Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3139203d3e203136353039.roa
File:                     32332e38382e3232342e302f31392d3139203d3e203136353039.roa (raw, json)
Hash identifier:          hbAKb65KH3Um7v9POoc+UiDNarzMd4Mmx1R9Ey1wuOY=
Subject key identifier:   94:66:1C:D5:B9:A4:F2:41:8E:62:EE:41:ED:6C:71:8F:F3:06:DC:0C
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       5A044FF3D1A1DA04D88C2F3F21DE369B140C7883
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3139203d3e203136353039.roa
Signing time:             Mon 14 Oct 2024 14:29:36 +0000
ROA not before:           Mon 14 Oct 2024 14:24:36 +0000
ROA not after:            Mon 13 Oct 2025 14:29:36 +0000
asID:                     16509
IP address blocks:        23.88.224.0/19 maxlen: 19
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:04:4f:f3:d1:a1:da:04:d8:8c:2f:3f:21:de:36:9b:14:0c:78:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 14 14:24:36 2024 GMT
            Not After : Oct 13 14:29:36 2025 GMT
        Subject: CN=94661CD5B9A4F2418E62EE41ED6C718FF306DC0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:87:8b:26:e6:e8:71:4d:72:68:67:ba:84:3a:
                    8f:c6:72:69:ad:cd:75:27:17:90:39:af:6b:6a:78:
                    a4:b0:97:f1:a1:a3:70:6f:16:2a:55:82:c5:08:48:
                    1c:31:5c:fd:02:e6:3e:49:9f:61:54:b2:83:5a:81:
                    96:79:a2:58:55:5c:0c:66:2b:0d:b1:ac:43:dc:f7:
                    d7:be:ab:22:14:d4:fb:53:ee:dd:a9:36:a3:4e:46:
                    8e:24:6e:10:3c:29:91:f7:95:ff:cb:84:a7:96:5b:
                    2c:72:c5:ee:86:e8:b3:44:f3:1c:73:39:9b:55:f9:
                    30:57:fa:10:34:d3:9d:66:31:de:33:18:4b:86:66:
                    81:6d:d6:3d:3f:b0:c7:2e:1f:42:02:15:13:ad:e3:
                    1b:52:99:c4:f6:0a:c7:fe:a3:fd:4c:fe:d2:32:98:
                    fe:38:fb:79:d2:bb:05:80:0a:93:da:96:6f:fa:90:
                    fa:a2:d1:f9:60:83:d5:3e:c7:c8:10:15:d3:23:a7:
                    ff:50:29:ff:42:cb:2b:ab:3d:d8:cc:e4:b1:bb:62:
                    d3:24:c7:1d:a0:5e:cf:a6:da:83:c8:05:e0:39:65:
                    f4:cc:8c:10:ea:75:86:cd:7d:e2:2a:7a:14:67:e7:
                    91:15:1f:ba:55:8f:6b:75:24:f5:9a:20:c9:ac:46:
                    ae:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:66:1C:D5:B9:A4:F2:41:8E:62:EE:41:ED:6C:71:8F:F3:06:DC:0C
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3232342e302f31392d3139203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:8b:24:ac:0b:a6:eb:5a:db:c9:f7:13:97:a3:e6:3b:9a:0b:
         f0:66:c0:74:4b:44:94:3e:ef:4b:92:54:93:e9:63:d0:02:53:
         40:56:4d:f9:84:2b:4f:28:29:32:e0:49:6a:95:e3:66:e7:a4:
         ed:e5:88:a1:f5:e2:57:f7:7a:b9:75:bd:01:72:f6:2e:cf:49:
         71:76:13:2c:3a:63:e8:e7:d9:f9:1e:ce:f7:71:27:aa:f8:31:
         d8:e9:39:eb:79:0f:b6:89:3e:da:61:67:8b:a7:c9:1d:76:d7:
         33:72:95:9e:52:78:4f:bd:e0:69:30:f7:2e:91:6b:6d:91:9d:
         44:b0:c4:3c:39:f2:8b:9f:23:38:2f:91:3c:2c:9a:ab:f4:dc:
         4e:8f:c6:a8:9d:79:24:52:2a:c7:f8:fe:eb:88:20:1d:11:f0:
         9c:65:76:12:63:25:70:0b:84:29:17:32:53:8d:dc:f4:1e:30:
         70:4b:11:e2:ea:b7:7d:0c:f1:3d:75:0d:0a:a3:fc:a9:f2:f3:
         9f:85:92:7b:a7:7a:23:a4:4a:77:1d:e4:5d:c3:bc:0d:8a:17:
         d2:fb:8d:4e:80:3d:cb:4d:e0:45:e5:92:62:81:11:ee:2a:ed:
         05:b2:31:e6:60:66:35:aa:36:f8:d0:e4:f6:4d:2e:77:f7:73:
         aa:74:2c:f6
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUWgRP89Gh2gTYjC8/Id42mxQMeIMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjQxMDE0MTQyNDM2WhcNMjUxMDEzMTQyOTM2
WjAzMTEwLwYDVQQDEyg5NDY2MUNENUI5QTRGMjQxOEU2MkVFNDFFRDZDNzE4RkYz
MDZEQzBDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIeLJubocU1y
aGe6hDqPxnJprc11JxeQOa9raniksJfxoaNwbxYqVYLFCEgcMVz9AuY+SZ9hVLKD
WoGWeaJYVVwMZisNsaxD3PfXvqsiFNT7U+7dqTajTkaOJG4QPCmR95X/y4Snllss
csXuhuizRPMcczmbVfkwV/oQNNOdZjHeMxhLhmaBbdY9P7DHLh9CAhUTreMbUpnE
9grH/qP9TP7SMpj+OPt50rsFgAqT2pZv+pD6otH5YIPVPsfIEBXTI6f/UCn/Qssr
qz3YzOSxu2LTJMcdoF7PptqDyAXgOWX0zIwQ6nWGzX3iKnoUZ+eRFR+6VY9rdST1
miDJrEauDQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFJRmHNW5pPJBjmLuQe1scY/z
BtwMMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMyMzMyZTM4MzgyZTMyMzIzNDJlMzAyZjMxMzkyZDMxMzky
MDNkM2UyMDMxMzYzNTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAUXWOAwDQYJKoZIhvcNAQELBQAD
ggEBAFSLJKwLputa28n3E5ej5juaC/BmwHRLRJQ+70uSVJPpY9ACU0BWTfmEK08o
KTLgSWqV42bnpO3liKH14lf3erl1vQFy9i7PSXF2Eyw6Y+jn2fkezvdxJ6r4Mdjp
Oet5D7aJPtphZ4unyR121zNylZ5SeE+94Gkw9y6Ra22RnUSwxDw58oufIzgvkTws
mqv03E6PxqideSRSKsf4/uuIIB0R8JxldhJjJXALhCkXMlON3PQeMHBLEeLqt30M
8T11DQqj/Kny85+FknuneiOkSncd5F3DvA2KF9L7jU6APctN4EXlkmKBEe4q7QWy
MeZgZjWqNvjQ5PZNLnf3c6p0LPY=
-----END CERTIFICATE-----