4:a4:88:ba:b7:29:01:b7:
                    ca:ad:e6:a4:58:85:af:38:4d:74:82:8a:2a:d5:b6:
                    fe:22:f0:7c:14:2c:9d:39:14:88:a0:33:7c:b6:ae:
                    07:03:5b:56:f4:12:9e:c7:5a:4e:41:6e:ca:fc:13:
                    d7:c0:f1:2e:12:56:16:17:26:92:9a:a4:70:c3:bd:
                    de:15:09:7b:33:82:c2:ae:a1:3a:1a:59:6f:b8:10:
                    49:84:cd:a2:8b:54:6a:db:d7:62:13:46:90:7d:58:
                    60:50:4e:24:19:33:cc:d0:5f:84:5e:f5:0b:39:d9:
                    5c:0b:49:e6:62:da:3a:7b:13:a4:3a:bf:7e:3e:fa:
                    6d:36:7f:76:61:80:af:d6:50:eb:9d:6f:4a:d5:3f:
                    cd:49:dc:90:df:67:8b:89:16:95:c8:63:83:50:71:
                    b8:c1:da:f3:53:28:36:d8:49:d4:56:43:3a:77:c6:
                    14:20:a1:0f:d2:c8:fd:08:f7:dd:b9:92:e7:6b:2f:
                    39:90:82:7f:97:7f:bc:b8:e2:35:eb:71:72:29:4e:
                    e4:e7:59:37:65:e8:90:c2:2c:f5:39:ea:d8:bc:4b:
                    86:bf:55:19:a7:b3:5c:b4:14:d3:d4:ac:d3:71:85:
                    a9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E8:4C:97:15:FA:EC:12:C2:51:15:03:51:0C:2C:1A:71:0D:DB:E7
            X509v3 Authority Key Identifier:
                keyid:20:F1:5D:A2:1E:F6:7E:41:16:98:B8:0D:1C:C3:B8:C7:76:61:21:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.roa.tohunet.com:3873/repo/Kemono_Network_INC/0/20F15DA21EF67E411698B80D1CC3B8C77661210D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d765c4c6-963d-413e-b79d-bbd13dd7908d/8815147978c96b2dc5313f8029c6058a1c2f53fb32096dd4f2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.roa.tohunet.com:3873/repo/Kemono_Network_INC/0/32332e3134302e34302e302f32342d3234203d3e20323034353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:24:ce:b4:d1:fe:3a:19:da:4d:5d:31:ac:43:21:bd:ad:62:
         20:87:3a:b1:90:be:c5:69:48:02:48:d0:b2:1c:42:12:33:33:
         43:b1:d8:b0:b0:55:65:d4:30:7a:ed:4b:5b:5c:d3:55:9a:33:
         87:ad:f2:51:2f:bb:bb:49:74:13:d5:9b:6b:7b:97:db:ee:3e:
         9f:75:4f:7e:77:fc:a2:53:3a:eb:5c:b8:3b:83:31:d1:76:f0:
         17:1c:89:e5:6a:e5:42:3c:d0:10:91:8d:76:8b:76:d5:4f:0e:
         cf:58:b8:a2:30:3d:f5:b2:82:b0:1f:f5:23:22:1d:3f:48:b8:
         59:fe:3f:da:92:f3:bb:80:87:20:eb:df:f8:07:62:37:f4:5b:
         53:56:07:92:90:33:10:9c:49:d7:2f:18:30:d4:45:cc:6d:f9:
         d8:66:da:7d:63:2d:a8:74:93:1d:89:79:59:1c:b2:7f:e1:2b:
         2e:6f:fd:87:85:67:29:33:36:6e:ec:ee:5f:48:c1:ff:06:27:
         3f:fa:5c:d8:cf:09:1c:ec:e1:b7:f2:0f:36:b3:22:6c:48:8b:
         10:7e:75:b4:45:1c:cd:02:52:ae:20:ef:ef:6d:ce:d1:4b:73:
         8b:6a:34:b2:bd:6b:1e:d6:f8:c7:40:9e:a7:c8:a6:85:ce:69:
         5c:f3:4a:72
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----