Route Origin Authorization

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/1/32332e3134332e3137362e302f32342d3234203d3e203537363935.roa
File:                     32332e3134332e3137362e302f32342d3234203d3e203537363935.roa (raw, json)
Hash identifier:          cehsRwAqwBp9uhTw1CNxZO/9FRBcA175xTm9ClUSHRE=
Subject key identifier:   13:64:8A:C9:6C:4E:72:7F:CE:D9:42:5C:5F:5D:9F:99:C1:75:AD:D4
Certificate issuer:       /CN=06fc27b2b4e72b9a46de1abc1bedee255e8a50e5e626098e31
Certificate serial:       0B6B5E668E11F49C36327F6C8A5C6046B2B4B2FA
Authority key identifier: 16:93:1D:F4:91:69:3F:02:F4:41:1C:3C:35:6A:DF:EE:35:71:3A:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4e72b9a46de1abc1bedee255e8a50e5e626098e31.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/1/32332e3134332e3137362e302f32342d3234203d3e203537363935.roa
Signing time:             Tue 14 Jun 2022 23:15:06 +0000
ROA not before:           Tue 14 Jun 2022 23:10:06 +0000
ROA not after:            Tue 13 Jun 2023 23:15:06 +0000
asID:                     57695
IP address blocks:        23.143.176.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:6b:5e:66:8e:11:f4:9c:36:32:7f:6c:8a:5c:60:46:b2:b4:b2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06fc27b2b4e72b9a46de1abc1bedee255e8a50e5e626098e31
        Validity
            Not Before: Jun 14 23:10:06 2022 GMT
            Not After : Jun 13 23:15:06 2023 GMT
        Subject: CN=13648AC96C4E727FCED9425C5F5D9F99C175ADD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1e:44:19:1a:33:04:01:f5:57:bf:48:62:55:
                    82:1c:46:2e:2d:de:5b:0b:66:64:60:5a:b0:86:71:
                    3f:b6:68:40:87:85:92:06:cb:92:d0:a0:34:40:4b:
                    d0:ea:5c:e6:6e:99:99:54:6f:13:3f:c8:05:3f:97:
                    f4:77:0d:59:7d:7c:88:d3:be:88:41:06:80:dc:c1:
                    17:3d:67:12:19:ee:8b:54:9e:d2:4c:17:2e:d8:24:
                    f2:30:2f:09:a8:06:61:5c:12:77:3f:9c:e2:6b:d6:
                    cc:01:b5:a1:38:68:ff:11:e4:47:c7:26:39:ae:9c:
                    68:02:47:c4:b2:bc:a7:12:42:2c:36:fb:fa:08:bf:
                    6e:3f:76:7e:fc:96:7e:7f:61:c1:d6:24:b1:be:e6:
                    c6:c8:72:0e:41:52:38:f3:df:71:7c:9a:81:ba:11:
                    22:6f:dc:0b:66:1e:f7:60:6d:ca:97:02:05:f8:80:
                    7d:0d:cf:38:c2:e6:c1:dc:52:ab:2a:71:33:c9:0b:
                    8c:6f:23:32:14:5c:3d:46:3b:7e:0a:eb:13:c2:97:
                    15:cc:db:22:3e:66:78:97:5e:67:fd:bb:c5:ae:10:
                    20:e8:45:7f:29:57:47:0f:f0:77:dd:ca:2b:d3:e7:
                    8b:a3:0e:57:a8:17:88:40:a3:c1:15:50:27:08:e4:
                    e8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:64:8A:C9:6C:4E:72:7F:CE:D9:42:5C:5F:5D:9F:99:C1:75:AD:D4
            X509v3 Authority Key Identifier:
                keyid:16:93:1D:F4:91:69:3F:02:F4:41:1C:3C:35:6A:DF:EE:35:71:3A:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/1/16931DF491693F02F4411C3C356ADFEE35713AA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6efc8ae9-a0c6-428a-8a95-038468028928/06fc27b2b4e72b9a46de1abc1bedee255e8a50e5e626098e31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/1/32332e3134332e3137362e302f32342d3234203d3e203537363935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.143.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:6d:c7:7d:64:21:c0:ba:31:0f:b9:e3:79:e4:6e:2b:5e:2b:
         9a:8c:7d:ba:a8:0e:36:59:44:d7:aa:96:5c:1f:45:54:ea:4a:
         5f:cf:bf:cd:e7:c9:95:9d:90:94:03:70:b6:1e:e1:86:9a:88:
         f1:8b:6e:54:d9:c4:09:dd:65:f7:6a:6c:01:b5:43:50:89:1e:
         c4:84:a8:3f:3a:27:09:48:fe:7f:ae:d8:a7:6f:98:f3:ad:90:
         ba:61:d7:e4:5f:c6:d7:26:3d:08:c6:5e:0b:29:17:e1:26:9c:
         ab:50:11:7c:59:1f:6e:67:d0:5b:c8:6c:20:61:89:ca:0c:01:
         c5:36:fc:82:a6:86:b4:0a:21:a7:00:e8:6e:f0:53:48:d7:b1:
         54:f3:16:ae:7b:a1:3d:cc:5b:b7:41:79:79:f5:70:68:80:94:
         70:1d:3e:95:a8:01:3e:8f:27:76:d9:57:9b:de:7e:72:b9:b6:
         66:57:89:a0:bb:b6:a5:d7:61:a7:47:2d:2c:84:62:6e:1e:62:
         67:22:46:59:0e:74:c9:ea:d4:04:dc:2d:60:7a:7a:40:ba:3f:
         00:76:9f:d0:5e:35:36:be:57:2d:51:5c:1b:6f:8a:14:c5:c2:
         f7:32:2c:f8:11:38:ab:75:5a:ea:7d:e5:ab:a4:ea:44:50:0a:
         7f:2e:2a:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----