Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234302e302f32342d3234203d3e203536363535.roa
File:                     32332e38382e3234302e302f32342d3234203d3e203536363535.roa (raw, json)
Hash identifier:          6HuWrcGTtD1lqyR0MmWpTbwHHbUQMWjApvOIiK+DRRA=
Subject key identifier:   10:D8:9E:88:E2:C9:1C:BD:36:5A:AA:A4:48:40:75:2E:EC:F6:09:E5
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       3119644A1EBD66F7DADC293EB47A55BBAC7B03C5
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234302e302f32342d3234203d3e203536363535.roa
Signing time:             Fri 23 Oct 2026 12:36:58 +0000
ROA not before:           Fri 23 Oct 2026 12:31:58 +0000
ROA not after:            Fri 22 Oct 2027 12:36:58 +0000
asID:                     56655
IP address blocks:        23.88.240.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:19:64:4a:1e:bd:66:f7:da:dc:29:3e:b4:7a:55:bb:ac:7b:03:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 23 12:31:58 2026 GMT
            Not After : Oct 22 12:36:58 2027 GMT
        Subject: CN=10D89E88E2C91CBD365AAAA44840752EECF609E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:07:b0:ca:c5:4e:19:ca:97:3b:f1:a1:2f:3a:
                    5a:39:35:5e:54:1c:31:b8:d5:eb:5c:0b:c8:eb:a9:
                    f1:25:10:b9:a3:a6:96:04:fc:a6:41:7b:a4:94:3f:
                    d5:09:0f:f2:aa:84:47:09:c1:38:36:55:db:f1:8a:
                    38:cd:cb:df:27:7e:59:19:d3:19:cd:27:10:9e:68:
                    f8:81:4c:d1:0d:89:c7:35:53:a0:04:f2:d3:4b:46:
                    49:06:14:ac:c2:2a:61:24:9c:e9:8e:17:d4:fc:c1:
                    4b:97:15:b7:23:83:76:e4:b9:d2:ec:2a:7e:2c:b4:
                    d7:1e:f5:32:c7:b8:8f:c2:4f:6d:24:d7:3b:02:b5:
                    ed:c5:7f:6a:69:18:1c:22:52:f8:b1:ab:ef:4c:0c:
                    ed:25:73:98:ab:81:20:ec:84:3b:9c:22:78:ed:04:
                    64:ce:d2:61:1c:44:ae:1c:b6:17:c7:a7:c9:d6:1a:
                    29:e0:91:01:3e:81:d6:a0:11:1d:69:00:61:8e:73:
                    b7:15:6d:71:38:da:fd:d2:89:52:52:a6:a5:be:a3:
                    b2:9b:30:94:2e:da:5a:03:68:e3:5a:a0:5e:85:7c:
                    73:97:f9:cb:f9:86:6c:15:95:00:7f:ce:1d:9e:26:
                    3c:9d:b3:0b:90:a8:c4:f0:3b:a9:e7:b7:76:6b:55:
                    1d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:D8:9E:88:E2:C9:1C:BD:36:5A:AA:A4:48:40:75:2E:EC:F6:09:E5
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234302e302f32342d3234203d3e203536363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:50:ab:3c:9b:8e:85:d0:e8:25:6f:e2:8d:35:d4:93:60:73:
         8b:f0:72:97:da:00:04:8d:69:95:65:47:c3:05:d3:cc:60:15:
         ed:82:67:c4:31:34:f8:a8:15:e1:ea:c5:88:b5:36:b0:22:9a:
         14:6b:0a:0e:5f:8b:ea:d9:4c:9c:d2:ea:48:df:1c:ab:cc:76:
         39:86:99:54:cf:3c:c1:1e:aa:a2:b9:cc:9b:7c:40:a5:fd:b6:
         74:7f:df:0b:ad:78:fc:86:d5:d6:4d:04:84:35:ac:cd:ee:fc:
         b0:c2:11:dc:24:24:25:29:ff:6b:61:da:38:59:de:96:6f:36:
         ff:d2:d3:05:a3:09:af:9d:e8:a1:f2:ba:7d:04:6a:79:eb:52:
         3a:99:6f:37:29:b7:4a:75:29:99:f7:ec:53:c4:d3:f5:e8:93:
         9a:6e:d9:b5:03:1c:ab:e1:6c:af:f4:4c:17:34:ca:ab:0a:81:
         b6:13:8d:3f:2c:9a:70:b8:47:fc:64:01:a8:0c:57:2a:c6:5b:
         7e:27:79:c3:45:9f:28:bd:36:10:4f:50:87:d0:10:5b:24:d2:
         b5:e6:5f:4d:a5:99:b0:fc:e5:5d:39:1c:f2:46:44:33:af:db:
         cb:9a:55:f0:17:1a:6f:17:75:57:bd:52:b6:c9:ac:ad:25:70:
         64:27:24:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----