Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234312e302f32342d3234203d3e203536363535.roa
File:                     32332e38382e3234312e302f32342d3234203d3e203536363535.roa (raw, json)
Hash identifier:          m4suvLf6Uv4Op8X8bXYdsBUbv/Kcz9pR20JzjOZb9dU=
Subject key identifier:   66:52:01:D8:5B:FD:F0:99:07:98:DC:71:DA:91:26:2C:F6:78:CF:6C
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       47EA8B236682B73BD552C6697997D75F80A85D32
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234312e302f32342d3234203d3e203536363535.roa
Signing time:             Fri 23 Oct 2026 12:36:59 +0000
ROA not before:           Fri 23 Oct 2026 12:31:59 +0000
ROA not after:            Fri 22 Oct 2027 12:36:59 +0000
asID:                     56655
IP address blocks:        23.88.241.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:ea:8b:23:66:82:b7:3b:d5:52:c6:69:79:97:d7:5f:80:a8:5d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 23 12:31:59 2026 GMT
            Not After : Oct 22 12:36:59 2027 GMT
        Subject: CN=665201D85BFDF0990798DC71DA91262CF678CF6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:97:ef:30:30:8b:a8:da:ad:be:4d:90:d2:75:
                    82:eb:46:70:43:d0:c3:31:be:f5:01:9d:41:eb:29:
                    5e:57:50:02:df:d8:92:97:29:b1:58:58:a8:51:80:
                    15:29:16:b8:2c:e6:70:63:63:a4:d8:f9:6a:f7:23:
                    1d:30:f5:2d:81:54:49:91:f6:26:1f:b3:f5:8b:6a:
                    96:f2:96:74:b8:2d:54:75:c7:a5:40:95:ab:9b:ec:
                    6e:ec:e3:26:71:e1:c5:e6:14:ab:22:d5:23:42:f5:
                    7c:2d:ad:88:95:8b:b4:93:26:4b:85:68:e7:94:5f:
                    2f:b2:d2:3a:fd:b3:59:97:4b:53:81:37:d5:a2:4f:
                    c3:c0:11:de:99:7e:ce:bf:76:5f:61:45:2f:95:5f:
                    16:34:eb:d5:15:03:62:36:a9:96:f6:14:23:bd:0e:
                    85:4b:0f:ab:17:30:04:d3:3f:a9:cc:00:c1:6a:a3:
                    8c:1e:f8:0b:98:99:c9:cc:ea:3d:b9:6d:25:39:94:
                    4b:d7:46:50:8e:b3:9e:1c:d0:ea:a6:e5:05:84:26:
                    f2:36:e3:af:ed:90:5d:fd:e8:5c:b9:01:46:2f:e9:
                    30:44:0c:ef:41:04:3f:09:ee:44:d2:b3:43:01:04:
                    70:32:f3:a3:55:03:56:fc:e5:71:8c:2f:0d:21:f2:
                    1b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:52:01:D8:5B:FD:F0:99:07:98:DC:71:DA:91:26:2C:F6:78:CF:6C
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/32332e38382e3234312e302f32342d3234203d3e203536363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.88.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:9d:54:55:5f:f6:70:83:28:26:be:2e:55:e7:5f:b3:19:67:
         54:2f:b7:a3:66:d4:a1:54:67:d0:29:46:18:29:ff:cc:fe:fd:
         d0:89:73:dd:60:97:ca:f8:8c:32:72:89:ef:d0:0f:31:ef:6c:
         46:d0:ea:bb:df:ab:c7:56:9c:46:0f:0a:df:e4:b8:46:3f:b7:
         30:54:75:bd:e1:37:4f:6d:69:1c:7b:0b:22:76:59:e2:8f:30:
         8b:3c:4e:c9:24:6f:f5:42:1b:6a:a2:62:85:c9:7d:55:11:57:
         d8:66:1b:0e:94:db:37:82:8e:49:d8:56:b9:c5:3f:32:20:54:
         d7:8d:8d:03:9f:e4:e9:18:02:11:d9:7e:e3:4a:49:dd:fd:4d:
         da:dd:69:6d:18:91:90:f3:be:ea:50:51:cd:6b:1e:67:b9:ac:
         44:54:1d:61:29:9d:42:6c:93:cf:1f:ed:90:7c:bf:39:ce:f5:
         46:04:73:03:5e:98:c5:da:10:cc:5b:ae:82:b1:f6:4b:fc:0e:
         06:8b:df:db:6d:21:6f:93:37:7b:7c:12:5a:1b:24:c3:24:02:
         b0:ee:02:37:f2:ed:eb:b1:9c:bb:a6:5a:55:51:73:a6:2b:2e:
         98:6d:57:d8:05:8d:5a:16:e8:11:38:d9:88:f2:43:a8:3e:24:
         94:42:00:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----